On Tue, Jan 26, 2016 at 10:57:53AM +0000, Murdoch, Steven wrote:
The Primary group 100 exists on the LDAP Server and on the SSSD Client - but the users
only exist on the LDAP server (no users added to SSSD).
Sorry, I am not clear what you mean:
> you have to add the primary group with GID 100 on the LDAP server as well
Attached are the nss and domain logs on the SSSD Client as requested.
It looks the only interesting request in the nss logs:
(Mon Jan 25 10:18:21 2016) [sssd[nss]] [nss_cmd_getbynam] (0x0400): Running command 
with input [bjones].
is not covered in the domain log which ends 30s earlier. Can you add the
missing part of the domain log or send new logs which both cover the