Hugh Messenger wrote:

ObDisclaimer: I have googled my best google, and read all the docs I can find, so please be gentle if this is a dumb question.

Is it possible with freeradius to use SQL to retrieve certain return attributes (in this case rate limiting values for PPPOE sessions), whilst still handling authentication through PAM?

Yes. However, in the current code there must be *something* that matches in the radcheck or radgroupcheck table for the user/group, else the radreply/radgrouprelpy table won't be used. Maybe easiest to put this in radcheck: insert into radcheck (username,attribute,op,value) values ( 'theuser', 'Pam-Auth', ':=', 'thepamservice' ) ...then put your per-user attributes in radreply. Alternatively you could defined a local attribute in the dictionary: Attribute My-Fake-Item 3000 string ...and set that. There are probably cleaner ways to do it using SQL groups and/or the "search on not found" / default profile stuff, but I must admit to not groking that part of the 1.1 SQL code.