Read the documentation:

http://www.sogo.nu/english/nc/support/faq/article/sogo-caches-my-password-1.html

Sorry but I'm already using the parameter as noted:

sogod SOGoCacheCleanupInterval 5

Is that all right?

That means the password will get cached for at least 5 mins. SOGo will not cache the password anywhere else.

Yes that was what I supposed to be.

I tried to set the parameter to 0, 1 or 5, it just doens't care for it.

The only way is to truncate all the tables to get the new password from ldap.

Does is it the expected?

And now a most strange thing now... after change the password and set the value to: SOGoCacheCleanupInterval 1

I rebooted the server and now, I may login with old and new passwords with same username and account.

And if I change the password again I can use any of the last passwords.

Do you have more than one AD servers? Sometimes replication can take a few minutes to carry on with AD.

I've just tested here and it works as expected. If you invalidate the memcached cache, you can't login with the old password.

Reduced severity to minor as no feedback was provided in many weeks.

No feedback provided, closing.