On Fri, Feb 18, 2011 at 04:28:13PM -0500, Stephen Gallagher wrote:
-----BEGIN PGP SIGNED MESSAGE-----
The IPA provider was not properly removing groups in the cache
that the user was no longer a member of.
I've have also checked plain LDAP with ldap_schema = rfc2307 and
rfc2307bis and both were working as expected.
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
-----END PGP SIGNATURE-----