On 13 July 2017 at 00:48, bogusmaster--- via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
> On Thu, Jul 06, 2017 at 02:29:34PM -0000, bogusmaster--- via FreeIPA-users wrote:

I have verified that hint. I've stopped sssd daemon, cleared the cache and started it back again. Although ipa commands are returning correct members of the group, when in issue getent group ... on the server it still returns old members of the group that are not present in the group returned by ipa command.
Can you please advise on how I can troubleshoot it further?


There are two parts to IPA - ipa server which does the "server" part, and SSSD, which does the client part. On the IPA server itself, if you are using SSSD, you might need to also update SSSD to 1.15.2-5 and clear the cache?

ipa-client basically installs SSSD and configures it for the ipa server in question.

cheers
L.


------
"Mission Statement: To provide hope and inspiration for collective action, to build collective power, to achieve collective transformation, rooted in grief and rage but pointed towards vision and dreams."

 - Patrisse Cullors, Black Lives Matter founder