>What slapi-nis and ipa packages are on the IPA master side? >This all looks like IPA masters don't have RHEL 7.1 update 1 packages from >https://rhn.redhat.com/errata/RHSA-2015-0728.html where exactly this >problem with initgroups was fixed.
Yes, that was it! I had not applied those updates. I just ran "yum update" on the servers, and now I can log in to the RHEL 5 client. Thank you! David Guertin -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
