From fb5c62f9ac1526f858bd65567963d722a5ecb274 Mon Sep 17 00:00:00 2001 From: Alejandro Perez Date: Tue, 9 May 2017 14:33:31 +0200 Subject: [PATCH] Set idle_timeout to 5s to all the dynamic home servers Dynamically generated home servers get eventually replaced. We want sockets using these servers to close as soon as possible, to make sure that whenever a pool is replaced, sockets using old ones will not last long (hopefully less than 300s). --- src/modules/rlm_realm/trustrouter.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/src/modules/rlm_realm/trustrouter.c b/src/modules/rlm_realm/trustrouter.c index 44a7cfeb1eb..206f75eff74 100644 --- a/src/modules/rlm_realm/trustrouter.c +++ b/src/modules/rlm_realm/trustrouter.c @@ -181,7 +181,12 @@ static home_server_t *srvr_blk_to_home_server(TALLOC_CTX *ctx, hs->secret = talloc_strdup(hs, "radsec"); hs->response_window.tv_sec = 30; hs->last_packet_recv = time(NULL); - + /* + * We want sockets using these servers to close as soon as possible, + * to make sure that whenever a pool is replaced, sockets using old ones + * will not last long (hopefully less than 300s). + */ + hs->limit.idle_timeout = 5; hs->tls = construct_tls(inst, hs, blk); if (!hs->tls) goto error; -- 2.47.3