Set Cache the Query Results

Use this group policy to specify whether the dad process caches name service query results about users and groups.

  • If this group policy is disabled, query results are not saved and must be retrieved whenever they are needed.
  • If this group policy is enabled or not configured, the dad process stores query results—for example, from user lookup requests—in memory for better performance.
  • If this group policy is enabled, you can use the Set max cache size and Set cache live time policies to control the number and duration of entries in the cache.
  • If this group policy is enabled, you can also use the daflush command to clear the cache manually when you want to ensure you get updated information. For example, if you remove the UNIX Login role for an Active Directory user, some information for that user might remain in the cache and be returned when you run a command such as getent passwd. You can run daflush to ensure that the user is removed completely from the local computer cache, including the auditing name service cache.

To use this group policy:

  1. Double click the policy in the right pane of the Group Policy Management Editor.
  2. On the Policy tab, select Enabled.
  3. Click OK to save settings in this policy.

This group policy modifies the cache.enable setting in the configuration file /etc/centrifyda/centrifyda.conf.