change lower_limit for reject_delay to 0.5s.

Some equipment is known to retry aggressively if the timeout is
about 1s

diff --git a/raddb/radiusd.conf.in b/raddb/radiusd.conf.in
index 376892e151857fa35c22662769acef3dcea08ecc..a95921718cf4ffa2c5766baee0c14d6c228d9865 100644 (file)
--- a/raddb/radiusd.conf.in
+++ b/raddb/radiusd.conf.in
@@ -599,9 +599,12 @@ security {
        #  rejects will be sent at 'cleanup_delay' time, when the request
        #  is deleted from the internal cache of requests.
        #
+       #  Some equipment is known to retry aggressively if the delay is about
+       #  one second.
+       #
        #  This number can be a decimal, e.g. 3.4
        #
-       #  Useful ranges: 1 to 5
+       #  Useful ranges: 0.5 to 5
        reject_delay = 1
 
        #

diff --git a/src/main/mainconfig.c b/src/main/mainconfig.c
index debfb296f030b4f336551d161b0babcb41833aa1..69b47a6be4f2ca69724260d51883c82960cbc643 100644 (file)
--- a/src/main/mainconfig.c
+++ b/src/main/mainconfig.c
@@ -1218,7 +1218,7 @@ do {\
         *      reject_delay can be zero.  OR 1 though 10.
         */
        if ((main_config.reject_delay.tv_sec != 0) || (main_config.reject_delay.tv_usec != 0)) {
-               FR_TIMEVAL_BOUND_CHECK("reject_delay", &main_config.reject_delay, >=, 1, 0);
+               FR_TIMEVAL_BOUND_CHECK("reject_delay", &main_config.reject_delay, >=, 0, USEC / 2);
        }
 
        FR_INTEGER_BOUND_CHECK("proxy_dedup_window", main_config.proxy_dedup_window, <=, 10);