]> git.ipfire.org Git - thirdparty/freeradius-server.git/commitdiff
Remove unnecessary check to update REALM
authorAlejandro Perez <alejandro.perez.mendez@gmail.com>
Tue, 9 May 2017 12:13:52 +0000 (14:13 +0200)
committerAlan T. DeKok <aland@freeradius.org>
Tue, 9 May 2017 13:37:21 +0000 (09:37 -0400)
Existing code precluded a REALM from being updated if there were traffic within the last 5 minutes.
This is an error since when the TLS keys expire, the home server will reject client’s attempts to establish a connection, leading to up to 5 minutes of denied user authentications.

src/modules/rlm_realm/trustrouter.c

index 4bb9eb4ffd55345d7f9a108b909e9a6be5dc8146..3f97242f637d8d9fa4795654dec34ad9d367cd73 100644 (file)
@@ -317,12 +317,6 @@ static bool update_required(REALM const *r)
                        continue;
                }
 
-               /*
-                *      This server has received a packet in the last
-                *      5 minutes.  It doesn't need an update.
-                */
-               if ((now - server->last_packet_recv) < 300) return false;
-
                /*
                 *      If we've opened in the last 10 minutes, then
                 *      open rather than update.