Unable to look up newer users in ADS with getent passwd

[bomahony]

I have connected a RHEL5 server to a win2003r3 active directory network. I have installed the services on the windows domain controller, which updated the ADS schema. This added a tab to both users and groups called "Unix Attributes"

While mucking about with this, i edited one user, added a UID/GID and can look him up from the RHEL machine using "getent passwd". As i went further i added two groups, and they are visible using "getent group"

However, i have now edited two more users, but they are not visible via "getent passwd". If i add new ids to groups, they appear. Also any changes to users & groups appear (changing ID or shell etc).

This morning i added attributes to another user and he worked fine. So i did some further research. All the users that are not showing up in the "getent passwd" are relatively new. As in they are all added to Active Directory in the last year or so. However after looking through all the tabs i can find no differences in the actual users.....

[bomahony]

Seems this is actually an Active Directory Issue. There was an exchange upgrade a while back, and the admins now create the users via exchange rather than via the domain controller. However now regardless of where the accounts are created, they are not visible to a "getent passwd"