When we login in directly to a machine the user is only part of their group. They are missing the other groups they belong too.
Although we can issue 'groups username' and it will return all the groups they are suppose to be in.
Meanwhile 'goups' by itself only shows them belong to their own group
If we SSH into a machine (even the current one) all the groups they belong to are available.
Using LDAP to store groups.
group: files ldap
What can be causing this? How are groups associated with a user during login?