Michael Bryant wrote: > I'm confused, how can I use unlang halfway through the processing of the rlm_sql > module? You can't. You'd need to do 2 queries e.g. authorize { update request { Tmp-String=0 = "%{sql:select ...}" } sql } ...and have your radgroupcheck match the Tmp-String-0 you've just added to the request.