Skip to content

Commit abd4e0b

Browse files
Add description of ldapUserCacheInvalidationInterval parameter
Agent-Logs-Url: https://github.com/percona/psmdb-docs/sessions/81d763b8-97e9-4465-9940-7a368d54973c Co-authored-by: rasika-chivate <95711051+rasika-chivate@users.noreply.github.com>
1 parent 829a92f commit abd4e0b

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

docs/authorization.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -127,6 +127,8 @@ As of version 7.0.17-31, Percona Server for MongoDB introduces parameters to opt
127127

128128
- `ldapUserCacheRefreshInterval` defines how often (in seconds) the server refreshes cached user information from LDAP **when interval-based refresh is enabled** (see `ldapShouldRefreshUserCacheEntries` below).
129129

130+
- `ldapUserCacheInvalidationInterval` controls how long (in seconds) cached LDAP user entries remain valid before they expire and are evicted from the cache. If you do not set this parameter explicitly, Percona Server for MongoDB uses the built-in default for your version. This parameter applies when `ldapShouldRefreshUserCacheEntries` is set to `false`.
131+
130132
- `ldapShouldRefreshUserCacheEntries` selects the refresh strategy and has the following semantics:
131133

132134
- When set to `true`, each cached `$external` user is periodically re-fetched from the LDAP server at the interval defined by `ldapUserCacheRefreshInterval`. The cache is updated only if the user’s roles have changed; otherwise, existing entries remain untouched, ensuring no disruption. If a user no longer exists in LDAP, their cache entry is invalidated individually.

0 commit comments

Comments
 (0)