LDAPUserFolder - Caches: View Available Groups and Cached Users

Description

This view shows the cache of currently authenticated users and the groups exposed by your LDAP server for authentication purposes.

Users that can be cached are created either through "real" logins where a physical user provided a login and password (these end up in the "authenticated" cache) or via internal lookups that are done without passwords (those are cached in the "anonymous" cache). Keeping separate caches for these different kinds of users avoids intermingling and possible privilege escalation because no "anonymous" cached user object will ever be used to perform actions that require real authentication and elevated privileges.

Elements

Purge All caches

This will purge all caches inside the LDAPUserFolder. This includes the cache of currently authenticated users, the log and any cached username lists.

Cache Timeouts

This form allows tweaking the cache timeout values for the authenticated and anonymous caches.

Cached users

These are the users in the cache of currently cached users. Anonymous users or Emergency User accounts will not show up in this table.

Every time an authenticated user makes a request to Zope, the username and password are verified. Depending on site traffic and number of users that log in through the LDAPUserFolder this process can happen several times a second. Since a lookup on the LDAP Server can be quite slow, the product will cache the user information for 10 minutes. This is the duration of a typical session.