feat(freeradius): log Reply-Message in radpostauth instead of only packet type
- Store Reply-Message when available, fallback to Packet-Type otherwise - Improves visibility of authentication failures (e.g. "already logged in")
This commit is contained in:
@@ -684,10 +684,11 @@ post-auth {
|
|||||||
|
|
||||||
query = "\
|
query = "\
|
||||||
INSERT INTO ${..postauth_table} \
|
INSERT INTO ${..postauth_table} \
|
||||||
(username, reply, authdate ${..class.column_name}) \
|
(username, reply, reason, authdate ${..class.column_name}) \
|
||||||
VALUES ( \
|
VALUES ( \
|
||||||
'%{SQL-User-Name}', \
|
'%{SQL-User-Name}', \
|
||||||
'%{reply:Packet-Type}', \
|
'%{reply:Packet-Type}', \
|
||||||
|
'%{reply:Reply-Message}', \
|
||||||
'%S.%M' \
|
'%S.%M' \
|
||||||
${..class.reply_xlat})"
|
${..class.reply_xlat})"
|
||||||
}
|
}
|
||||||
Reference in New Issue
Block a user