I'm using SSSD and realmd to join a machine to active directory. When I run id on my user, I only get the primary group. If I run getent group "groupname", it works...sometimes. Other times, it returns blank. This is on a CentOS 7 machine (sssd 1.16.0) $ id jdratlif uid=752603752(jdratlif) gid=1572000513(domain users) groups=1572000513(domain users) $ getent group ssh-test-users2 ssh-test-users2:*:752629809: $ sss_cache -E $ getent group ssh-test-users2 ssh-test-users2:*:752629809:jdratlif $ id jdratlif uid=752603752(jdratlif) gid=1572000513(domain users) groups=1572000513(domain users) $ getent group ssh-test-users2 ssh-test-users2:*:752629809: $ id jdratlif uid=752603752(jdratlif) gid=1572000513(domain users) groups=1572000513(domain users) This was all in the span of 2 minutes. Let me know what other information would be helpful. Thanks. -- John Ratliff Research Storage / UITS / Pervasive Technology Institute Indiana University | https://pti.iu.edu