HP-UX AAA Server A.08.00.01 Administrator's Guide

Log-time: This is the difference between the time on the machine where and
when this log was written, and the start-time. This field is used
to compress the data.
Connect time: How long (in seconds) the session was known to the local AAA
Server host.
Client A-V Pairs
Represent attribute values that describe the client used for authentication and
authorization.
User Entry A-V Pairs
The Access-ID, Time-limit, Service-class, and Filter values correspond to A-V pairs
(User-Name, Inner-Identity, Session-Timeout, Service-Class, and Filter-Id) that exist
in the user profile that corresponds to the session record.
Session Tracking
These non-configurable attributes are used by the server to track sessions.
Reason: Why the record was generated. This is an integer that may be any one of
the following:
Table 12-4 Reasons Why The Record Was Generated
DescriptionBilled/InfoIntegerReason
Normal disconnect: Modem-Stop record was
received for this session.
Billed0AC_NORMAL
Rejected by this LAS: Access rejected by this LAS.Info1AC_REJECT
Access rejected by someone: Access was rejected after
session was authorized. Modem-Cancel record was
received for this session.
Info2AC_CANCEL
Session over maximum time allowed: Session was
on for longer than was authorized.
Billed4AC_OVERTIME
Session ended for unknown reason: Stop (instead of
Modem-Stop) record was received for this session.
Billed5AC_UNKNOWN
Rejected by LAS: no token was available for this
session.
Info6AC_NOTOKEN
Session not local: This session was not local to this
LAS, but Modem-Stop was received.
Billed7AC_NOTLOCAL
Session suspended: No checkpoint was received for
this session for SESSIONIDLETIME seconds.
Billed8AC_SUSPEND
Authentication failed.Info9AC_FAILED
144 Logging and Monitoring