3.106.1. SuccessQuery Previous topic Parent topic Child topic Next topic

This optional parameter specifies the SQL query that will be used to log authentication successes if LogSuccess is enabled (LogSuccess is not enabled by default). There is no default. If SuccessQuery is not defined (which is the default), no logging of authentication successes will occur. In the query, special formatting characters are permitted:
  • %0 is replaced with the message severity level.
  • %1 is replaced with the quoted reason message (which is usually empty for successes).
  • %2 is replaced with the SQL quoted User-Name.
  • %3 is replaced with the SQL quoted decoded plaintext password (if any).
  • %4 is replaced with the SQL quoted original user name from the incoming request (before any RewriteUsername rules were applied)
  • %5 is replaced with tracing identifier.