Active Directory Password Cacheing? (Bug?)

[iamq]

Hi,

php-5.1.6-1.2
mysql-5.0.27-1.fc5
SugarCRM OS Version 4.5.1 (Build 1197)
Fedora Core 5 2.6.18-1.2257.fc5smp
httpd-2.2.2-1.2 (Apache)

Is there a problem with LDAP/AD password cache ?

I have users set up on a Windows 2003 domain, they can log in just fine to Sugar. But... If my user changes there password on the windows box, sugar will let them log on with *either* the old or new password.

I have removed cookies from the browser and re-tested, problem is still there, a stop & start on apache didn't do any good either.

The config for my AD is as follows:

Base DN: CN=Users,DC=hqoffice,DC=mynet,DC=local
Bind Attribute: userPrincipalName
Login Attribute: sAMAccountName
Authenticated User: HQOFFICE\SugarCRM
Create Users is ticked.

I use sAMAccountName so my users do not have to logon as 'user@domain'

Any ideas folks as to where best to start looking ?

I dont *think* the Windows AD is at fault, as I have other services on the same server that use winbind and they all lookup in realtime and will only work with the *current* password for that user.

Thanks.

[iamq]

Just to follow up my own post.

It looks like the passwords are cached for 12/24hrs ? As thismorning my test users old password is not working any longer.

Cany anyone confirm this is a bug/issue/other please

Cheers.