In the AFS 3.2 version of the code the protection groups
that a host belongs too are cached by the fileserver at
the time of the first client connection from that host.
They get refreshed again only when a new connection gets
reestablished from that client 2 or more hours after the
last check. This is different than user protection groups
which get refreshed every time that a new connection is
established (guaranteed to happen when a user gets new
tokens). The only sure way to have the host protection groups
refreshed on a particular fileserver machine is to restart the
fileserver binary. Restarting the ptserver is not necessary.
Dimitris Varotsis
Systems Software Staff
P.S. The above is only my understanding of Transarc's version of the
code. We run a different version of that code here at CMU so I could
easily be wrong.
