Description
This article describes how to get updated users in AD servers in FortiManager under Policy & Objects -> User & Authentication -> User Definition -> select 'Create New' and Select 'LDAP' for Type, where previously these were not able to update manually or automatically.
Scope
FortiManager v7.4.8 and above
Solution
The previous version of FortiManager will not update the information changes on the AD server as close to real-time, compared to FortiGate behavior, since LDAP saves the caching onthe browser side and not from the server side.
The option is to change below config global value in FortiManager to reduce the timeout:
FMG #config system global
(global)# set ldap-cache-timeout 100 (default =86400)
end
v7.4.8 and above introduces a Refresh button to update the caches from the browser itself.
