[OpenAFS-devel] is hostaclRefresh an expensive operation?

[aeneous@speakeasy.org]

> If not, why is the refresh interval so long by default (and even 1 HR
> minimum is still long time)? I'd like to see some way of triggering an
> immediate update of host/ip acls.

Yes, it is expensive.  User group membership is only evaluated when you authenticate, typically once every 25 hours or more.  There was talk of a FlushHostCPS utility on the info-afs list a few years back.