XYGATE User Authentication Reference Manual

XYGATE
®
User Authentication
™
Reference Manual
Chapter 14. Configuring the RADIUS Interface
XYPRO Technology Corporation 123 Proprietary and Confidential
Do you want to configure the RADIUS interface now <Y>?
The last prompt allows you to review the summary of your decisions. If you
answered Y, the UACONF file will be modified. If you answered N, the macro quits
without making the modifications so that you will need to run it again later.
14.6 RADIUS-Related UAGroup (UAACL) Keywords
This section describes the RADIUS-related keywords that are used to divert
authentication to the RADIUS server.
The XYGATEUA UAACL file can contain the following RADIUS-related keywords:
MAP RE:"<regular expression>" <operator>
RADIUS_AUTHENTICATE { ON | OFF | OPTIONAL }
RADIUS_REQUIRE_PASSWORD { ON | OFF }
14.7 Designing the User Schema and ID Mapping in the UAACL File
RADIUS keywords can be set in the UACONF file, the UAACL file or both:
• For the UACONF file, refer to pages 238, 243 and 244 respectively:
RADIUS_AUTHENTICATE { ON | OFF | OPTIONAL }
RADIUS_PROXY_IP_PROC <$process name>
RADIUS_REQUIRE_PASSWORD { ON | OFF }
• For the UAACL file, refer to pages 278 and 279 respectively:
RADIUS_AUTHENTICATE { ON | OFF | OPTIONAL }
RADIUS_REQUIRE_PASSWORD { ON | OFF }
If you set these values in the UACONF file, they are global. If you did not set values for
these keywords in the UACONF file or wish to override the UACONF value for certain
groups of users, you will have to put the appropriate keyword and value in the
appropriate UAGroup(s) of the UAACL file.
Note: The value in the UAACL file always overrides the value in the UACONF file.
The MAP keyword is used to convert the NonStop server user’s Logon Name (an alias
or a Guardian user name) to the appropriate RADIUS user account. Each UAGroup
may include one or more MAP keywords to perform the step-by-step conversion of the
NonStop server logon name to the RADIUS account. Refer to Chapter 15, “Mapping
NonStop IDs to Alternative Authentication Databases” starting on page 129 for a
complete reference on mapping.