Refreshing Groups

Mar 8, 2012 at 3:17 PM

I am having an issue where Waffle appears to not have the latest list of user groups during Tomcat authentication (valve). I added my user to a local group, restarted Tomcat, the browser, and the log still does not show my user in that local group. I am able to use C# library to enumerate groups, and the group is displayed properly when I do this. Any ideas? Is there some kind of caching used in the authenticator? Is it possible that if the KRB ticket is valid, that no new group enumeration happens?

Waffle 1.4/Tomcat 6/Windows 7 X64



Mar 9, 2012 at 12:40 AM

This is caused by the group cache. But I have no idea how to force expiration. I think it's called "universal group caching". See if Google helps.