Skip to main content
Solved

Active Directory "Refresh" interval on JSS

  • May 18, 2015
  • 4 replies
  • 19 views

Forum|alt.badge.img+9

Does anyone know what interval the JSS regularly checks in with an AD server to aggregate updated lists of users and groups? Or is the connection persistent/on-demand? In our environment our search base is set pretty wide, e.g. "DC=pretendco,DC=net", but when a member of our directory services team moved several groups from one OU to another, we could no longer use our AD accounts to login to the JSS until he moved them back. Any thoughts on this?

Best answer by davidacland

I could be wrong but I was under the impression it was on demand.

I didn't think there was any caching going on, other than the usual 15-min AD replication intervals.

4 replies

davidacland
Forum|alt.badge.img+18
  • Valued Contributor
  • Answer
  • May 18, 2015

I could be wrong but I was under the impression it was on demand.

I didn't think there was any caching going on, other than the usual 15-min AD replication intervals.


bentoms
Forum|alt.badge.img+35
  • Hall of Fame
  • May 19, 2015

@timlarsen as @davidacland said, I think the lookups are live.

BUT, for I think the JSS keeps a record of known users CN's. Which may not refresh.


Forum|alt.badge.img+9
  • Contributor
  • May 19, 2015

@timlarsen did you make sure you updated this section of your jss?


Forum|alt.badge.img+9
  • Author
  • Valued Contributor
  • May 19, 2015

Thanks all! I'm going to forward @GaToRAiD's screenshot to our AD team to see what their recommendations are next time they make any changes.