HP-UX AAA Server A.07.01 Administrator's Guide

The OTP-ActionId attribute is set at 112 by converting the binary value 01110000 into
decimal.
Table 16-2 lists some common actions along with the bit masks that must be used for
configuration.
Table 16-2 Common OTP Authentication Actions
Bit Mask SetOTP-ActionId ValueAction
01110000112Validates the password and OTP (two-factor
authentication) if the incoming request contains
password and OTP.
01101000104Validates only the password and stores the
generated OTP in to Otp-In-Attribute attribute
if the incoming request contains password and
OTP.
01100101101Validates only the password, replaces
User-Password with the incoming OTP and sets
the proxy event to proxy the request to the
configured proxy target server in the
proxy-egress.grp policy file, for OTP
validation, if the incoming request contains
password and OTP.
0101001183Validates only the OTP, replaces User-Password
with the incoming password and sets the proxy
event to proxy the request to the configured proxy
target server in the proxy-egress.grp policy
file, for password validation, if the incoming
request contains password and OTP.
0101000080Validates only the OTP if the OTP is sent with the
password.
0100010169Forwards only the OTP to the configured proxy
target server in the proxy-egress.grp policy
file if the incoming request contains password and
OTP.
0100010068Removes the password and stores only the OTP
in the User-Password attribute.
0100001167Forwards only the password to the configured
proxy target server in the proxy-egress.grp
policy file if the incoming request contains
password and OTP.
0100001066Removes the OTP and stores only the password
in User-Password A-V pair.
Configuring OTP Authentication on the HP-UX AAA Server 171