A job (LdapDataCollector) runs on Kron PAM to synchronize users and user groups from an LDAP/Active Directory server. This job runs periodically, and the changes made to the LDAP/AD since the job last run are applied to Kron PAM. Consequently, any user who has left the company is automatically removed from Kron PAM. Kron PAM can also add any new users quickly.
You can change the automated job period by editing the Cron expressions.