Comment # 6 on bug 1162277 from Christian Boltz

(In reply to Dr. Werner Fink from comment #5)
> Just debugging a bug where netgroups are a problem ... for this I use a
> ypserv on one host and an other host as yp client ... I see
> 
>   id werner
>   id: ´werner´: no such user
>   systemctl stop nscd.werner
>   id werner
>   <valid response>

That might indeed be a bug in nscd and/or the AppArmor profile for nscd.

Do you see any DENIED lines in /var/log/audit/audit.log?

(Technically this is a different issue from what Martin reported, so maybe open
a separate bug.)