Suppress radpostauth password logging with unlang variable reference

Sam Hutchings samhutchings1415 at gmail.com
Mon May 18 16:15:41 UTC 2026


>   You have to check for a specific value:
>
>         if ("${log.auth_goodpass}" == "yes") {
>                 ...
>
>   You also can't use a "suppress" block in the middle of an unlang processing section.  You have to use "update" to remove User-Password from the request:
>
>         update request {
>                 User-Password !* ANY
>         }
>
>   Since the password isn't used for anything after post-auth, it's safe to delete it.

Alan, thank you for the advice and unlang code; this is working as expected.

I was attempting to use the detail module example for 'suppress'.

I have gone through the unlang documentation further, which I now
hopefully have a better understanding, especially keywords!


More information about the Freeradius-Users mailing list