Re: Capturing Access-Reject data in the radpostauth table

28 Apr 2010


      %{Module-Failure-Message} seems to be empty for me.  Is there a 
scope/prefix I should try?


--Aaron


On 4/28/2010 9:37 AM, Alan DeKok wrote:
...
Aaron Paetznick wrote:
...
I'd consider capturing the whole thing, but I'd be happy with just the
"rlm_pap: CLEAR TEXT password check failed" part.  Do I have access to
that level of info from within rlm_sql?
Look at Module-Failure-Message.  It's populated by the PAP module with
the various reasons for reject.
e.g., for testing:
post-auth {
  ...
update reply {
      Reply-Message += "You got: %{Module-Failure-Message}"
  }
  ...
}
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html