HP-UX AAA Server A.08.02 Administrator's Guide

Algorithm-Based Pseudonyms........................................................................................184
Configuring for Pseudonym Identity Support....................................................................186
Sample EAP.authfile Configuration for Random Pseudonym Identity Support...................187
Sample EAP.authfile Configuration for Algorithm-based Pseudonym Identity Support........188
Sample aaa.config Configuration for Algorithm-based Pseudonym Identity Support.........189
Guidelines to Write EAP-SIM and EAP-AKA Pseudonym Database AATVs...........................189
Pseudonym Database Update AATV..........................................................................190
Update AATV Inputs...........................................................................................190
Update AATV Outputs........................................................................................190
AATV Functionality and Return Events...................................................................190
Pseudonym Database Lookup AATV..........................................................................191
Lookup AATV Inputs...........................................................................................191
Lookup AATV Outputs........................................................................................191
Lookup AATV Functionality and Return Events........................................................193
Generating Authentication Vectors Using A3, A8, and AKA Algorithms..................................193
3GPP Milenage A3, A8, and AKA Algorithm.................................................................194
18 Configuring HP-UX AAA Server for Scalability and High-Availability .......197
Overview........................................................................................................................197
Scalability and High-Availability Concepts..........................................................................197
Grouping HP-UX AAA Servers.......................................................................................197
HP-UX AAA Server Attributes........................................................................................198
HP-UX AAA Server Deployment for Scalability and High-Availability.......................................198
Managing Multiple HP-UX AAA Servers For Scalability and High-Availability..........................199
Administering HP-UX AAA Servers Using HP-UX AAA Server Manager...............................199
Logging In.............................................................................................................200
Adding a Group....................................................................................................200
Modifying a Group................................................................................................201
Deleting a Group...................................................................................................202
Adding a Server.....................................................................................................202
Modifying a Server.................................................................................................205
Deleting a Server...................................................................................................205
Cloning a Server....................................................................................................205
Administering HP-UX AAA Servers Using HP-UX AAA Server Admin Tool (Command Line)....207
rad_admin Syntax..................................................................................................207
Examples of Administering Multiple HP-UX AAA Servers..............................................208
Administering HP-UX AAA Servers Using Interactive User Interface................................208
Disaster Recovery of the HP-UX AAA Server Manager...........................................................209
19 Configuring the HP-UX AAA Server for Client Functionality .....................210
Overview........................................................................................................................210
CLIENT AATV..................................................................................................................210
Configuring CLIENT AATV............................................................................................210
Working of the CLIENT AATV.......................................................................................211
Supported APIs................................................................................................................212
Internal Attributes and Mapping Functions...........................................................................212
20 Configuring the HP-UX AAA Server for Dynamic Authorization................214
Dynamic Authorization Overview.......................................................................................214
HP-UX AAA Server and Dynamic Authorization....................................................................214
Processing of Dynamic Authorization Requests.....................................................................215
Configuring for Dynamic Authorization...............................................................................216
Basic Configuration.....................................................................................................217
Advanced Configuration..............................................................................................217
Migrating Existing SQL Access Deployments for Dynamic Authorization.........................218
Configuring Multiple HP-UX AAA Servers as a Group..................................................219
8 Contents