external LDAP password caching

[deepblue]

Hi all,

I have a Zimbra setup (5.0.16 GA Network Edition) with external LDAP Authentication. Everything works good so far.

Today I noticed, that users who changed their password on the external LDAP can still login to the Zimbra Account
using the old password (login with the new password works as well).

Is this a Zimbra/LDAP cache feature? How could the max age of the cache be set?

Regards
Thomas

[Rich Graves]

This is documented behavior for Active Directory. Old passwords are still good for one hour. Other LDAP servers might behave similarly for similar reasons.

[deepblue]

Originally Posted by Rich Graves

This is documented behavior for Active Directory. Old passwords are still good for one hour. Other LDAP servers might behave similarly for similar reasons.

Hi Rich,

thanks a lot. You are probably right, as we are using AD as an external LDAP auth source... I did not know about this AD feature.

Regards
Thomas