Have been asked about this recently

I know of TID 7003298 relating to ldap cache timeouts and can see the reasoning behind the 60 minute defaults

However in some cases people don't want to wait 60 minutes for the group to refresh in ZCM. Also bundles are assigned by AD groups, not by ZCM groups so we need to see the group change quickly in some cases

Is there a command that can be run on a primary server to manually update the ldap cache, or is there some other way around this?