From: Nick Porter <nick@portercomputing.co.uk>
Date: Thu, 21 Aug 2025 10:47:06 +0000 (+0100)
Subject: Copy all instances of Module-Failure-Message to outer request
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=5f3eee883c7e9fa98999694e7afa480522ea487c;p=thirdparty%2Ffreeradius-server.git

Copy all instances of Module-Failure-Message to outer request

Some failures produce multiple instances and you want all of them when
logging failures
---

diff --git a/doc/antora/modules/reference/pages/raddb/sites-available/inner-tunnel.adoc b/doc/antora/modules/reference/pages/raddb/sites-available/inner-tunnel.adoc
index 7b953fa0eb..5c28d6b09c 100644
--- a/doc/antora/modules/reference/pages/raddb/sites-available/inner-tunnel.adoc
+++ b/doc/antora/modules/reference/pages/raddb/sites-available/inner-tunnel.adoc
@@ -380,7 +380,7 @@ See `mods-enabled/linelog` for message formats and destinations.
 Let the outer session know which module failed, and why.
 
 ```
-	outer.session-state.Module-Failure-Message := request.Module-Failure-Message
+	outer.session-state.Module-Failure-Message := request.Module-Failure-Message[*]
 }
 } # inner-tunnel server block
 ```
diff --git a/raddb/sites-available/inner-tunnel b/raddb/sites-available/inner-tunnel
index 0cb03d1f0b..b5eefacfb2 100644
--- a/raddb/sites-available/inner-tunnel
+++ b/raddb/sites-available/inner-tunnel
@@ -319,6 +319,6 @@ send Access-Reject {
 	#
 	#  Let the outer session know which module failed, and why.
 	#
-	outer.session-state.Module-Failure-Message := request.Module-Failure-Message
+	outer.session-state.Module-Failure-Message := request.Module-Failure-Message[*]
 }
 } # inner-tunnel server block