Unable to get Active Directory group memberships for some accounts only

Solution Verified - Updated -

Issue

  • Why do some AD accounts display secondary groups but others do not?
  • Why is SSSD unable to retrieve tokenGroups for some AD accounts?

Environment

  • Red Hat Enterprise Linux
  • Active Directory (AD)
  • SSSD

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content