When using CDC 5.0.1 agents on Fedora 16, the user's secondary groups are not showing up.
However it works on other machines in the same zone, just not with the combination of CDC 5.0.1 agents running on Fedora 16 machines.
id -a only shows primary group info.
groups and getent also only shows primary group info.
Fedora Core 16 changed /etc/nsswitch.conf
initgroups: centrifydc files
The initgroups line is new. Centrify will fix this in future releases.