LDAP repository information copy

Does the openfire server copy username and password from LDAP repository to DB? or does it read only?

Thanks.

While I am not 100% certain of this, my Cisco logs show the OpenFire querying the LDAP server for each authenication attempt to log in. This leads me to believe that the OpenFire server does NOT retain any LDAP information locally or on the Database.

I can however say that the OpenFire server has absolutely no authority to make any changes to LDAP/ADS and can not make any changes to it. Again, read only.

It creates some container for the username but authentication is done against the LDAP everytime. The container can store store offline messages, and avatars.

Thank you very much