HP-UX AAA Server A.08.00.01 Administrator's Guide

6. Enter the following values in the respective fields, within the Client Action
Properties window:
Name: COA
Timer Value: 60
Max Requests: 0
10. To activate the changes, restart the HP-UX AAA Server.
Dedicated HP-UX AAA Servers for Dynamic Authorization
Within a group, you can dedicate a set of HP-UX AAA Servers for the dynamic
authorization operation. If you want to dedicate a set of HP-UX AAA Servers within
a group for dynamic authorization, you need not perform all the mentioned steps on
all the HP-UX AAA Servers. This section describes the procedures to dedicate HP-UX
AAA Servers within a group for authentication and for dynamic authorization.
On the HP-UX AAA Servers that perform authentication only (HP-UX AAA Servers
that create the sessions), complete the following steps:
1. Configure the HP-UX AAA Server to enable session management using SQL.
For information on how to enable session management using SQL, see Chapter 22
(page 333)
2. Copy the SQLAction definition for StartSessionServerGroup from
• For Oracle — /opt/aaa/examples/sqlaccess/oracle-1/
sqlaccess.config.dynauth_server_group
• For MySQL — /opt/aaa/examples/sqlaccess/mysql-1/
sqlaccess.config.dynauth_server_group
to
/etc/opt/aaa/sqlaccess.config, and replace <groupname> with the name
of the group.
3. To create sessions using the new SQLAction, modify the FSM as follows:
Replace the following line in /etc/opt/aaa/radius.fsm:
*.*.ACK SQLAccess Tunneling xstring="ActionID=StartSession"
with
*.*.ACK SQLAccess Tunneling xstring="ActionID=StartSessionServerGroup"
NOTE: If you have modified the StartSession SQLAction to suit your
environment, the changes must be merged with StartSessionServerGroup
SQLAction.
On HP-UX AAA Servers dedicated to dynamic authorization, complete the following
steps:
306 Configuring the HP-UX AAA Server for Dynamic Authorization