On Wed, 2012-07-25 at 10:51 -0700, Jim Shi wrote: > Hi, I have a question. Does KDC cache anything from ldap? No. > That is, if I update ldap, KDC will see the results immediately? Yes. Simo. -- Simo Sorce * Red Hat, Inc * New York