HP-UX AAA Server A.08.01 administrator's guide (T1428-90072, May 2010)

Table Of Contents
fedc::ba98:fe*
The users File
User profiles associate information, like check and reply items, with a user name. The
server configuration must include profiles for all the users that can access services
through the AAA server. Profiles can be stored in flat text files, or in an external
database. If a user profile is not included in the configuration, the server will reject the
user's access request.
The default users, realm, or prefix.users files may contain user profiles for
authentication. Each user entry in one of these files can be one or more lines of
information. You do not have to edit the default users file when mapping realms to
authentication types in the authfile, since the user information for each defined
realm will be stored in a realm file or external database. Unless the default installation
of the configuration files has been changed, the users file can be found in the /etc/
opt/aaa directory.
IMPORTANT: Configuration files have a maximum input line length of 255 characters.
No checking is done to insure that a configuration statement has not exceeded this
limit.
NOTE: The order of the entries is important; the first entry that matches the request
will be used to authenticate the user. The server will ignore the remaining entries;
therefore, you should list the most specific entries first and the default entry should be
last.
Syntax of a User Entry
The first line of each entry consists of one or more fields:
Users-Name configuration-items check-items
reply-item,
reply-item
. . .
Syntax of IPv6 Attributes
This section briefly describes the syntax of the IPv6 attributes that the users file
contains. For more information on IPv6 Attributes, refer to RFC 3162.
NAS-IPv6-Address
This attribute indicates the identifying IPv6 address of the NAS which is requesting
authentication of the user, and it must be unique to the NAS within the scope of the
RADIUS server.
528 Configuration Files