Capturing Access-Reject data in the radpostauth table

[Alan DeKok]

Aaron Paetznick wrote:
> I'd consider capturing the whole thing, but I'd be happy with just the
> "rlm_pap: CLEAR TEXT password check failed" part.  Do I have access to
> that level of info from within rlm_sql?

  Look at Module-Failure-Message.  It's populated by the PAP module with
the various reasons for reject.

  e.g., for testing:

post-auth {
	...

	update reply {
		Reply-Message += "You got: %{Module-Failure-Message}"
	}
	...
}

  Alan DeKok.