rlm_pap: show the request password on mismatch, not the "known good" one

diff --git a/src/modules/rlm_pap/rlm_pap.c b/src/modules/rlm_pap/rlm_pap.c
index 478d4d66c0d22cdf0a71e65415bfe6afd1d827fd..be50257605870815689a23eb2e840dce89af7f6a 100644 (file)
--- a/src/modules/rlm_pap/rlm_pap.c
+++ b/src/modules/rlm_pap/rlm_pap.c
@@ -540,7 +540,7 @@ static rlm_rcode_t CC_HINT(nonnull) pap_auth_clear(UNUSED rlm_pap_t *inst, REQUE
                            request->password->vp_octets,
                            vp->vp_length) != 0)) {
                REDEBUG("Cleartext password \"%s\" does not match \"known good\" password",
-                       vp->vp_strvalue);
+                       request->password->vp_strvalue);
                return RLM_MODULE_REJECT;
        }
        return RLM_MODULE_OK;