From: Alan T. DeKok <aland@freeradius.org>
Date: Fri, 21 Mar 2025 06:21:40 +0000 (+0700)
Subject: change lower_limit for reject_delay to 0.5s.
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9bbf284669396e1d7e45731a65d525d47a87622e;p=thirdparty%2Ffreeradius-server.git

change lower_limit for reject_delay to 0.5s.

Some equipment is known to retry aggressively if the timeout is
about 1s
---

diff --git a/raddb/radiusd.conf.in b/raddb/radiusd.conf.in
index 376892e151..a95921718c 100644
--- a/raddb/radiusd.conf.in
+++ b/raddb/radiusd.conf.in
@@ -599,9 +599,12 @@ security {
 	#  rejects will be sent at 'cleanup_delay' time, when the request
 	#  is deleted from the internal cache of requests.
 	#
+	#  Some equipment is known to retry aggressively if the delay is about
+	#  one second.
+	#
 	#  This number can be a decimal, e.g. 3.4
 	#
-	#  Useful ranges: 1 to 5
+	#  Useful ranges: 0.5 to 5
 	reject_delay = 1
 
 	#
diff --git a/src/main/mainconfig.c b/src/main/mainconfig.c
index debfb296f0..69b47a6be4 100644
--- a/src/main/mainconfig.c
+++ b/src/main/mainconfig.c
@@ -1218,7 +1218,7 @@ do {\
 	 *	reject_delay can be zero.  OR 1 though 10.
 	 */
 	if ((main_config.reject_delay.tv_sec != 0) || (main_config.reject_delay.tv_usec != 0)) {
-		FR_TIMEVAL_BOUND_CHECK("reject_delay", &main_config.reject_delay, >=, 1, 0);
+		FR_TIMEVAL_BOUND_CHECK("reject_delay", &main_config.reject_delay, >=, 0, USEC / 2);
 	}
 
 	FR_INTEGER_BOUND_CHECK("proxy_dedup_window", main_config.proxy_dedup_window, <=, 10);