John W. Sopko Jr. wrote: > So if a user principal is in many groups and exceeds 12k > this will be a problem? If the ticket size increases beyond 12000 bytes, there will be an authentication error. As AFS does not use the PAC data, there is no reason for it to be generated. Apply the flag Doug indicated.