time delay in ntlm_auth?

[A.L.M.Buxey at lboro.ac.uk]

Hi,

> I've just sent a pull request that adds an option 'timeout' to
> rlm_exec and 'ntlm_auth_timeout' to rlm_mschap. Defaults are both
> 10s (the current setting). The ntlm_auth timeout can only be
> reduced... I can't imagine a correctly functioning AD domain where
> a successful auth takes >10s.

how does this sort of thing interplay with those people who are
using the MSCHAP password retry feature - which would, I believe,
cause the module itself not to return until the user has finally
put in a succesful password - which might be longer than eg 30s

alan