HP-UX AAA Server A.08.02 Administrator's Guide

# Framed Protocol Values
VALUE Framed-Protocol PPP 1
VALUE Framed-Protocol SLIP 2
VALUE Framed-Protocol ARA 3
VALUE Framed-Protocol Gandalf 4
VALUE Framed-Protocol Xylogics 5
# LAS Session Termination Code Values
Merit.VALUE LAS-Code LAS-Normal 0
Merit.VALUE LAS-Code LAS-Reject 1
Merit.VALUE LAS-Code LAS-Cancel 2
Merit.VALUE LAS-Code LAS-Noconfirm 3
Merit.VALUE LAS-Code LAS-Overtime 4
Merit.VALUE LAS-Code LAS-Unknown 5
Merit.VALUE LAS-Code LAS-Notoken 6
Merit.VALUE LAS-Code LAS-Notlocal 7
Merit.VALUE LAS-Code LAS-Suspend 8
Merit.VALUE LAS-Code LAS-Failed 9
Merit.VALUE LAS-Code LAS-Authorized 10
Merit.VALUE LAS-Code LAS-NASreboot 11
Merit.VALUE LAS-Code LAS-Remote 12
Merit.VALUE LAS-Code LAS-Duplicate 13
Merit.VALUE LAS-Code LAS-Collision 14
Merit.VALUE LAS-Code LAS-Stop 15
The las.conf File
The las.conf file contains a list of configuration items for the Local Authorization Server (LAS)
that controls realm-based authentication. These items are organized into several sections. There
are configuration sections for realms, token pools, and generic LAS configuration items. These
sections do not have to maintain a particular order; however, you must define an item (a token
pool, for example) before it can be referenced.
CAUTION: You need to edit the las.conf file by adding a realm entry only if you wish to
include token pools, or define session timing parameters. Token pools and session timing parameters
are not configurable through the Server Manager graphic interface. When defining realm attributes
in the Server Manager graphic interface, the Session Tracking radio buttons automatically add or
remove a realm las.conf entry. If you add a realm entry by editing this file directly, and then
select the No Session Tracking radio button in the Server Manager, and save the change, the
las.conf realm entry will be deleted.
IMPORTANT: Configuration files have maximum input line length of 255 characters. No checking
is done to insure that a configuration statement has not exceeded this limit. In addition, all
configuration files must end with a new line character.
LAS Session Timing Parameters
You can override the default times for built-in parameters related to session timing. Table 107 lists
the default LAS session timing parameters.
Table 107 Default LAS Session Timing Parameters
DescriptionDefaultParameter
Tells LAS how long to wait for an Accounting-Start message
from the NAS. After the specified number of seconds, a
45 secondsSession-Hold-Time
session is moved into not-confirmed state, in which it is not
The las.conf File 393