HP-UX AAA Server A.08.02.10 Administrator's Guide HP-UX 11i v3 (T1428-90093, November 2013)

31 Troubleshooting Resources
The HP-UX AAA Server includes a set of utility programs that can:
• check the status of the HP-UX AAA Server
• emulate a RADIUS client
• turn debugging on and off
• set and modify the debug level
Additionally, the RADIUS client and EAP supplicant vendors typically provide troubleshooting
capabilities for their components. Protocol analyzers can also be used if more detailed
troubleshooting is required.
This chapter addresses the following topics:
• “HP-UX AAA Server Troubleshooting Utilities” (page 374)
• “The HP-UX AAA Server Logfile and Debug File” (page 375)
NOTE: You can also troubleshoot the HP-UX AAA Server from the Server Manager administration
utility. For more information on troubleshooting resources available in the Server Manager, see
Chapter 13, Logging and Monitoring on page 161.
HP-UX AAA Server Troubleshooting Utilities
The following utilities enable you to troubleshoot the HP-UX AAA Server from the HP-UX command
line:
• The radcheck utility - Checks if the AAA Server is active and displays usage statistics.
• The radpwtst utility - Simulates a RADIUS client that sends a user specified request message
to the HP-UX AAA Server and checks the response from the HP-UX AAA Server.
• The raddbginc utility - Turns debugging on and off, and sets the debug logging level. It is
a wrapper for the radsignal utility.
• The radsignal utility - Turns debugging on and off, sets the debug logging level, and rolls
over the debug and session accounting output to new files.
This section describes these troubleshooting utilities.
The radcheck Utility: For Checking the Server Status
The radcheck utility sends a RADIUS protocol status request to the HP-UX AAA Server and displays
the contents of the status reply. The radcheck utility can be invoked from any host and by any
user. However, the HP-UX AAA Server returns more information to hosts that are registered in the
/etc/opt/aaa/clients file.
Following is the syntax for the radcheck command:
radcheck [-p port] [-t timeout] [-r retries] [-x] [-x] [-x] [-x] [-v]
Server
If radcheck is successful, a message similar to the following is displayed:
Server Name (UDP-port) is responding on standard output.
For more information on the radcheck utility, see radcheck (1M).
The radpwtst Utility: For Testing Authentication
The radpwtst utility simulates a RADIUS client that sends and receives RADIUS messages to and
from the HP-UX AAA Server. The radpwtst utility forwards the user specified A-V pairs and other
374 Troubleshooting Resources