HP-UX AAA Server A.08.02 Administrator's Guide

Figure 84 SQL Access Components
When the AAA Server receives a RADIUS request to perform an action (for example, authentication),
it calls the SQL Access AATV if SQL Access is configured. The SQL Access AATV maps RADIUS
attributes to database columns and prepares user defined SQL statements for execution. The
connector libraries pass the SQL statements to vendor supplied database client libraries, which in
turn communicate with the database.
After the database returns the query results, the SQL Access AATV maps the resulting database
columns to RADIUS attributes for further processing by the AAA Server.
The definition of the input into the SQL statements (input map), the SQL statement itself, and the
output definition (output map) is called an SQL action.
SQL Access Concepts
SQL actions are defined in the /etc/opt/aaa/sqlaccess.config file as a set of one or more
combinations of SQL mappings and user defined SQL statements that are executed against the
database.
SQL mappings consist of input and output maps. An input map consists of one or more input
mapping entries, which identify the input into an SQL statement. An output map consists of one or
more output mapping entries which identify what to do with the output from the SQL statement.
Each mapping entry, input or output, consists of a source and target component.
Mappings without SQL statements are possible, and SQL statements can be executed without
mapping entries. See “Advanced SQL Mapping Configuration” (page 269) for more information.
RADIUS Attribute to SQL Statement Mapping
You can use SQL mappings to define how to associate or "map" RADIUS attributes to and from
the input and output of your SQL statement . The execution of the SQL statement and associated
mappings occur in three steps:
1. Input Mappings
2. SQL statement execution
3. Output mappings
In the typical case, you map RADIUS attributes (input source) to SQL statement placeholders (input
target). The AAA Server binds the RADIUS data to the SQL statement in preparation for execution.
After execution of the SQL statement, the AAA Server processes the output mappings, which typically
consist of a mapping to check the result of the SQL statement execution and one or more mappings
248 SQL Access