Capturing Access-Reject data in the radpostauth table

Alan DeKok aland at
Wed Apr 28 16:37:15 CEST 2010

Aaron Paetznick wrote:
> I'd consider capturing the whole thing, but I'd be happy with just the
> "rlm_pap: CLEAR TEXT password check failed" part.  Do I have access to
> that level of info from within rlm_sql?

  Look at Module-Failure-Message.  It's populated by the PAP module with
the various reasons for reject.

  e.g., for testing:

post-auth {

	update reply {
		Reply-Message += "You got: %{Module-Failure-Message}"

  Alan DeKok.

More information about the Freeradius-Users mailing list