Anyone who uses groups to assign permissions knows the problem. After the assignment to a new group, this right is not immediately effective. The tip is then usually to re-login. However, if a server is authorized e.g. to a certificate via a group membership, this means a restart of the server. However, the correct solution is much simpler: deleting the Kerberos ticket and removing the cache entries from the certificate store.

Info Sorry, but all older blod entries are only available in german. I try to translate those which might be still relevant one at a time, but if you are interesent in all blog entries, change the language to german and use Deepl or Google translate in the meantime.