How "rebuild directory service cache" in Directory service works?

Hi experts,

I have several questions about this function.

  1. Does it the update the cache from AD immediately. I created several groups and users in the AD, but it didn’t show the new groups and users with command “wbinfo -u” and “wbinfo -g“ after rebuilding directory service cache
  2. What protocol does it use to get information from AD? LDAP or RPC
  3. Why the truenas can still get the user or group info even if I deny the AD account of truenas to read the specific user or group, how I achieve this properly

Thanks!

I am having the same issue and was not able to find clear direction on v25.10 regarding. Can someone shine some light on this cache rebuid issue for AD. Thank you in advance.

Hi @RangerInpeach ,

I did some digging and found that midclt call into the API methods is the way newer generation of Truenas are operating under.

Below find two interesting methods to explore:

I am new to truenas, so I am doing a bit of diggin since I would like to learn more about how directory services integrate into their product. Please keep us posted on your findings. Thanks.