diff --git a/NEWS b/NEWS index fcccef1e..29eaf2fd 100644 --- a/NEWS +++ b/NEWS @@ -1,14 +1,14 @@ * Version 0.10.5 (unreleased) -- On definitely terminated sessions contact the radius server as - soon as possible. For sessions that can still be resumed the radius - server is contacted periodically after the cookies expire. - Added tgt-freshness-time option for gssapi/Kerberos authentication option. That allows to specify the maximum number of seconds after which a reauthentication with Kerberos is required to login to VPN. - main/sec-mod: impose long timeouts on reads from sec-mod. That would prevent issues when reading in a blocked in authentication sec-mod. -- When using radius accounting with certificate authentication, properly - notify of user session termination. +- radius: When using radius accounting with certificate authentication, + properly notify of user session termination. +- radius: On definitely terminated sessions contact the radius server as + soon as possible. For sessions that can still be resumed the radius + server is contacted periodically after the cookies expire. - radius: consider Acct-Interim-Interval when seen by the server. That can be overriden using override-interim-updates in radius subconfig. - Added configuration options 'persistent-cookies' and 'session-timeout'.