# Ldap users (after ldap config) in chef run

**URL:** <https://discourse.chef.io/t/ldap-users-after-ldap-config-in-chef-run/2581>\
**Category:** Chef Infra (archive)\
**Created:** [March 21, 2012, 7:22pm UTC](https://discourse.chef.io/t/ldap-users-after-ldap-config-in-chef-run/2581 "2012-03-21T19:22:29Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Van\_Fossan\_Randy](https://avatars.discourse-cdn.com/v4/letter/v/8797f3/32.png) [@Van\_Fossan\_Randy](https://discourse.chef.io/u/Van_Fossan_Randy)\
**Post date:** [March 21, 2012, 7:22pm UTC](https://discourse.chef.io/t/ldap-users-after-ldap-config-in-chef-run/2581/1 "2012-03-21T19:22:29Z")

</div>

I have a base role that configures ldap on the client and cycles the  
nscd daemon. Later in that role I try to create some directories  
using “owner” and “group” from these ldap accounts. It always fails on  
the first pass through. If I run it again, it will work fine.

I suspect that the chef run cannot yet see these accounts until after  
the chef run is complete. If I run 'getent passwd | grep account’  
right after the chef run, I can indeed see the account.

Anyone have any idea how to deal with ldap account changes within a chef  
run? Does ohai need to be rerun in the middle of the run somehow?

Thanks

Randy