HP-UX AAA Server A.08.02 Administrator's Guide

22 SQL Access
IMPORTANT: The Oracle authentication module is obsolete in A.08.00 release of the HP-UX
AAA Server. The Oracle authentication module is supported using SQL Access. HP recommends
that you set up your HP-UX AAA Server to interact with the Oracle database using the SQL Access
feature.
This chapter introduces the SQL Access feature, describes how it works and how to configure the
HP-UX AAA Server for SQL Access. The term SQL Access is used throughout this guide to refer to
the functionality that allows flexible and customizable access to an SQL database.
This chapter also discusses how to manage user and token information that is stored in an SQL
database. This chapter addresses the following topics:
• “SQL Access Overview” (page 247)
• “Implementing SQL Access” (page 250)
• “Administering Users and Tokens Stored in an SQL Database” (page 273)
• “Multi-Row Support For SQL Access” (page 281)
SQL Access Overview
SQL Access offers a highly flexible interface to customize the functionality of the HP-UX AAA Server
to meet your business requirements. In its basic implementation, SQL Access executes user specified
SQL statements against database columns that are mapped to RADIUS attributes. More advanced
customizations such as using customized functions are also possible.
The ability to integrate the HP-UX AAA Server with an SQL compliant database offers the following
benefits:
• Provides scalability across multiple AAA servers by using a database as a central repository
for user, account, and session information.
• Enables you to integrate AAA servers with existing databases for authentication, authorization,
and session management.
• Allows session state tracking and session limit enforcement to be shared across multiple AAA
servers for greater scalability, and availability.
• Enables the extension of AAA server functionality by introducing customized behaviors using
the combination of SQL Access and Finite State Machine (FSM) modifications.
Figure 84 shows the interaction between the various components to implement the SQL Access
feature.
SQL Access Overview 247