XYGATE User Authentication Reference Manual

XYGATE
®
User Authentication
™
Reference Manual
Appendix B: The UAACL File
XYPRO Technology Corporation 279 Proprietary and Confidential
B40: RADIUS_REQUIRE_PASSWORD
The RADIUS_REQUIRE_PASSWORD keyword value determines whether or not all
users, some users, or no users will be required to enter a Guardian PASSWORD in
addition to the RADIUS password. This keyword can be present in the UACONF file,
the UAACL file or both. The UACONF value will be enforced globally unless
overridden by values set in individual UAGroups in the UAACL file.
When running the XUA_RADIUS_INSTALL macro as the initial step in configuring the
RADIUS interface, the answer to the prompt “Do you want to require a Guardian
password in addition to RADIUS authentication for all NonStop users?” will create an
entry in the UACONF file. This entry can be changed at anytime by direct editing of the
UACONF file.
Syntax:
RADIUS_REQUIRE_PASSWORD {ON | OFF}
ON - Users will be prompted for the NonStop password and then, if the password is
correct, the RADIUS prompt(s) will be presented. Validity of both is required for the
successful logon.
OFF – The users are only presented with the RADIUS Password, when logging on.
Example – How to require a password in addition to RADIUS authentication:
UAGROUP OPERATORS
Description "All operators authenticated with RADIUS Password and NonStop
password"
RADIUS_AUTHENTICATE ON
RADIUS_REQUIRE_PASSWORD ON
!Selection Criteria:
FROM_USER $EVERYONE
TO_USER $OPERATORS