Cannot get the return code of rlm_krb5

[Arran Cudbard-Bell]

> 
> Thanks.
> Actually, the return code will not be enough; I need to get the KRB5_REALM_UNKNOWN and KRB5_KDC_UNREACH codes from Kerberos which are going to "default:" in the switch condition of rlm_krb5.c, indeed.
> I guess the only way would to be compile a custom rlm_krb5 version, am I right?

But, but, but... If you use custom code RedHat won't love you anymore....

> Or maybe there is special attribute I can read to get the exact code?
> Thank you in advance

If they appear in error messages (the big red ones), you may find they're contained in the latest instance of request:Module-Failure-Message.

-Arran


Arran Cudbard-Bell
FreeRADIUS Core Developer

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20170330/e1b70ad6/attachment.sig>