HP-UX AAA Server A.08.01 administrator's guide (T1428-90072, May 2010)

Date-Time 24 hour clock in yyyy:mm:dd:hh:mm format. This attribute is compared
to the current system clock of the system hosting the HP-UX AAA Server that is making
the comparison.
Time-of-Day 24 hour clock in hh:mm format. This attribute is compared to the current
system clock of the machine hosting the AAA server that is making the comparison.
Hours must be two digits, for example, 08:00, not 8:00.
Internal Values
Decision Assign a value to this attribute that corresponds to a predefined, or custom
event is returned to the FSM when the group entry's condition is evaluated to true.
Interlink-Packet-Code An integer value that indicates what type of RADIUS
message has been received: either 1 (Access-Request) or 4 (Accounting-Request).
Interlink-Proxy-Action A string determined by information in an Access-Request
or Accounting-Request. This indicates the name of the starting event in the FSM when
the HP-UX AAA Server receives a RADIUS message. You can preempt this value by
beginning radius.fsm with an *.*.ACK event that invokes the POLICY action, which
can then determine the start event based on a policy decision.
User-Id After the HP-UX AAA Server parses the NAI, it assigns the user name to
this attribute.
User-Realm After the AAA server parses the NAI, it assigns the realm to this attribute.
Using Indirection
You can also use indirection to compare or assign attribute values to each other. Follow
a Test Operator $Value$Pos$Len syntax, where Test is the attribute to check or assign
a value to, and Value is the attribute with the value to check against or assign to the
Test attribute; Operator is the relative or Boolean operator to use. $Pos and $Len are
optional parameters that allow you to test or assign a substring of the specified Value
attribute. Pos indicates the index position in the attribute's value to begin the substring
and if specified Len determines the length.
When used in the condition section of a group entry, indirection checks values. When
used in the reply section, it assigns a value.
For example, in an expression Port-Id <= $Port-Limit would only allow access
to users who access the server through ports that don't exceed the limit set in their
profile. As a reply item Decision = $Interlink-Proxy-Action would assign
the current FSM event to the Decision attribute.
598 Syntax of the Decision Files in Earlier Versions of the HP-UX AAA Server