Attribute References

Attributes in a list may be referenced via one of the following two syntaxes:

%{Attribute-Name}
%{<list>.Attribute-Name}

The <list>. prefix is optional. If given, it must be a valid reference to an attribute list.

If the <list>. prefix is omitted, then the request list is assumed.

For EAP methods with tunneled authentication sessions (i.e. PEAP and EAP-TTLS), the inner tunnel session can refer to a list for the outer session by prefixing the list name with outer. ; for example, outer.request.

When a reference is encountered, the given list is examined for an attribute of the given name. If found, the variable reference in the string is replaced with the value of that attribute. Otherwise, the reference is replacedd with an empty string.

Examples

%{User-Name}
%{request.User-Name} # same as above
%{reply.User-Name}
%{outer.request.User-Name} # from inside of a TTLS/PEAP tunnel

Examples of using references inside of a string:

"Hello %{User-Name}"
"You, %{User-Name} are not allowed to use %{NAS-IP-Address}"

Additional Variations

%{Attribute-Name[#]}: Returns an integer containing the number of named attributes
%{Attribute-Name[*]}: Returns a comma-separated string containing all values for the named attributes.
%{Attribute-Name[n]}: Returns the last attribute in the list.
%{Attribute-Name[<index>]}: When an attribute appears multiple times in a list, this syntax allows you to address the attributes as with array entries. [0] refers to the first attributes, [1] refers to the second attribute, etc. See the xref:unlang/attr.adoc[attribute reference page for more information.

Lists and Grouping attributes

There is similar syntax for referencing children of a list, without addressing the children by name.

%{request.[#]}: Returns an integer containing the number of attributes contained in the request list. Any list name can be used.
%{request.[*]}: Returns a comma-separated string containing all values of attributes in the request list.
%{request.[n]}: Returns the last attribute in the list.
%{request.[0]}: Returns the value of the first attribute in the request list. See the xref:unlang/attr.adoc[attribute reference page for more information.

Note that the old syntax of %{request[*]} will instead refer to array entries of the request list. This is a change from previous versions of the server. When upgrading, you should just add a . between the list name and the array reference [.