HP-UX AAA Server A.07.01 Administrator's Guide

Table 25-6 Compatible Attribute Types
Compatible Attribute TypesValue Type
Integer-value • integer
• tag-int
• short
• octet
String-value • string
• tag-str
• octets
• dateDate-value
IP-address-value • ipaddr
• ipv6addr
• ifid
• ipv6prefix
You must not mix attributes from different value-type groups, because this can cause
a type mismatch load-time error.
Invoking a Policy
You can invoke policy using one of the following methods:
• “Invoking Policies Through Predefined Policy Hooks.”
• “Modifying the FSM for Specific Customizations ” (page 310)
This section also discusses the commonly used attributes for specifying policies.
Invoking Policies Through Predefined Policy Hooks
The following predefined hooks can be used to invoke policies without modifying the
FSM:
• “Request Ingress Policy.”
• “User Policy” (page 305)
• “Reply Egress Policy” (page 306)
• “Proxy Egress Policy” (page 307)
• “Proxy Ingress Policy” (page 308)
Request Ingress Policy
Request ingress policy can be configured in the request-ingress.grp decision file
in the server's configuration directory. The policy configured in this file is applied as
304 Customizing the HP-UX AAA Server Using Policies