HP-UX AAA Server A.08.02.10 Administrator's Guide HP-UX 11i v3 (T1428-90093, November 2013)

Debug 0
}
• Retry-Interval sets the number of seconds for the AAA server to wait before trying to reconnect
to a LDAP directory server when a realm has failover directory servers configured. Default
value is 60 seconds.
• Retry-Wait sets the number of seconds that the AAA server will wait before attempting to
connect to the same failover LDAP server. When all failover directory servers configured for
a realm are down, the AAA server will try to reconnect to one every time an access request
is received. In that situation, this parameter guarantees that the software does not spend too
much time in trying to reconnect those directory servers. Default value is 1 second.
• Timeout sets the number of seconds that an LDAP connection will remain open when the AAA
server has not been able to successfully perform any successful LDAP operation. This parameter
allows better handling of the situation where the LDAP directory times out client connections.
• TCP-Timeout sets the number of seconds that the AAA server will wait for an LDAP server when
trying to establish the Transmission Control Protocol (TCP) connection.
• Debug determines whether OpenLDAP debug messages should be written to the AAA server
radius.debug file. A value of 0 disables writing these messages; a value of -1 enables
writing these messages. The syntax of this property follows a block syntax that is different from
the other aaa.config variables.
Configuring Realms for Authentication using an External Server 81