Sachin Prabhu wrote: We had a user report that for an export shared with sec=krb5*, any changes in user credentials(ex: add user to a secondary group) take some time before they take effect over the NFS share. Re-authenticating, either by removing the service ticket or by re-running kinit at the client, should also flush the old credentials. Can you confirm that works? -- To unsubscribe from this list: send the line "unsubscribe linux-nfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html