HP-UX AAA Server A.08.01 administrator's guide (T1428-90072, May 2010)

Then…If you have configured …
Replace <realm> with the inner realm name
configured in step 1 using the following syntax:
Tunneled realms with the same inner and outer
realms for EAP authentication
• PEAP (EAP-GTC):
<realm>/peap
Or
• TTLS (PAP):
<realm>/ttls
6. In the proxy-egress.grp file, replace the <proxyrealm> variable with the
realm name, and the <Proxy Target Server or IP Address> variable with
the proxy target server host name (FQDN) or the IP Address that is configured in
Step 2, as follows:
if ( (count (User-Realm) > 0) && (User-Realm = "<proxyrealm>") )
{
modify Interlink-Proxy-Target = "<Proxy Target Server or IP Address>"
exit "ACK"
}
NOTE: While specifying the realm, ensure the following:
• The realm name used is identical with the name used while configuring the
realm (step 1).
• The realm is specified using the realm specification rules listed in step 5.
7. Reload the configuration changes by selecting Reload from the Administration
screen of the Server Manager. If the server is not running, start the HP-UX AAA
Server to read the configuration.
8. Configure the proxy target server for password validation as follows:
• If the target proxy server is an HP-UX AAA Server:
1. Configure the proxy server as a client using the same shared secret of the
proxy server. For more information, see “Configuring RADIUS Clients
Using the Access Devices Screen” (page 100).
2. Configure the proxy target server to validate password. For more
information, see “Adding a Realm” (page 105).
• If the target proxy server is not an HP-UX AAA Server, see the documentation
of the target RADIUS server to configure OTP authentication.
NOTE: While configuring the proxy target server you must configure it using
the realm name that you have configured in Step 1.
The HP-UX AAA Server is now configured for OTP validation at local server and
password validation at external server.
216 OATH Standards-Based OTP Authentication