Re: Capturing Access-Reject data in the radpostauth table

28 Apr 2010

      Aaron Paetznick wrote:
...
I'd consider capturing the whole thing, but I'd be happy with just the
"rlm_pap: CLEAR TEXT password check failed" part.  Do I have access to
that level of info from within rlm_sql?
Look at Module-Failure-Message.  It's populated by the PAP module with
the various reasons for reject.

  e.g., for testing:

post-auth {
	...

	update reply {
		Reply-Message += "You got: %{Module-Failure-Message}"
	}
	...
}

  Alan DeKok.