Technical Tip: Change FortiAnalyzer/FortiManager LDAP cache timeout

LDAP Remote Authentication in FortiAnalyzer or FortiManager can be used for admin login or Report LDAP query. Sometimes changes in the LDAP are not reflected immediately in FortiAnalyzer/FortiManager, which could be due to the ldap-cache-timeout.

The default value for LDAP cache timeout is 86400 (24 hours). This value can be decreased or increased as required:

config system global
    set ldap-cache-timeout <integer> <----- Time in seconds. Can be anywhere from 1 to 31,536,000 (1 year).
    set ldapconntimeout <integer> <----- Time in milliseconds. The default is 60,000.
end

Related document:

LDAP Servers - FortiAnalyzer 7.6.3 administration guide

Technical Tip: Newly created Active Directory groups are not immediately visible