Skip to main content
smkml
Staff
smkml
Staff
August 21, 2025

Technical Tip: LDAP users update under User Definition

  • August 21, 2025
  • 0 replies
  • 339 views
Description

 

This article describes how to get updated users in AD servers in FortiManager under Policy & Objects -> User & Authentication -> User Definition ->  select 'Create New' and Select 'LDAP' for Type, where previously these were not able to update manually or automatically. 

 

users not updated if changes happened in AD server.png

 

Scope

 

FortiManager v7.4.8 and above

 

Solution

 

The previous version of FortiManager will not update the information changes on the AD server as close to real-time, compared to FortiGate behavior, since LDAP saves the caching onthe  browser side and not from the server side.

 

The option is to change below config global value in FortiManager to reduce the timeout:

 

FMG #config system global

(global)# set ldap-cache-timeout 100 (default =86400)

end

 

v7.4.8 and above introduces a Refresh button to update the caches from the browser itself.

 

748 introduce Refresh button.png

    Terms & ConditionsAccessibility statement