Capturing Access-Reject data in the radpostauth table

[Aaron Paetznick]

%{Module-Failure-Message} seems to be empty for me.  Is there a 
scope/prefix I should try?


--Aaron



On 4/28/2010 9:37 AM, Alan DeKok wrote:
> Aaron Paetznick wrote:
>> I'd consider capturing the whole thing, but I'd be happy with just the
>> "rlm_pap: CLEAR TEXT password check failed" part.  Do I have access to
>> that level of info from within rlm_sql?
>
>    Look at Module-Failure-Message.  It's populated by the PAP module with
> the various reasons for reject.
>
>    e.g., for testing:
>
> post-auth {
> 	...
>
> 	update reply {
> 		Reply-Message += "You got: %{Module-Failure-Message}"
> 	}
> 	...
> }
>
>    Alan DeKok.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html