HP-UX AAA Server A.08.02 Administrator's Guide

4. The RADIUS message type of the request is set in the attribute Interlink-Packet-Code.
5. For CoA, the Filter-Id attribute is set based on the time of the day.
The attribute Client-Action-Name is used to differentiate between Disconnect and CoA
requests.
The client-reply-ingress.grp.dynauth Sample File
The client-reply-ingress.grp.dynauth file is the sample client reply ingress
policy file. In this policy file, the SQL actions to be used to update the database table for
Disconnect-ACK response, Disconnect-NAK response, CoA-ACK response and CoA-NAK
response are set in the Client-Request-Cleanup-ActionId attribute. The
Interlink-Packet-Code attribute is used to determine the response type.
The sqlaccess.config.dynauth Sample File
Table 66 lists the SQL actions listed in the sqlaccess.config.dynauth file to support Dynamic
Authorization.
Table 66 SQL Actions that Support Dynamic Authorization
DescriptionSQL action
Queries the session table for sessions that have exceeded
their session-timeout limit, and uses the information
CreateDisconnectReq
in the expired session to create a Disconnect-Request.
Based on multi-row functionality, this SQL action retrieves
all expired sessions using a single query.
Updates the status of the session entry to indicate that the
session is processed for Disconnect-Request.
UpdateDisconnectReq
Updates the status of the session entry to indicate that the
Disconnect-Request timed out.
TimeoutDisconnectReq
Removes the session entry after receiving
Disconnect-ACK.
CleanupDisconnectedSession
Removes the session entry after receiving
Disconnect-ACK. Also, releases the IP address of the
first session entry that was removed.
CleanupDisconnectedSession-DHCP
Updates the status of the session entry after receiving a
Disconnect-NAK.
SuspendDisconnectedSession
Sends CoA requests for all sessions at 08:00 and 20:00
hours to change the Filter-Id to daytime_filter and
CreateCoAReq
nighttime_filter respectively. Based on multi-row
functionality, this SQL action retrieves all expired sessions
using a single query.
Updates the status of the session entry to indicate that the
session is already processed for CoA-Request.
UpdateCoAReq
Updates the status of the session entry to indicate that the
CoA-Request timed out.
TimeoutCoAReq
Updates the session entry after receiving CoA-ACK.UpdateCoASession
Updates the status of the session entry after receiving
CoA-NAK.
SuspendCoASession
Restores timed out sessions to ACTIVE state after 60
seconds. Subsequently, Disconnect or CoA requests can
UpdateTimedOutSessions
be resent. Each time a Disconnect or a CoA request for
a session times out, the session is disabled for 60 seconds.
Sample Configuration Files 237