RHEL 6 comes by default only allowing LDAP user and group names of 3 or more characters. "rt" will not be looked up, for those who use that. Solution is here: https://docs.rice.edu/confluence/display/ITTUT/RHEL6+Gotchas