# "password_header" configuration items have been removed.
# Since they were deprecated long ago, this change should not
# affect anyone.
+
+ #
+ # Keepalive configuration. This MAY NOT be supported by your
+ # LDAP library. If these configuration entries appear in the
+ # output of "radiusd -X", then they are supported. Otherwise,
+ # they are unsupported, and changing them will do nothing.
+ #
+ keepalive {
+ # LDAP_OPT_X_KEEPALIVE_IDLE
+ idle = 60
+
+ # LDAP_OPT_X_KEEPALIVE_PROBES
+ probes = 3
+
+ # LDAP_OPT_X_KEEPALIVE_INTERVAL
+ interval = 3
+ }
}
/* The default setting for TLS Certificate Verification */
#define TLS_DEFAULT_VERIFY "allow"
+#if defined(LDAP_OPT_X_KEEPALIVE_IDLE) || defined(LDAP_OPT_X_KEEPALIVE_PROBES) || defined (LDAP_OPT_ERROR_NUMBER)
static CONF_PARSER keepalive_config[] = {
#ifdef LDAP_OPT_X_KEEPALIVE_IDLE
{"idle", PW_TYPE_INTEGER, offsetof(ldap_instance,keepalive_idle), NULL, "60"},
{ NULL, -1, 0, NULL, NULL }
};
+#endf /* KEEPALIVE */
static CONF_PARSER tls_config[] = {
{"start_tls", PW_TYPE_BOOLEAN,
{"set_auth_type", PW_TYPE_BOOLEAN, offsetof(ldap_instance,set_auth_type), NULL, "yes"},
+#if defined(LDAP_OPT_X_KEEPALIVE_IDLE) || defined(LDAP_OPT_X_KEEPALIVE_PROBES) || defined (LDAP_OPT_ERROR_NUMBER)
{ "keepalive", PW_TYPE_SUBSECTION, 0, NULL, (const void *) keepalive_config },
+#endif
+
{NULL, -1, 0, NULL, NULL}
};