WORKAROUND
These commands can be run on Solaris 11 to disable nscd passwd caching:
# /usr/sbin/svccfg -s system/name-service/cache addpg password application
# /usr/sbin/svccfg -s system/name-service/cache setprop password/keep_hot_count = integer: 20
# /usr/sbin/svccfg -s system/name-service/cache setprop password/value_authorization = astring: solaris.smf.value.name-service.cache
# /usr/sbin/svccfg -s system/name-service/cache setprop password/check_file_interval = integer: 0
# /usr/sbin/svccfg -s system/name-service/cache setprop password/check_files = boolean: false
# /usr/sbin/svccfg -s system/name-service/cache setprop password/positive_time_to_live = integer: 0
# /usr/sbin/svccfg -s system/name-service/cache setprop password/negative_time_to_live = integer: 5
# /usr/sbin/svccfg -s system/name-service/cache setprop password/enable_cache = boolean: false
On Solaris 11.4, these three additinal commands must also be run:
# svcadm disable -ts name-service/cache
# svcadm enable -ts name-service/cache
# svcadm refresh system/name-service/cache
STATUS
Enhancement Request 800015 has been created to handle configuring nscd correctly in Solaris 11.