Hi Wolfgang, Thanks for the reply ; I did not thought about name service caching shadowing the netgroup update (I used sssd in the past, not nscd). Invalidating the cache did indeed help though I had to restart nscd (service nscd restart) prior to correct execution (nscd -i netgroup was otherwise hanging).
It is not clear why the service had to be restarted ; I have investigated /var/syslog and found an error reported by nscd (sorry, french based ; translation follows): Jan 21 06:36:39 tjener nscd: 788 surveillance basée sur inotify désactivée pour fichier `/etc/netgroup': Aucun fichier ou dossier de ce type Jan 21 06:36:39 tjener nscd: 788 stat en échec pour fichier `/etc/netgroup'; nouvel essai plus tard: Aucun fichier ou dossier de ce type Jan 21 06:36:39 tjener nscd: 788 surveillance based on inotify deactivated for the file '/etc/netgroup': No files or folders of this type Jan 21 06:36:39 tjener nscd: 788 stat defeated for file `/etc/netgroup'; new tentative later: No file or folder of this type Here follows an extract from /var/syslog just after restarting the service which shows that the error remains after restart: Mar 29 19:38:37 tjener systemd[1]: Stopping Name Service Cache Daemon... Mar 29 19:38:37 tjener systemd[1]: Stopped Name Service Cache Daemon. Mar 29 19:38:37 tjener systemd[1]: Starting Name Service Cache Daemon... Mar 29 19:38:37 tjener nscd: 6016 fichier de surveillance `/etc/passwd` (1) Mar 29 19:38:37 tjener nscd: 6016 répertoire de surveillance `/etc` (2) Mar 29 19:38:37 tjener nscd: 6016 fichier de surveillance `/etc/group` (3) Mar 29 19:38:37 tjener nscd: 6016 répertoire de surveillance `/etc` (2) Mar 29 19:38:37 tjener nscd: 6016 fichier de surveillance `/etc/hosts` (4) Mar 29 19:38:37 tjener nscd: 6016 répertoire de surveillance `/etc` (2) Mar 29 19:38:37 tjener nscd: 6016 fichier de surveillance `/etc/resolv.conf` (5) Mar 29 19:38:37 tjener nscd: 6016 répertoire de surveillance `/etc` (2) Mar 29 19:38:37 tjener nscd: 6016 fichier de surveillance `/etc/services` (6) Mar 29 19:38:37 tjener nscd: 6016 répertoire de surveillance `/etc` (2) Mar 29 19:38:37 tjener nscd: 6016 surveillance basée sur inotify désactivée pour fichier `/etc/netgroup': Aucun fichier ou dossier de ce type Mar 29 19:38:37 tjener nscd: 6016 stat en échec pour fichier `/etc/netgroup'; nouvel essai plus tard: Aucun fichier ou dossier de ce type Mar 29 19:38:37 tjener systemd[1]: Started Name Service Cache Daemon. Mar 29 19:38:41 tjener nscd: 6016 surveillance basée sur inotify désactivée pour fichier `/etc/netgroup': Aucun fichier ou dossier de ce type Mar 29 19:38:56 tjener nscd: 6016 recherche fichier surveillé `/etc/netgroup': Aucun fichier I checked, /etc/netgroup does not exist (whihc may be understandable as the information is contained wihtin LDAP). I have not been able to evidence if this could be the root for the misbehavior. I'll try to install another virtual workstation and declare it on LDAP netgroup. I guess I should also document myself a little more on nscd. I'll give a look to Buster. Thanks again for the guidance ; I really appreciate the help. Best regards, Xavier TELLIER.
