Centrify DirectControl 4.4.1 on RedHat platform
Why executing "newgrp groupname" prompts for AD user password ?
User will be prompted for password if the groupname being supplied to newgrp command exists in /etc/gshadow and does not contain any members. This is how newgrp works as per the manual pages on the command.
You can either rename the /etc/gshadow to /etc/gshadow.save or comment out the group name in /etc/gshadow. Running newgrp again should not prompt for password.