I have tested "updated = return" and it behaves as expected. That is authorize always returns without reading the database so the attributes are never set. Remeber that eap returns "updated" every round including the last one where the database should be consulted. I need a test that returns true when doing authorize in the same round as authenticate will return ok. /Johan You can try adding updated = return to eap section in authorize. Not sure if that breaks anything. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- View this message in context: http://www.nabble.com/Can-we-do-sql-just-once-during-eap-tls-handshake-tp223... Sent from the FreeRadius - User mailing list archive at Nabble.com.