HP-UX AAA Server A.08.01 administrator's guide (T1428-90072, May 2010)

CAUTION: If you configure an IPv6 address in the ourhostname variable, then
traditional IP (IPv4) hosts will not be able to send or receive messages. Similarly, if you
configure an IPv4 address here, then IPv6 hosts will not be able to send or receive
messages. If you configure a DNS name, then the first address returned by the DNS
server is used.
The packet_log Variable
This variable controls checks to match a current request with an original request, which
can occur when logging certain attributes in a request log (NAS-Identifier, NAS-Port,
User-Name, and so on). This check can cause an abort and core-dump if the +abort
option is given. This check is useful for tracking situations where a remote RADIUS
server is responding with incorrect values. In addition, it can also be used to investigate
if an AATV is corrupting the current request. Following is the syntax for the
packet_log variable:
packet_log=default
packet_log=clear (or none)
packet_log=+abort
packet_log=+both (or +comp)
packet_log=+current (or +cur)
packet_log=+original (or +orig)
packet_log=-abort
packet_log=-both (or -comp)
packet_log=-current (or -cur)
packet_log=-original (or -orig)
The value of defserver connection means to report only from the original request. The
value of +abort means to abort and core-dump if there is a mismatch.
The radius_log_fmt Variable
This variable overrides the logfile format string used.
The reply_check Variable
This variable specifies which attributes to check on a reply from a forwarded request
to ensure that they are the same as the forwarded request. Besides specifying which
attributes to check, you can specify the action to take when a mismatch occurs. Listed
below are the actions you can choose to take:
• Ignore the reply
• Ignore the mismatch
• Abort and core dump
Useful attributes to check are NAS-Identifier, Acct-Session-Id, Class, User-Name. For
example:
reply_check=first
reply_check=all
524 Configuration Files