> If not, why is the refresh interval so long by default (and even 1 HR
> minimum is still long time)? I'd like to see some way of triggering an
> immediate update of host/ip acls.
Yes, it is expensive. User group membership is only evaluated when you authenticate,
typically once every 25 hours or more. There was talk of a FlushHostCPS utility on
the info-afs list a few years back.
_______________________________________________
OpenAFS-devel mailing list
[EMAIL PROTECTED]
https://lists.openafs.org/mailman/listinfo/openafs-devel