HP-UX AAA Server A.08.00.01 Administrator's Guide

Figure 22-2 RADIUS Attribute to SQL Statement Mapping
During input mapping, the value for the RADIUS attribute User-name is passed to
the SQL statement SELECT as a search value into the database table USERTABLE using
the SQL placeholder to bind to the data value John. The output mapping entry tells the
SQL Access AATV that the database column db_passwd maps to the RADIUS attribute
password, with a returned value of Johnpass in the attribute-value pair.
Mapping Functions
You can also use a pre-defined or user-defined mapping function as the source or target
of a mapping. For example, the pre-defined mapping function get_sid retrieves the
session ID from the RADIUS request's CLASS attribute-value pair or generates a unique
session ID if the CLASS attribute-value pair does not exist. You can then insert the
session ID value into a database table using the SQL INSERT command to allow for
session management via SQL Access.
Conversion Functions
Pre-defined or user-defined conversion functions execute on the data in transit between
the source and the target of a mapping. For example, the pre-defined conversion function
AAAIPv6toString converts a binary format IPv6 address to an ANSI string suitable
for generating human readable output. This can be used to translate an IPv6 address
from a RADIUS attribute to a string formatted column in the database.
336 SQL Access