HP-UX AAA Server A.08.00.01 Administrator's Guide

## Set the SQLAccess ActionID to be used for COA success.
insert Client-Request-Cleanup-ActionId = "UpdateCOASession
"
## Set the Filter-Id based on the current time of day.
if( Time-Of-Day >= "08:00" && Time-Of-Day <= "20:00" )
{
insert Filter-Id = "daytime_filter"
}
else
{
insert Filter-Id = "nighttime_filter"
}
}
}
}
else
{
## Authorize Only request failed.
if( Client-Action-Name = "Disconnect" )
{
## Set the SQLAccess ActionID to be used for Disconnect failure.
insert Client-Request-Cleanup-ActionId = "SuspendDisconnectedSession"
}
else
{
if( Client-Action-Name = "COA" )
{
## Set the SQLAccess ActionID to be used for COA failure.
insert Client-Request-Cleanup-ActionId = "SuspendCOASession"
}
}
}
}
NOTE: The following requirement is applicable for Oracle only. If DHCP is
enabled, replace the following line in the /etc/opt/aaa/
client-reply-ingress.grp file:
insert Client-Request-Cleanup-ActionId = "CleanupDisconnectedSession"
with
insert Client-Request-Cleanup-ActionId = "CleanupDisconnectedSession-DHCP"
If multiple HP-UX AAA Servers are configured as a group, enter
UpdateCoASessionServerGroup,
SuspendDisconnectedSessionServerGroup and
SuspendCoASessionServerGroup instead of UpdateCoASession,
SuspendDisconnectedSession, and SuspendCoASession respectively.
5. Set the Authorize-Only-ActionId attribute to the SQL Access action ID
that must be used for Access-Request, whose Service-Type attribute value
is Authorize Only. Add the following lines in the /etc/opt/aaa/
request-ingress.grp file:
## Set the SQLAccess Action ID to be used for Authorize Only type requests.
if( count(Service-Type) != 0 && Service-Type = "Authorize-Only" )
314 Configuring the HP-UX AAA Server for Dynamic Authorization