HP-UX AAA Server A.08.00.01 Administrator's Guide

Figure 29-2 HP-UX AAA Server Operation
The HP-UX AAA Server operation consists of the following steps:
1. The user or device that requires authentication communicates with the RADIUS
client and provides authentication credentials such as user name and password.
At this stage, incorrect supplicant configuration or invalid credentials can lead to
authentication failures or an unresponsive HP-UX AAA Server.
NOTE: Troubleshooting the supplicant is outside the scope of this chapter. See
your supplicant vendor’s documentation for troubleshooting information.
2. The RADIUS client (for example, access point or NAS) sends a RADIUS
Access-Request Message to the HP-UX AAA Server.
At this stage, incorrect client configuration and bad RADIUS messages can lead
to authentication or accounting failures, or an unresponsive HP-UX AAA Server.
3. The HP-UX AAA Server examines the request and validates the user credentials
based on the configured authentication mechanism.
At this stage, incorrect HP-UX AAA Server configuration, internal errors, or invalid
credentials passed to it by the RADIUS client can cause authentication/accounting
failures. These cases may cause the HP-UX AAA Server to ignore the RADIUS
client’s request.
4. Based on the configured authentication mechanism, the HP-UX AAA Server can
contact one or more external services:
HP-UX AAA Server Operation 457