HP-UX AAA Server A.08.02.10 Administrator's Guide HP-UX 11i v3 (T1428-90093, November 2013)

Changing the Default localhost Proxy Settings..............................................................44
Environment Specific Security Procedures .........................................................................44
Using Secure Socket Layer (SSL) for Secured Remote Server Manager Administration.........44
Creating a Tomcat Identity Specifically for the HP-UX AAA Server ..................................45
Running the HP-UX AAA Server on Hosts with System Hardening Software.......................46
Running the HP-UX AAA Server as a Non-Root User......................................................46
Setting Up the HP-UX AAA Server to Start as Non-Root User After Reboot........................47
4 Enabling the HP-UX AAA Server for GUI-based Administration....................49
Accessing the Server Manager............................................................................................49
Starting and Stopping the RMI Objects............................................................................49
Starting and Stopping Tomcat.........................................................................................50
Testing the Installation ........................................................................................................50
To Test the Installation....................................................................................................50
Starting HP-UX AAA Servers Using Server Manager...............................................................51
AAA Server Start Options..............................................................................................52
Server Manager’s Reload Feature....................................................................................53
Starting HP-UX AAA Servers From the Command Line.............................................................53
Configuring the HP-UX AAA Server to Start Automatically Upon System Reboot ....................56
Stopping or Restarting HP-UX AAA Servers............................................................................56
Using Server Manager...................................................................................................56
From the Command Line.................................................................................................56
Adding an HP-UX AAA Server to Your Network.....................................................................56
II Configuring the HP-UX AAA Server Manager Using the Server Manager GUI
.................................................................................................................58
5 The HP-UX AAA Server Manager Interface...............................................61
Commonly Used Icons in the GUI.........................................................................................61
6 Managing HP-UX AAA Servers...............................................................63
Using the Server Connections Screen....................................................................................63
Adding a New Server Connection.......................................................................................63
Modifying Connection Attributes..........................................................................................64
Deleting a Server Connection..............................................................................................65
Managing Multiple Servers.................................................................................................65
Loading and Saving Your Configuration................................................................................66
Loading and Saving Your Configuration Using RMI Server..................................................66
Enhancing Loading and Saving Performance Using Secure Copy Protocol.............................67
Setting up Key-Based Authentication................................................................................68
Creating a Public-Private key set with ssh-keygen...........................................................68
Sharing the Public key with Remote Hosts.....................................................................68
Verifying Key-Based Authentication..................................................................................69
7 Configuring RADIUS Clients Using the Access Devices Screen.....................70
Navigating the Access Devices Screen..................................................................................70
Adding a RADIUS Client.....................................................................................................70
Modifying a RADIUS Client’s Properties................................................................................72
Deleting a RADIUS Client....................................................................................................72
8 Configuring Realms...............................................................................73
Using the Local Realms Screen.............................................................................................73
Adding a Realm................................................................................................................73
Modifying Realms..............................................................................................................75
Special Entries...................................................................................................................76
Deleting a Realm...............................................................................................................76
Configuring Realms for Authentication using an External Server...............................................77
Configuring Realms for Database Access via SQL..............................................................77
4 Contents