We have one RAC cluster of machines where the local UID:GID of a couple users (oracle and grid) do not match the UID:GID of those same users in LDAP. Ultimately we ought to change the UID and GID of these two users on every system in the cluster (and ownership of all their files) but getting the downtime to do that is difficult. Also, these two users need to be able to authenticate over the network from each node to every other node in the cluster. Just disabling remote auth for these users is not an option.
Is there any way to disable LDAP lookups for specific groups or users on a server? Perhaps with /etc/security/access.conf or some PAM setting?
These are Oracle Linux servers.