HP-UX AAA Server A.08.02 Administrator's Guide

Table 102 Common Authentication Failure Problems (continued)
TroubleshootingProblem
check_request: Access denied. Request does not match check item '<check
item attribute>' for user '<user name>' in realm '<realm name>'.
Expected: '<IP address>',received: '<IP address>'
Log MessageUnable to
authenticate
Or
check_request: Access denied. Request matched deny item '<deny item
attribute>' for user '<user name>' in realm '<realm name>'
The attribute value sent by the client does not match the CHECK item value
configured for the user profile.
Cause
Or,
The attribute value sent by the client matches the DENY value configured
for the user profile.
Solution 1. Verify the attributes sent by the client to the HP-UX AAA Server.
2. If the client sent correct attributes, verify the CHECK and DENY items
configured for the user in the user profile datastore.
If the datastore is the local file, use the Users screen in the Server Manager
to configure the user.
For more information on configuring local users, see ???.
If you have modified the configuration, save the configuration and restart
the HP-UX AAA Server.
dhcpRelayAatv_ActionFunction: Request failed. DHCP Relay is disabled.
Verify DHCP Server-Name/ IP-Address at DHCP server properties in the
Log MessageUnable to
authenticate
Server Manager at Server Properties > DHCP Relay Properties or in
/etc/opt/aaa/aaa.config Authentication: 24/0 '<user name>' via
<host name/IP address> from <host name/IP address> port
<port no> Outbound - FAILED Problem allocating IP address -- total 0,
holding 0
The DHCP configuration in the /etc/opt/aaa/aaa.config file is
incorrect.
Cause
Manually edit the /etc/opt/aaa/aaa.config file and modify the
value <value> or keyword <keyword>
Solution
Or
1. Navigate to the DHCP Relay screen through the Server Properties screen
of the Server Manager.
2. Ensure that you specify a correct entry for the DHCP server and port.
3. If you have modified the configuration, save the configuration to the
HP-UX AAA Server and restart it.
dhcpRelayAatv_InitFunction: ERROR attribute not in '<attribute>'
dictionary dhcpRelayAatv_InitFunction: DHCP Relay disabled: No DHCP
server configured. check dictionary
Log Message
An attribute used for DHCP configuration in /etc/opt/aaa/aaa.config
was not found in the dictionary file.
Cause
Manually edit the /etc/opt/aaa/dictionary file and add the attribute
<attribute>.
Solution
Sequence counter resynchronization failed for user <user name> in realm
<realm name> after <number> unsuccessful OTP validations. The last
sequence counter attempted is <number>.
Log MessageUnable to
authenticate
Troubleshooting the HP-UX AAA Server 365