HP-UX AAA Server A.08.02.10 Administrator's Guide HP-UX 11i v3 (T1428-90093, November 2013)

Table 5 File Locations Upon Installation (continued)
FileDirectory
Default configuration files. Files residing here are copied to
/etc/opt/aaa directory during installation.
/opt/aaa/newconfig
Directory containing a unique set of self-signed digital certificates
created during installation.
/etc/opt/aaa/security/
Directories where manpages are installed/opt/aaa/share/man/man5 and ~/man1m
Directory containing Administrator’s Guide and product
documentation.
/opt/aaa/share/doc/
Configuration files:/etc/opt/aaa
• aaa.config: runtime and tunneling configuration file
• authfile: realm to authentication-type mapping file
• clients: client to shared secret mapping file
• dictionary: definition file required by the radiusd daemon
• las.conf: authorization and accounting configuration file
• log.config: session logging configuration file
• radius.fsm: external FSM table for the server
• users: holds user security profiles and reply items
• vendors: holds Internet Assigned Numbers Authority (IANA)
numbers and other vendor specific details
• engine.config: stores most of the AAA server properties.
• EAP.authfile: configures EAP authentication for user profiles
• iaaaAgent.conf: specifies how often the AAA server’s SNMP
subagent will check to see if a master agent is active
• aaa.config.license: Do not alter this file
• RADIUS-ACC-SERVER-MIB.txt: describes RADIUS Accounting
MIB definitions.
• RADIUS-AUTH-SERVER-MIB.txt: describes RADIUS
Authentication MIB definitions.
• RADIUS-DYNAUTH-CLIENT-MIB.txt: RADIUS Client Dyanmic
Authorization MIB definition
• Default policy files:
◦ request-ingress.grp
◦ reply-egress.grp
◦ proxy-egress.grp
◦ proxy-ingress.grp
◦ client-request-init.grp
◦ client-request-egress.grp
◦ client-reply-ingress.grp
Table 6 lists the files generated during operation and located in /var/opt/aaa/ by default:
42 Installing and Securing the HP-UX AAA Server