Capturing Access-Reject data in the radpostauth table

[Aaron Paetznick]

I'm sorry, your explanation wasn't clear to me.  How can I expose 
Module-Failure-Message to or reference Module-Failure-Message within 
rlm_sql?

This, also, didn't work for me:

post-auth {
	...
         Post-Auth-Type REJECT {
                 update reply {
                         Reply-Message += "You got: 
%{Module-Failure-Message}"
                 }
                 attr_filter.access_reject
                 sql
         }
	...
}


--Aaron



On 4/28/2010 4:11 PM, Alan DeKok wrote:
>    If it exists, yes.  It's added by the PAP module for authentication
> rejects.  For authentication success... there's no failure message.
>
>> This is not true, at least in my case.  See above.  Maybe I need to take
>> extra steps to expose that attribute in another part of the config, or
>> maybe I need to reference it with some sort of prefix, I don't know.
>> That's why I'm asking.
>
>    I did explain that...
>