On Thu, 2014-02-27 at 11:55 +0100, Pavel Březina wrote:
[snip]
Nack.
It is still possible having a netgroup expired if
refresh_expired_interval is misconfigured (> entry_cache_timeout). Thus
you still need to check if the netgroup is valid, maybe throw a visible
warning if it is expired and periodic refresh is enabled.
[snip]
So how about checking that:
refresh_expired_intervat < entry_cache_timeout
when configuration is loaded?
I thing these values are never changed although they are not const.