Aaron Paetznick wrote:
> I'm sorry, your explanation wasn't clear to me. How can I expose
> Module-Failure-Message to or reference Module-Failure-Message within
> rlm_sql?
>
> This, also, didn't work for me:
>
> post-auth {
> ...
> Post-Auth-Type REJECT {
> update reply {
> Reply-Message += "You got:
> %{Module-Failure-Message}"
> }
OK... if the Module-Failure-Message doesn't exist, it won't work.
But the log message *uses* it:
Login incorrect (rlm_pap: CLEAR TEXT password check failed) ..
The text between the () *is* the Module-Failure-Message attribute.
See src/main/auth.c.
So we know it exists, the previous log message you posted shows it.
And the server core doesn't delete it, so it *should* always exist after
the PAP module creates it.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
