The HP-UX AAA Server, based on a client/server architecture,
consists of the following components which may be installed independently:
HP-UX AAA Server daemon, libraries,
and utilities
The AAA Server Manager is the user interface that
performs administration and configuration tasks from a client’s
browser for one or more AAA servers.
AAA Server module for Oracle
authentication
The exchange of configuration information between a remote
AAA server and the AAA Server Manager program is validated
by a shared secret. This secret is unique to the Server Manager and
a remote AAA server. It should not be the same secret used by a
AAA server and the peers that it communicates with. The exchange
of information between a browser and the client program is not validated
or encrypted by default, although you can configure HTTPS to secure this
communication. Refer to the HP-UX AAA
Server Administrator’s Guide for more information
about configuring Server Manager to run over HTTPS.
 |
| |
|
 | NOTE: To secure the communication between the Server Manager
and the HP-UX AAA Server, install the Server Manager and the HP-UX
AAA Server software inside a secure network. |
|
| |
|
AAA
Servers |
|
AAA server installations include the AAA server, which performs
the authentication, authorization, and accounting functions to process
requests, and RMI objects. The RMI objects establish a connection
and facilitate communication between the AAA server and the HP-UX
Tomcat-based Serverlet Engine.
AAA
Server Manager Program |
|
The AAA Server Manager utilizes the HP-UX Tomcat-based Serverlet
Engine to provide a configuration
interface between a web browser and one or more AAA servers. Server
Manager is used for starting, stopping, configuring, and modifying
the servers. In addition, the program can retrieve logged server
sessions and accounting information for an administrator.
The
802.1x Advisor |
|
The 802.1x Advisor is an HTML tutorial/help system in the
Server Manager GUI that walks you through the
tasks and Server Manager screens for securing WLANs with the HP-UX
AAA Server. The 802.1x Advisor provides information only—it
does not edit configuration files. Follow the 802.1x Advisor and
use Server Manager to create and deploy basic AAA configurations
for securing WLANs. Refer to the HP-UX AAA Server Administrator’s
Guide for complete HP-UX AAA Server documentation. The following
figure shows the 802.1x Advisor.
Accessing the Server
Manager |
|
The Server Manager provides access to the AAA server management
functions and configuration files. From a remote
client workstation, administrators can access the AAA Server Manager
interface through a Web browser. An administrator can create a AAA configuration
for authenticating users and implementing authorization policies.
In addition to creating, modifying, and deleting entries in many
of the server’s configuration files, an administrator may
start and stop the AAA server, access the server’s status
and system time, retrieve information from accounting and session
logs, and terminate sessions. You can access the functions that
perform these operations by selecting an item from the Navigation
Tree located in the left frame of the HTML page.
Some advanced features of the HP-UX AAA Server cannot be configured
through the Server Manager interface. For example, if you want to
define session management parameters, policies, or vendor-specific
attributes, you must manually edit the configuration files. Refer
to the HP-UX AAA Server Administrator’s
Guide for more information.
|
| |
|
 | IMPORTANT: Refer to the HP-UX AAA Server Release Notes for
the supported browsers for each version of the product. |
|
| |
|
|
| |
|
| NOTE: The browser preferences or Internet options should be
set to always compare loaded pages to cached pages. |
|
| |
|
Printable version
