Capturing Access-Reject data in the radpostauth table

[Alan DeKok]

Aaron Paetznick wrote:
> On 4/28/2010 3:23 PM, Alan DeKok wrote:
>>
>>    Uh... did you update your schema to have a "message" colummn?
> 
> Yes, I have extended my radpostauth table with columns to hold the
> message and the nasipaddress.  It is working perfectly if I use
> '%{reply:Reply-Message}', but it is always empty if I use
> '%{Module-Failure-Message}' in the same INSERT.  This is why I'm
> confirming if I should have access to '%{Module-Failure-Message}' within
> rlm_sql.

  If it exists, yes.  It's added by the PAP module for authentication
rejects.  For authentication success... there's no failure message.

> This is not true, at least in my case.  See above.  Maybe I need to take
> extra steps to expose that attribute in another part of the config, or
> maybe I need to reference it with some sort of prefix, I don't know.
> That's why I'm asking.

  I did explain that...

  Alan DeKok.