Re: ptloader doesn't pick up group membership changes

"ellie timoney" <[email protected]>
Newsgroups gmane.mail.imap.cyrus
Message-ID <[email protected]>
Hi Adam,

On Fri, 25 Feb 2022, at 8:53 PM, Adam Minski wrote:
> I'm using ptloader to check Active Directory group membership.

"pts_module: ldap" in imapd.conf, I assume?

> If I change users group membership inside AD, ptloader doesn't pick the 
> change up.

What do you have set for ptscache_timeout?  If you don't have it set, the default is 3 hours.  Did you wait that long?

The documentation for ptscache_timeout implies that it's only for the "afskrb" module, but I believe that might just be out of date (since the specific thing it references no longer exists).  Skimming source, it looks like ptscache_timeout should apply regardless of which pts_module is in use.

> I can force picking up changes by expiring the cache (ptexpire -E0).
>
> Must I configure cache expiration inside cyrus.conf or should that work 
> without explicit configuration?

I don't think you should need to.  But, if setting ptscache_timeout to a value you're happy with doesn't sort it out, then maybe scheduling ptexpire in cyrus.conf is the correct thing to do.

> Documentation is a bit poor here.

Indeed!  If ptscache_timeout fixes it, let me know and I can rewrite that ptscache_timeout documentation to be current.

Cheers,

ellie

------------------------------------------
Cyrus: Info
Permalink: https://cyrus.topicbox.com/groups/info/Td2ae79537b6bf02b-M837db053a034f6d79b0127e9
Delivery options: https://cyrus.topicbox.com/groups/info/subscription
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.