Secondary Group not listing

[warron.french]

Hello all,
I am working with all CentOS-6.7 machines running 389-ds.

I had created to groups in my DIT:
1.  non-XYusers, and
2.  XY-auditors

I added 2 accounts to the DIT.
Account1, is a member of non-XYusers, and was manually added through the
389-console to the XY-auditors group as well.

The same is true of Account2; exact same configuration.

Anyway, when I run on a centOS-6.7 client the following commands:

*id -a Account1* (or Account2)  all that I see listed is the primary Group
= non-XYusers.
*groups Account1*

Any ideas on how to correct this behavior, so that both groups are listed?
I am trying to do this so that I can enable these people to perform audit
functions.

Thanks in advance,
--------------------------
Warron French

[William Brown]

On Tue, 2016-05-10 at 11:39 -0400, warron.french wrote:
> Hello all,
> I am working with all CentOS-6.7 machines running 389-ds.
>
> I had created to groups in my DIT:
> 1.  non-XYusers, and
> 2.  XY-auditors
>
> I added 2 accounts to the DIT.
> Account1, is a member of non-XYusers, and was manually added through the
> 389-console to the XY-auditors group as well.
>
> The same is true of Account2; exact same configuration.
>
> Anyway, when I run on a centOS-6.7 client the following commands:
>
> *id -a Account1* (or Account2)  all that I see listed is the primary Group
> = non-XYusers.
> *groups Account1*
>
> Any ideas on how to correct this behavior, so that both groups are listed?
> I am trying to do this so that I can enable these people to perform audit
> functions.

I think this is a pam configuration error. Are you using pam ldap, nslcd, or sssd?