Document TLS session cache

diff --git a/raddb/eap.conf b/raddb/eap.conf
index 662b88b..e0be215 100644 (file)
--- a/raddb/eap.conf
+++ b/raddb/eap.conf
@@ -258,6 +258,35 @@
                        #  initial deployments easier.
                        #
                        make_cert_command = "${certdir}/bootstrap"
+
+                       #
+                       #  Session resumption / fast reauthentication
+                       #  cache.
+                       #
+                       cache {
+                             #
+                             #  Enable it.  The default is "no".
+                             #  Deleting the entire "cache" subsection
+                             #  Also disables caching.
+                             #
+                             enable = yes
+
+                             #
+                             #  Lifetime of the cached entries, in hours.
+                             #  The sessions will be deleted after this
+                             #  time.
+                             #
+                             lifetime = 24 # hours
+
+                             #
+                             #  The maximum number of entries in the
+                             #  cache.  Set to "0" for "infinite".
+                             #
+                             #  This could be set to the number of users
+                             #  who are logged in... which can be a LOT.
+                             #
+                             max_entries = 255
+                       }
                }
 
                #  The TTLS module implements the EAP-TTLS protocol,