Hi! I am probably missing something really obvious. I have an IPA server that is still in development. I have created two test clients that are clones of existing VMs. One is Centos 7.7 and the other is Solaris10. The Centos 7.7 one is working great. The Solaris one works now for getent passwd user and. for logging in but the groups command is returning the list from the old LDAP server and I can't figure out how it is getting that.

The content of the /var/ldap/ldap_client_file is :

root # cat ldap_client_file # # Do not edit this file manually; your changes will be lost.Please use ldapclient (1M) instead. # NS_LDAP_FILE_VERSION= 2.0 NS_LDAP_SERVERS= 172.27.104.187 NS_LDAP_SEARCH_BASEDN= dc=channing,dc=harvard,dc=edu NS_LDAP_AUTH= tls:simple NS_LDAP_SEARCH_SCOPE= sub NS_LDAP_SERVER_PREF= chanidm.bwh.harvard.edu NS_LDAP_CACHETTL= 0 NS_LDAP_CREDENTIAL_LEVEL= proxy NS_LDAP_SERVICE_SEARCH_DESC= passwd:cn=users,cn=accounts,dc=channing,dc=harvard,dc=edu NS_LDAP_SERVICE_SEARCH_DESC= group:cn=groups,cn=accounts,dc=channing,dc=harvard,dc=edu NS_LDAP_ATTRIBUTEMAP= passwd:uidnumber=uidNumber NS_LDAP_ATTRIBUTEMAP= group:memberuid=memberUid NS_LDAP_ATTRIBUTEMAP= group:gidnumber=gidNumber NS_LDAP_ATTRIBUTEMAP= passwd:gidnumber=gidNumber NS_LDAP_OBJECTCLASSMAP= group:posixGroup=posixgroup NS_LDAP_SERVICE_AUTH_METHOD= pam_ldap:tls:simple NS_LDAP_SERVICE_AUTH_METHOD= passwd-cmd:tls:simple

Any suggestions?

Thank you all.

Lois Bennett, MSEE Senior System Administrator Channing  Division of Network Medicine, Brigham & Women's Hospital A Teaching Affiliate of Harvard Medical School and Harvard School of Public Health