HP-UX AAA Server A.08.01 administrator's guide (T1428-90072, May 2010)

Table Of Contents
Table 33-1 Dynamic Authorization-Related Configuration Items (continued)
DescriptionConfiguration Items
The maximum number of retries for client requests. This is a global
value.
default_client_retries
The retransmission interval for client requests. This is a global
value.
default_client_retry_interval
The CLIENT AATV is a generic AATV, which you can use to perform the required
client functions. You must configure the CLIENT AATV in the aatv.CLIENT block
within the aaa.config file. The syntax of the aatv.CLIENT block parameters is as
follows:
aatv.CLIENT
{
<action name>.client_timer_value <time interval>
<action name>.client_max_requests <value>
}
Following is an example of the aatv.CLIENT block within the aaa.config file:
aatv.CLIENT
{
Disconnect.client_timer_value 1
Disconnect.client_max_requests 10
}
The clients File
The server configuration must include all the clients (NASs, RADIUS proxy servers,
and other network devices) that can communicate with the AAA server. If a client is
not included in the configuration, the server discards its messages.
The /etc/opt/aaa/clients file contains the identifying information for these clients.
IMPORTANT: Configuration files have a maximum input line length of 255 characters.
No checking is done to ensure that a configuration statement has not exceeded this
limit.
Syntax of a Client Entry
Name:authport:acctport:dynport Shared-Secret Type=vendor:{NAS|PROXY}options
Version Prefix
An IPv4 example of a client that is a NAS:
192.0.2.0 secret type=Ascend+USR:NAS+RAD_RFC+ACCT_RFC v1
An IPv4 example of a client that is a proxy:
192.0.2.0:3400 secret type=Ascend+USR:PROXY+RAD_RFC+ACCT_RFC v1
An IPv6 example of a client that is a NAS:
526 Configuration Files