Logging the return code from the ldap authentication to SQL.

Alan DeKok aland at deployingradius.com
Tue Mar 17 16:56:12 CET 2009


Augusto G. Andreollo wrote:
> Hmm.. thing is, the post-auth sql query is already being processed, to
> log the Access-Reject.. 

  Yes.. I know.  But the return code from the LDAP module in the
*authorize* section is lost by then.

> Is there any other way I could extract the
> rejection reason from the LDAP module, to add to this query?

  It's not in the LDAP module.

  See src/main/modcall.c for the code that handles calling modules, and
the return codes.  If you really need this functionality, send a patch.

  Alan DeKok.



More information about the Freeradius-Users mailing list