Re: Logging the return code from the ldap authentication to SQL.

Augusto G. Andreollo wrote:

Hmm.. thing is, the post-auth sql query is already being processed, to log the Access-Reject..

Yes.. I know. But the return code from the LDAP module in the *authorize* section is lost by then.

Is there any other way I could extract the rejection reason from the LDAP module, to add to this query?

It's not in the LDAP module. See src/main/modcall.c for the code that handles calling modules, and the return codes. If you really need this functionality, send a patch. Alan DeKok.