Description of problem: Fedora does not ship the latest nslcd Version available. It contains a build of the 0.7.x tree with backports. With this version, only primary groups are resolved in our setup. I have created a test build of the latest 0.8.11 release which works correctly. I would prefer if you could always provide the latest stable version in Fedora, even if oldstable is needed for EL. Otherwise, please pick the related patches and include it in your build. If you need some help, in maintaining a more current version for Fedora, feel free to ask. Version-Release number of selected component (if applicable): Version : 0.7.16 Release : 4.fc18
I agree it might be the time to move to the 0.8 version in Fedora.
Just to avoid any confusion: release 0.8.11 of nss-pam-ldapd load's the secondary groups of the nslcd user when starting the nslcd daemon. It shouldn't change anything regarding secondary groups of LDAP users.
Dear Arthur. Thanks for your comment. I have not yet debugged what causes the problem on the version shipped with Fedora, I just made sure that it works with the latest release.