LDAP caching in IIS - user can still login after removing from a group #6417

cpsworld created 5 years ago

I have LDAP Auth working and I get the UserPrincipal then get the user's groups: PrincipalSearchResult<Principal> groups = userPrincipal.GetAuthorizationGroups(); I use this to restrict access by group.

This works, but if I then remove the user from the group I still get the old groups for about 20 minutes. After an IIS Reset the credentials are correct, so I think this is IIS caching but I haven't found where to set the expiration.

Anyone know where to set IIS AD caching?

1 Answer(s)

0

ismcagdas created 5 years ago
Support Team

Hi @cpsworld

This might be the setting you are looking for https://docs.microsoft.com/en-us/iis/configuration/system.webserver/security/authentication/windowsauthentication/#configuration but I think you can find better information on the web.

Have an answer to this question? Log in and write your answer.