HP-UX AAA Server A.08.00.01 Administrator's Guide

E Syntax of the Decision Files in Earlier Versions of the
HP-UX AAA Server
This appendix describes the syntax of the decision files that are present in earlier
versions of the HP-UX AAA Server. While decision files created using this syntax are
supported in this version of the HP-UX AAA Server, HP encourages customers to use
the syntax described in Chapter 27 (page 405) to create new decision files. This is because
the new syntax offers more advanced customization options (such as configuring OTP
authentication).
Following is the syntax of a decision file in earlier versions of the HP-UX AAA Server:
Group Name {
Condition {
expression
}
Reply {
reply-items
. . .
}
}
where:
Group Name
Begins the group entry by specifying a name for the group.
Condition
Block that contains an expression of A-V pairs. They will evaluate to
true or false to determine if the user belongs to the group. If the
condition is not defined in the group entry, the group matches all the
requests.
Reply
Block that contains a list of one or more reply items that are added to
the request if the condition evaluates to true.
Expressions
The simplest expression is a comparison of two A-V pairs with one relative operator.
You can use relative and Boolean operators to create an expression with various
combinations of A-V pairs. Table E-1 lists the operators that you can use.
Table E-1 A-V Pair Expression Operators
DescriptionOperator
Equal to=
Not equal to!=
Greater than>
Less than<
Greater than or equal to>=
Expressions 587