Awesome, it works! Thanks devs. Everytime I play with FR I learn something new! Andy Executing select query: select acctuniqueid from radacct_lant where nasportid='1' (0) control:Tmp-string-1 += 95723d0da326de4fd8dadf064357b544 (0) control:Tmp-string-1 += 4ae6bd20c2955bdbc7a61703bd811c5b (0) control:Tmp-string-1 += 2dd1180062377402bf85f927ded052a1 (0) control:Tmp-string-1 += ed39616270fc864a165d628d5e81a236 (0) control:Tmp-string-1 += 296ad0d391b50f6adf1af1184e62246f (0) control:Tmp-string-1 += 9c921f1908bb2c3a310c5e147a8478e9 (0) control:Tmp-string-1 += 342ba906a78da2b3975d84663f82133f (0) control:Tmp-string-1 += ecf782b6e59a267dfc28cdbcc8be1ba4 (0) control:Tmp-string-1 += 049f9c8b1295eb7ba5523fdf3b267edf (0) control:Tmp-string-1 += 247547b1bdbfcaa951a1a6bd6c447ed7 (0) control:Tmp-string-1 += 7c53c103b118e60c58c42416149d0cfa -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+andy.franks=sath.nhs.uk@lists.freeradius.org] On Behalf Of Franks Andy (IT Technical Architecture Manager) Sent: 10 December 2015 19:55 To: FreeRadius users mailing list Subject: RE: Reverse string concatenation for multiple attributes That's pretty amazing really. One day I'll task myself with looking completely at the source code, but it would likely melt my brain. The reason, behind the scenes, was we're trying to dynamically update the mac address limit on hp switch ports, but due to these horrible mitel phones with switches in the back, you've no idea whether the mac-limit 2 device (phone) comes up first, or what's plugged into it (pc), usually the pc, which means you need to do a disconnect or CoA to get the phone to present and then push the correct mac limit. Also, the mac address doesn't drop off the switch port when it disconnects from the phone, so you connect a different pc or laptop on the phone and then you have to log off the non-phone mac. All depends on accounting and lots of sql afaics. Or we could just statically map the limit on the switch, but that's no challenge at all. It's a shame you can't do mac-limit on multiple macs, with the newest counting, but HP don't work like that. Thanks Arran! Andy ________________________________________ From: Freeradius-Users [freeradius-users-bounces+andy.franks=sath.nhs.uk@lists.freeradius.org] on behalf of Arran Cudbard-Bell [a.cudbardb@freeradius.org] Sent: 10 December 2015 19:27 To: FreeRadius users mailing list Subject: Re: Reverse string concatenation for multiple attributes

.. It seems to indicate predefinition in a module, which is ok but your example looks more inline. I am guessing the sql bit matches the module instance name here and the query is loaded in a variable?

Or an xlat. It's a polymorphic template type meaning it can be an attribute reference as you have below, an xlat expansion like "SELECT * FROM BLAH WHERE user = %{user-Name}", an exec `echo 'SELECT * FROM BLAH'`, or just a plain literal like 'SELECT * FROM BLAH WHERE 1'

Would an xlat type section be therefore

Map sql_instname &var { Control:Tmp-string-0 += myfieldname }

Or am i way out and it needs module definition?

Nope that's good. Then update request { Tmp-String-0 := "%{pairs:&control:Tmp-String-0[*]}" } To recombine into a list of comma delimited value pairs. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html