From: Alejandro Perez <alejandro.perez.mendez@gmail.com>
Date: Tue, 9 May 2017 12:13:52 +0000 (+0200)
Subject: Remove unnecessary check to update REALM
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4a477dba25e0ebef97281702f4b2a0cf0558a21d;p=thirdparty%2Ffreeradius-server.git

Remove unnecessary check to update REALM

Existing code precluded a REALM from being updated if there were traffic within the last 5 minutes.
This is an error since when the TLS keys expire, the home server will reject client’s attempts to establish a connection, leading to up to 5 minutes of denied user authentications.
---

diff --git a/src/modules/rlm_realm/trustrouter.c b/src/modules/rlm_realm/trustrouter.c
index 4bb9eb4ffd5..3f97242f637 100644
--- a/src/modules/rlm_realm/trustrouter.c
+++ b/src/modules/rlm_realm/trustrouter.c
@@ -317,12 +317,6 @@ static bool update_required(REALM const *r)
 			continue;
 		}
 
-		/*
-		 *	This server has received a packet in the last
-		 *	5 minutes.  It doesn't need an update.
-		 */
-		if ((now - server->last_packet_recv) < 300) return false;
-
 		/*
 		 *	If we've opened in the last 10 minutes, then
 		 *	open rather than update.