Hello, Let's define this query: authorize_reply_query = "\ SELECT 1, '%{SQL-User-Name}', 'Reply-Message', 'Hey', ':=' \ UNION \ SELECT 2, '%{SQL-User-Name}', 'Reply-Message', 'Hello', ':=' \ ORDER BY 1" In radiusd -X output, on may then read: Sending Access-Accept Id 201 from 127.0.0.1:1812 to 127.0.0.1:62417 Reply-Message = 'Hey' Reply-Message = 'Hello' A Reply-Message may indeed appear multiple times in an Acces-Accept (or -Reject or -Challenge) packet. Now, according to http://wiki.freeradius.org/config/Operators, operator ":=" has the same meaning as a reply item than as a check item. As a check item, it "replaces in the configuration items any attribute of the same name. If no attribute of that name appears in the request, then this attribute is added." How should that idea of replacement of "any attribute of the same name" then be interpreted? TIA, Axel