HP-UX AAA Server A.08.00.01 Administrator's Guide

Modifying a Group...........................................................................................274
Deleting a Group..............................................................................................274
Adding a Server................................................................................................275
Modifying a Server...........................................................................................279
Deleting a Server...............................................................................................279
Cloning a Server................................................................................................279
Administering HP-UX AAA Servers Using HP-UX AAA Server Admin Tool
(Command Line)....................................................................................................282
rad_admin Syntax.............................................................................................282
Examples of Administering Multiple HP-UX AAA Servers............................283
Administering HP-UX AAA Servers Using Interactive User Interface............283
Disaster Recovery of the HP-UX AAA Server Manager.............................................284
19 Configuring the HP-UX AAA Server for Client Functionality .................................................286
Overview.....................................................................................................................286
CLIENT AATV.............................................................................................................287
Configuring CLIENT AATV..................................................................................287
Working of the CLIENT AATV..............................................................................287
Supported APIs...........................................................................................................289
Internal Attributes and Mapping Functions...............................................................290
20 Configuring the HP-UX AAA Server for Dynamic Authorization.............................................292
Dynamic Authorization Overview..............................................................................292
HP-UX AAA Server and Dynamic Authorization......................................................292
Processing of Dynamic Authorization Requests.........................................................293
Configuring for Dynamic Authorization....................................................................295
Basic Configuration................................................................................................296
Advanced Configuration........................................................................................297
Migrating Existing SQL Access Deployments for Dynamic Authorization.....297
Configuring Multiple HP-UX AAA Servers as a Group..................................299
Configuring for Disconnect and CoA Request Processing.........................301
Dedicated HP-UX AAA Servers for Dynamic Authorization.....................306
Dynamic Authorization in Authorize Only Mode...........................................312
Configuring for Dynamic Authorization in Authorize Only Mode...........312
Configuring for Proxy Functionality................................................................315
Configuring for Dynamic Authorization Proxy Functionality...................316
Configuring for Failover...................................................................................316
Security Consideration in Dynamic Authorization..........................................317
Replay Protection........................................................................................317
Message-Authenticator................................................................................319
Reverse Path Forwarding Check for Proxies...............................................319
Sample Configuration Files.........................................................................................321
The client-request-init.grp.dynauth Sample File.................................322
The client-reply-ingress.grp.dynauth Sample File...............................322
The sqlaccess.config.dynauth Sample File................................................322
10 Table of Contents