Using Netgroup with RedHat and IPA

I'm using IPA and RedHat (6.6 for the moment).

Every used defined on IPA can login in all the Linux server, that means that the connection between IPA and the server is fine.

I want now to limit the access with netgroup (as we do on other IPA client using IBM AIX).

I enabled pam_access, and updated /etc/security/access.conf to disable all user, excepted local root and member of netgroup.

I can't logon anymore with the IPA user. If I replace the netgroup with the IPA user name, I can logon...

Strange, any idea?

Thanks in advance,

Yves