HP-UX AAA Server A.08.00.01 Administrator's Guide

“Attributes for Configuring OTP Authentication” (page 188). Table 16-2 lists the bit
masks that can be used to configure the HP-UX AAA Server to perform various tasks.
Table 16-2 Bit Masks to Configure OTP Authentication Tasks
Action
Support for
MS-CHAP
v2
Support for
RADIUS
Standard
PasswordBit MaskTask
On receiving the incoming request, the
HP-UX AAA Server splits the request into
NoYes7Splits the incoming
password in to
password and OTP. password and OTP based on the number
of digits specified in OTP token length as
follows:
If the number of digits specified in the
OTP token length is 7, the last 7 characters
are identified as OTP.
The HP-UX AAA Server validates the
password from the User-Password
attribute.
YesYes6Validates the
password.
The HP-UX AAA Server validates the
incoming OTP.
YesYes5Validates the OTP.
The HP-UX AAA server generates and
stores the OTP in the Generated-OTP
attribute.
YesYes4Stores the generated
OTP in
Generated-OTP
attribute.
The HP-UX AAA Server removes the
password from the incoming password
NoYes3Removes the
password
and replaces the User-Password attribute
with OTP. This bit mask must be used if
the User-Password attribute contains the
password and OTP.
184 OATH Standards-Based OTP Authentication