HP-UX AAA Server A.08.01 administrator's guide (T1428-90072, May 2010)

Then …
If you have
configured...
Tunneled
realms with
1. Delete the following (default) condition in the /etc/opt/aaa/
request-ingress.grp file:
if ((count (User-Name) > 0) && (substr (User-Name after "@") = "<realm>"))
{
same inner
and outer
insert Otp-ActionId = 112
realms for
exit "ACK"
}
EAP
authentication
2. Based on the EAP authentication method you have configured, add one of the
following conditions in the /etc/opt/aaa/request-ingress.grp file, and
replace the <realm> variable with the inner realm name configured in step 1:
• If you have configured the realm for PEAP (EAP-GTC) , add the following
condition:
if ((count (User-Realm) > 0) && (User-Realm = "<realm>/peap"))
{
insert Otp-ActionId = 101
exit "ACK"
}
• If you have configured the realm for TTLS (PAP), add the following condition:
if ((count (User-Realm) > 0) && (User-Realm = "<realm>/ttls"))
{
insert Otp-ActionId = 101
exit "ACK"
}
5. In the proxy-egress.grp file, replace the <proxyrealm> variable with the
realm name, and the <Proxy Target Server or IP Address> variable with
the proxy target server host name (FQDN) or the IP Address that is configured in
Step 2, as follows:
if ( (count (User-Realm) > 0) && (User-Realm = "<proxyrealm>") )
{
modify Interlink-Proxy-Target = "<Proxy Target Server or IP Address>"
exit "ACK"
}
Use the following rules while replacing the <realm> variable, with the realm
name:
Then…If you have configured …
Replace <realm> with the realm name
configured in step 1
The realm for RADIUS standard password
authentication
Replace <realm> with the inner realm name
configured in step 1
Tunneled realms with different inner and outer
realms for EAP authentication
212 OATH Standards-Based OTP Authentication