3.101.3. FailureQuery Previous topic Parent topic Child topic Next topic

This optional parameter specifies the SQL query that is used to log authentication failures if LogFailure is enabled (LogFailure is enabled by default). There is no default. If FailureQuery is not defined (which is the default), no logging of authentication failures occur. In the query, special formatting characters are permitted.
  • %0 is replaced with the message severity level.
  • %1 is replaced with the quoted reason message.
  • %2 is replaced with the SQL quoted User-Name.
  • %3 is replaced with the SQL quoted decoded plaintext password (if any).
  • %4 is replaced with the SQL quoted original user name from the incoming request (before any RewriteUsername rules were applied)
  • %5 is replaced with tracing identifier.