Basic Configuration Tasks
Storing User Profiles
Chapter 3 33
the method you choose is compatible with the client password hashing method. The
following table lists the supported client password hashing methods and each
storage hash you should use for each method:
Step 9. You may enter values in the remaining fields to control the users session. These
fields are optional and correspond to RADIUS A-V pairs that are explained in more
detail in the HP-UX AAA Server Administrator’s Guide.
Step 10. Select the Create button.
Step 11. Select Save Configuration from the Navigation Frame. If you have multiple
remote servers, you will prompted to select and confirm which servers you wish to
add the access device entry to.
CAUTION Save Configuration will save the entire server configuration (access devices,
proxies, local realms, users, and server properties) to the servers you specify.
Grouping Users by Realm
While the HP-UX AAA Server can authenticate an individual user, you may want to
authenticate and provision a group of users according to a common criteria, like an
authentication type. One method of grouping users is according to the realm that they belong
to. A realm is derived from a user’s Network Access Identifier, for example: name@sample.com
where sample.com is the realm. Use the following steps to store user profiles in a flat text file
grouped by realm:
Step 1. Access Server Manager.
Step 2. Select the Local Realms link from the Navigation Tree and then select the New
local realm link
Table 3-1 Password Hashing Compatibility
Client Password Hash Storage Hash
PAP Any
MSCHAP NT Hash or Plain Text
MD5 MD5 or Plain Text
GTC Static Any