initgroups doesn't consider ldap groups

I've recently set up OpenLDAP and libnss_ldap. The /etc/nsswitch.conf has the line:
group: files ldap
Secondary groups that are kept only in ldap are not being added to user sessions, however; it seems that initgroups() isn't finding them (checked by writing a short program to run initgroups() and seeing what the results are). 'groups ', however, gives the correct list, and a user can explicitly 'newgrp ' into a LDAP group, so nsswitch is giving that information in some fashion. I didn't file a bug, because I can't imagine that someone else wouldn't have noticed it, so I must have some sort of stupid configuration problem, but I'm apparently barking up the wrong trees. Any ideas?

No votes yet
Syndicate content