HP-UX AAA Server A.08.02 Administrator's Guide

Table 100 Common Configuration Problems (continued)
TroubleshootingProblem
This error can occur if one of the policy files is using an attribute
instance that is not present in the incoming request.
Cause
If you are unsure whether the attribute used in the policy file will
be present in all the incoming requests, verify that it is present in
Resolution
the request before actually using it. You can use the count
attribute function to verify that the attribute is present. For example,
if ( count(State) = 10 &&
State = "xxxxx" )
Instance <begin> is not allowed in the argument for <tolower>.
Only numeric instances and 'last' are allowed
Log MessageRequest dropped
This error can occur if you have used the begin keyword to
specify the first occurrence of an attribute instance with any
Cause
command other than the insert command. For more information
on the usage of the begin keyword, see “Keyword Instance
Specification” (page 309).
Use numeric instances to specify the first occurrence of an attribute
instance. For example:
tolower(User-Name[0])
Resolution
Instance '*' is not allowed in the argument for 'tolower'. Only
numeric instances and 'last' are allowed.
NOTE: In this example, tolower has been used. However, this
kind of error message can appear whenever any unsupported
arguments are specified.
Log MessageRequest dropped
This error can occur if you have specified an asterisk with
commands or attribute functions that do not support it. For more
information on the usage of the asterisk keyword, see ???.
Cause
Specify a particular instance instead of specifying all instances of
an attribute where it is not supported.
Resolution
AAASQL_aatv_action: No such attribute
'Client-Request-Create-ActionId'
of vendor 'HP' found in the Authreq
Log MessageCannot generate client
requests.
AAASQL_aatv_action: No such attribute
'Client-Request-Update-ActionId'
of vendor 'HP' found in the Authreq
AAASQL_aatv_action: No such attribute
'Client-Request-Timeout-ActionId'
of vendor 'HP' found in the Authreq
The HP-UX AAA Server is not configured to set the SQL Access
action IDs used for generation of client requests.
Cause
Verify the policies configured in the
client-request-init.grp file. Ensure that the
Resolution
Client-Request-Create-ActionId,
Client-Request-Update-ActionId and
Client-Request-Timeout-ActionId attributes are assigned
correct SQL Access action IDs for all the configured CLIENT
actions. Ensure that the CLIENT action names configured in the
aaa.config file match the CLIENT action names used in this
policy file.
For more information on HP-UX AAA Server client functionality,
see “Configuring the HP-UX AAA Server for Client Functionality ”
(page 210)
358 Troubleshooting Procedures