HP-UX AAA Server A.08.02.10 Administrator's Guide HP-UX 11i v3 (T1428-90093, November 2013)

Figure 51 Usage of Bit Masks to set OTP Authentication Actions
The OTP-ActionId attribute is set at 112 by converting the binary value 01110000 into decimal.
Table 36 lists some common actions along with the bit masks that must be used for configuration.
Table 36 Common OTP Authentication Actions
Bit Mask SetMS-CHAP v2 OTP-ActionId Value
RADIUS Standard
Password
Action
OTP-ActionId
Value
01110000 (for
OTP-ActionID value 112)
48112Validates the password and OTP
(two-factor authentication) if the
00011000 (for
OTP-ActionID value 48)
incoming request contains password
and OTP.
01101000Not applicable104Validates only the password and
stores the generated OTP in to
Otp-In-Attribute attribute if
the incoming request contains
password and OTP.
01100101Not applicable101Validates only the password,
replaces User-Password with the
incoming OTP and sets the proxy
event to proxy the request to the
configured proxy target server in
the proxy-egress.grp policy
file, for OTP validation, if the
incoming request contains password
and OTP.
01010011Not applicable83Validates only the OTP, replaces
User-Password with the incoming
password and sets the proxy event
to proxy the request to the
configured proxy target server in
the proxy-egress.grp policy
file, for password validation, if the
incoming request contains password
and OTP.
01010000Not applicable80Validates only the OTP if the OTP
is sent with the password.
Configuring OTP Authentication on the HP-UX AAA Server 137