Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Currently, I have a LDAP server (running ClearOS if that makes any difference) containing a database of users.

So, I went and setup LDAP on a couple of my debian VMs, using libpam-ldapd and I discovered this odd problem.

My group/user mapping would show up when running

getent group

but the secondary groups would not show up when running



Here is my /etc/nslcd.conf

# /etc/nslcd.conf
# nslcd configuration file. See nslcd.conf(5)
# for details.

# The user and group nslcd should run as.
uid nslcd
gid nslcd

# The location at which the LDAP server(s) should be reachable.
uri ldaps://

# The search base that will be used for all queries.
base dc=pnet,dc=sandyd,dc=me

# The LDAP protocol version to use.
#ldap_version 3

# The DN to bind with for normal lookups.
binddn cn=manager,ou=internal,dc=pnet,dc=sandyd,dc=me
bindpw Me29Dakyoz8Wn2zI

# The DN used for password modifications by root.
#rootpwmoddn cn=admin,dc=example,dc=com

# SSL options
ssl on
tls_reqcert never

# The search scope.
#scope sub

#filter group (&(objectClass=group)(gidNumber=*))
map group uniqueMember member
share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.