[Freeipa-users] IPA clients doesn't see all user's group

[Jakub Hrozek]

On Wed, Jul 31, 2013 at 02:04:27PM +0300, Vitaly wrote:
> I have IPA2  on RHEL6 server and RHEL/CENTOS 5/6 clients.
> For some users Linux doesn't see all  groups. For example:
> 
> #ipa user-show myuser
> .......
> Member of groups: group1,group2,group3
> 
> #id myuser
> uid=1815600038(myuser) gid=1002(group1) groups=1002(group1),1000(group2)
> 
> How I can debug and fix this?
> 
> TIA,
> Vitaly

What exact SSSD version is this?

Was user added to group3 recently so that the cache might have stale records?

Do you see the same problem on both RHEL5 and RHEL6 clients?