The variables defined by the server are:

     %{Attribute-Name}               Corresponding value for Attribute-Name
                                     in request
     %{request:Attribute-Name}       Corresponding value for Attribute-Name
                                     in request
     %{reply:Attribute-Name}         Corresponding value for Attribute-Name
                                     in reply
     %{proxy-reply:Attribute-Name}   Corresponding value for Attribute-Name
                                     in the proxy reply (if it exists)

Additionally, you can use syntax similar to ${foo:-bar} as defined in
'sh'.  For example:

  1.  %{Foo:-bar}
    When attribute Foo is set:  returns value of Foo
    When attribute Foo unset:   returns literal string 'bar'

  2.  %{Foo:-%{Bar}}
    When attribute Foo is set:  returns value of attribute Foo
    When attribute Foo unset:   returns value of attribute Bar (if any)

  3.  %{Foo:-%{bar:-baz}}
    When attribute Foo is set:  returns value of attribute Foo
    When attribute Foo unset:   returns value of attribute Bar (if any)
    When attribute Bar unset:   returns literal string 'baz'


When calling an external program (e.g. from Exec-Program-Wait), these
variables can be passed on the command line to the program.  In
addition, the server places all of the attributes in the RADIUS
request into environment variables for the external program.  The
variables are renamed under the following rules:

  1.  All letters are made upper-case.

  2.  All hyphens '-' are turned into underscores '_'

so the attribute User-Name can be passed on the command line to the
program as %{User-Name}, or used inside the program as the environment
variable USER_NAME (or $USER_NAME for shell scripts).


The following one-character variables are also defined.  However, they
are duplicates of the previous general cases, and are only provided
for backwards compatibility.  They may be removed in a future
release.

     %a       Protocol (SLIP/PPP)
     %c       Callback-Number
     %d       request day (DD)
     %f       Framed IP address
     %i       Calling Station ID
     %l       request timestamp
     %m       request month (MM)
     %n       NAS IP address
     %p       Port number
     %s       Speed (PW_CONNECT_INFO)
     %t       request in ctime format
     %u       User name
     %A       radacct_dir
     %C       clientname
     %D       request date (YYYYMMDD)
     %L       radlog_dir
     %M       MTU
     %R       radius_dir
     %S       request timestamp in SQL format
     %T       request timestamp in database format
     %U       Stripped User name
     %V       Request-Authenticator (Verified/None)
     %Y       request year (YYYY)
     %Z       All request attributes except password (must have big buffer)
