Michael Bryant wrote:
> I'm confused, how can I use unlang halfway through the processing of the rlm_sql
> module?
You can't. You'd need to do 2 queries e.g.
authorize {
   update request {
     Tmp-String=0 = "%{sql:select ...}"
   }
   sql
}
...and have your radgroupcheck match the Tmp-String-0 you've just added 
to the request.