HP-UX AAA Server A.08.02 Administrator's Guide

Table 19 Accounting Logging Options
Logging LocationConfiguration
• Local• Account forwarding set to Yes for a proxy
configuration
• Proxy accounting forwarded to remote server
• No. Account forwarding to a central server
• Local only• Account forwarding set to No for a proxy
configuration
• No Account forwarding to a central server
• No local logging• Account forwarding set to Yes for a proxy
configuration
• Proxy accounting forwarded to remote server
• Account forwarding to a central server
• All accounting forwarded to central server
• No local or proxy accounting• Account forwarding set to No for a proxy
configuration
• All accounting forwarded to central server
• Account forwarding to a central server
Follow the steps in “Proxying Authentication and Accounting Messages to the Same Server”
(page 86) to set account forwarding to yes for a proxy configuration. Follow the steps in “Proxying
Accounting Requests to a Central Server” (page 86) to forward accounting requests to a central
server.
Proxying Authentication and Accounting Messages to the Same Server
1. If you have not already configured the remote server, follow the procedure to create or modify
proxies (see “Creating or Modifying a Proxy” (page 82)). If the proxy configuration already
exists, access it from the proxy screen.
2. From the Realms to forward drop-down list, select the name for the realm that you want to
forward the accounting messages to. If the realm is not already in the drop-down list, select
Add Realm and follow the instructions in the Proxy Realm dialog box that appears.
3. In the Proxy Realm window that appears, enter the realm name.
4. In the Proxy Realm window, click Save.
5. Click Create.
6. From the navigation tree, click Save Configuration.
CAUTION: Clicking Save Configuration saves the entire server configuration (access devices,
proxies, local realms, users, and server properties) to the servers you specify.
NOTE: By default, accounting messages are forwarded to the remote proxy server. Select Yes
for Use Local Session Tracking to Suppress Forwarding of Accounting Requests to record accounting
start and stop messages locally.
Proxying Accounting Requests to a Central Server
You can forward all received accounting messages to a central server by modifying the finite state
table. This configuration disables all local accounting.
1. Copy the file /opt/aaa/examples/config/proxyacct.fsm to the radius.fsm file.
2. Open radius.fsm in a text editor and locate the following lines:
Acctwait:
*.*.ACK RAD2RAD REPLYHold Xstring=”default.accounting.proxy.server”
*.*.ACCT_DUP RAD2RAD REPLYHold Xstring=”default.accounting.proxy.server”
86 Configuring Proxies