summaryrefslogtreecommitdiff
path: root/interface-definitions/vpn_openconnect.xml.in
diff options
context:
space:
mode:
authorRageLtMan <sempervictus@users.noreply.github.com>2022-02-28 08:32:30 -0500
committerGitHub <noreply@github.com>2022-02-28 14:32:30 +0100
commit257345cd152c23a465332dea4af034244007aaa7 (patch)
treeca4c2a1959a360d7c4f376bcefc0de38a36b9a1d /interface-definitions/vpn_openconnect.xml.in
parent61fa1c95164e4222e79b078b1a796f41397e0ee3 (diff)
downloadvyos-1x-257345cd152c23a465332dea4af034244007aaa7.tar.gz
vyos-1x-257345cd152c23a465332dea4af034244007aaa7.zip
open-connect: T4274: extend RADIUS authentication timeout
RADIUS authentication can be handled by a variety of mechanisms, including proxy for 2FA systems requiring user interaction with a separate device, token acquisition, or other time-consuming action. Given the delays required for certain 2FA implementations, a thirty second timeout can range from onerous to untenable. Accomodate the 2FA time requirements by extending the hard-coded RADIUS time limit from 30 seconds to 240. Co-authored-by: RageLtMan <rageltman [at] sempervictus>
Diffstat (limited to 'interface-definitions/vpn_openconnect.xml.in')
-rw-r--r--interface-definitions/vpn_openconnect.xml.in8
1 files changed, 4 insertions, 4 deletions
diff --git a/interface-definitions/vpn_openconnect.xml.in b/interface-definitions/vpn_openconnect.xml.in
index 3fc34bacc..f418f5d75 100644
--- a/interface-definitions/vpn_openconnect.xml.in
+++ b/interface-definitions/vpn_openconnect.xml.in
@@ -40,13 +40,13 @@
<properties>
<help>Session timeout</help>
<valueHelp>
- <format>u32:1-30</format>
- <description>Session timeout in seconds</description>
+ <format>u32:1-240</format>
+ <description>Session timeout in seconds (default: 2)</description>
</valueHelp>
<constraint>
- <validator name="numeric" argument="--range 1-30"/>
+ <validator name="numeric" argument="--range 1-240"/>
</constraint>
- <constraintErrorMessage>Timeout must be between 1 and 30 seconds</constraintErrorMessage>
+ <constraintErrorMessage>Timeout must be between 1 and 240 seconds</constraintErrorMessage>
</properties>
<defaultValue>2</defaultValue>
</leafNode>