change lower_limit for reject_delay to 0.5s.

Some equipment is known to retry aggressively if the timeout is
about 1s

Author: alandekok

raddb/radiusd.conf.in

@@ -599,9 +599,12 @@ security {
 	#  rejects will be sent at 'cleanup_delay' time, when the request
 	#  is deleted from the internal cache of requests.
 	#
+	#  Some equipment is known to retry aggressively if the delay is about
+	#  one second.
+	#
 	#  This number can be a decimal, e.g. 3.4
 	#
-	#  Useful ranges: 1 to 5
+	#  Useful ranges: 0.5 to 5
 	reject_delay = 1
 
 	#

src/main/mainconfig.c

@@ -1218,7 +1218,7 @@ do {\
 	 *	reject_delay can be zero.  OR 1 though 10.
 	 */
 	if ((main_config.reject_delay.tv_sec != 0) || (main_config.reject_delay.tv_usec != 0)) {
-		FR_TIMEVAL_BOUND_CHECK("reject_delay", &main_config.reject_delay, >=, 1, 0);
+		FR_TIMEVAL_BOUND_CHECK("reject_delay", &main_config.reject_delay, >=, 0, USEC / 2);
 	}
 
 	FR_INTEGER_BOUND_CHECK("proxy_dedup_window", main_config.proxy_dedup_window, <=, 10);