<html><body>
<p><font size="2" face="sans-serif">Hi all,</font><br>
<br>
<font size="2" face="sans-serif">Before Freeradius 3, I could sucessfully log the attribute Module-Failure-Message to catch many errors of ntlm_auth.</font><br>
<br>
<font size="2" face="sans-serif">In Freeradius 3 , if a user must change his password, the Module-Failure-Message return nothing (it doesn't yet exist )</font><br>
<font size="2" face="sans-serif">Maybe it's with the new support of Change password in module mschap ??!</font><br>
<br>
<font size="2" face="sans-serif">My question is, how I can catch this error ?</font><br>
<br>
<font size="2" face="sans-serif">I try with the attribute MS-CHAP-Error but it the same result</font><br>
<br>
<font size="2" face="sans-serif">In log below, attribute doesn't yet exist when I try to catch him</font><br>
<br>
<br>
<br>
<font size="2" face="sans-serif">(16) log_mschap_error log_mschap_error {</font><br>
<font size="2" face="sans-serif">(16) ? if (MS-CHAP-Error =~ /.*Password expired.*/i)</font><br>
<font size="2" face="sans-serif">(16) </font><font size="2" face="sans-serif"><b>ERROR: Failed retrieving values required to evaluate condition</b></font><br>
<font size="2" face="sans-serif">(16) } # log_mschap_error log_mschap_error = updated</font><br>
<font size="2" face="sans-serif">(16) } # Post-Auth-Type REJECT = updated</font><br>
<font size="2" face="sans-serif">} # server inner-tunnel</font><br>
<font size="2" face="sans-serif">(16) eap_peap : Got tunneled reply code 3</font><br>
<font size="2" face="sans-serif"><b> MS-CHAP-Error = '\tE=648 R=0 C=6833f9aa49b2f6bcc7dd53241f906cc7 V=3 M=Password Expired'</b></font><br>
<font size="2" face="sans-serif"> EAP-Message = 0x04090004</font><br>
<font size="2" face="sans-serif"> Message-Authenticator = 0x00000000000000000000000000000000</font><br>
<font size="2" face="sans-serif">(16) eap_peap : Got tunneled reply RADIUS code 3</font><br>
<font size="2" face="sans-serif"> MS-CHAP-Error = '\tE=648 R=0 C=6833f9aa49b2f6bcc7dd53241f906cc7 V=3 M=Password Expired'</font><br>
<font size="2" face="sans-serif"> EAP-Message = 0x04090004</font><br>
<font size="2" face="sans-serif"> Message-Authenticator = 0x00000000000000000000000000000000</font>
<ul style="padding-left: 0pt"><font size="2" face="sans-serif"> </font>
<table border="0" cellspacing="0" cellpadding="0">
<tr valign="top"><td width="519" valign="middle">
<ul style="padding-left: 0pt"><font size="2" face="Arial">Thanks.</font></ul>
</td></tr>
</table>
<ul style="padding-left: 3pt"></ul>
</ul>
</body></html>