I've added a column to my radpostauth table and started collecting
%{reply:Reply-Message} for each Access-Reject packet. This is
moderately useful, but it's not really what I want to do.
My intention is to capture some useful information as to why the user
was rejected. Ideally, I'd like to have access to the response message
from the authentication module, or maybe even the last log messages
generated by this session.
E.g., if the log message was:
Login incorrect (rlm_pap: CLEAR TEXT password check failed): [user/pass]
(from client NAS port 0 cli callinginfo)
I'd consider capturing the whole thing, but I'd be happy with just the
"rlm_pap: CLEAR TEXT password check failed" part. Do I have access to
that level of info from within rlm_sql?
--Aaron
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
