HP-UX AAA Server A.08.01 administrator's guide (T1428-90072, May 2010)

}
}
NOTE: The following requirement is applicable for Oracle only. If DHCP is
enabled, replace the following line in the /etc/opt/aaa/
client-reply-ingress.grp file:
insert Client-Request-Cleanup-ActionId = "CleanupDisconnectedSession"
with
insert Client-Request-Cleanup-ActionId = "CleanupDisconnectedSession-DHCP"
If multiple HP-UX AAA Servers are configured as a group, enter
UpdateCoASessionServerGroup,
SuspendDisconnectedSessionServerGroup and
SuspendCoASessionServerGroup instead of UpdateCoASession,
SuspendDisconnectedSession, and SuspendCoASession respectively.
5. Set the Authorize-Only-ActionId attribute to the SQL Access action ID
that must be used for Access-Request, whose Service-Type attribute value
is Authorize Only. Add the following lines in the /etc/opt/aaa/
request-ingress.grp file:
## Set the SQLAccess Action ID to be used for Authorize Only type requests.
if( count(Service-Type) != 0 && Service-Type = "Authorize-Only" )
{
insert Authorize-Only-ActionId = "AuthorizeSession"
}
NOTE: If multiple HP-UX AAA Servers are configured as a group, enter
AuthorizeSessionServerGroup instead of AuthorizeSession.
6. Add the State attribute in the generated CoA-Request. In the /etc/opt/aaa/
sqlaccess.config file, add the following mapping in the
CreateDisconnectReq and CreateCoAReq SQLActions:
FUNC(gen_state) RAD(State, REPLY)
NOTE: If multiple HP-UX AAA Servers are configured as a group, the mapping
must be added in the CreateDisconnectReqServerGroup and
CreateCoAReqServerGroup SQLActions in the /etc/opt/aaa/
sqlaccess.config file.
Configuring for Proxy Functionality
In addition to disconnecting and changing the authorization of user sessions, the HP-UX
AAA Server can act as a proxy for Dynamic Authorization requests to a target Network
Access Server (NAS). AAA proxy is an entity that acts as a client as well as a server.
When a request is received from a Dynamic Authorization Client (DAC), the proxy
Configuring for Dynamic Authorization 319