Correct Ldap behavior theory question (newbie)

[jouell]

Hi

If have userX in Ldap groupX, who can login to serverX, but is NOT in the local groupX group in /etc/group, should userX be granted permissions to files the groupX group has access to on serverX?

I know the reverse is true (local group entry but no ldap entry will gain you access)


note of /etc/nsswitch.conf is:

passwd: compat ldap
group: compat ldap
shadow: compat ldap

Can someone sanity check me?

Thanks!
-John