Known Problems and Limitations in HP-UX AAA Server A.08.00.01

Using the HP-UX AAA Server Manager, if you modify a realm, whose User Profile Storage value is SQL Access, and the SQL Action Id value is more than 16 characters long, the HP-UX AAA Server Manager inserts a set of <br> characters in the SQL Action Id string while saving the value in the /etc/opt/aaa/authfile and /etc/opt/aaa/EAP.authfile files. This problem occurs while changing the values of attributes other than the SQL Action Id, in the Modify screen. Also, this problem is observed when Radius Attribute is selected for User Storage Parameter.

Workaround: Every time you want to modify a realm using the HP-UX AAA Server Manager, reselect the correct SQL Action Id value that does not include the <br> tag, in the SQL Action Id drop-down menu. If Radius Attribute is used to configure the SQL action, remove the unwanted <br> characters from the Radius Attribute field.

When a realm is configured with a comment that includes spaces, the HP-UX AAA Server Manager removes the realm entry while saving the configuration in the /etc/opt/aaa/authfile and /etc/opt/aaa/EAP.authfile files.

Workaround: Do not include spaces in the comments.

Decreased RADIUS response time under heavy load due to increased CPU consumption.

	NOTE: This problem occurs with the HP-UX AAA Server A.08.00.01 on HP 9000 systems running HP-UX 11i v2 or HP-UX 11i v3. HP Integrity® systems running HP-UX 11i v2 or HP-UX 11i v3 are not affected.

Workaround 1: Utilize the pthread environment variable that minimizes pthread overhead for the HP-UX AAA Server in the environment where the radiusd daemon is launched:

$export PTHREAD_FORCE_SCOPE_SYSTEM=ON

Workaround 2: Install the PHCO_35997 pthread library patch on HP 9000 systems running HP-UX 11i v2, or PHCO_37477 on HP 9000 systems running HP-UX 11i v3. These patches are available at:

http://itrc.hp.com

The HP-UX AAA Server leaks memory when the SQL Access feature uses the MySQL Unix ODBC/MySQL client to interact with a MySQL database.

	NOTE: This problem occurs with the HP-UX AAA Server A.08.00.01 on HP 9000 systems running HP-UX 11i v2 with the PHSS_31849 (or later) patch only. HP 9000 systems running HP-UX 11i v3, and HP Integrity systems running HP-UX 11i v2 or HP-UX 11i v3 are not affected.

Workaround: Install PHSS_34858 (linker + fdp cumulative patch) on the HP 9000 system running HP-UX 11i v2, where the radiusd daemon is launched.

Updating the HP-UX operating system on a system that does not have the HP-UX AAA Server installed, using an operating system (OS) bundle that includes the HP-UX AAA Server fails.

Workaround 1: Adding a group, called aaa, prior to updating the OS overcomes this problem. To add a group, complete the following steps:

Workaround 2: Do not include the HP-UX AAA Server in the OS bundle. Instead, you can install the product separately from the AR media or from the Software Depot after the OS update is completed.

Cold-installing HP-UX on a system using an OS bundle that includes the HP-UX AAA Server fails.

Workaround: Do not include the HP-UX AAA Server in the OS bundle. Instead, you can install the product separately from the AR media or from the Software Depot after the OS install is completed.

When the HP-UX AAA Server is configured using policies, and a realm is configured to proxy the requests to a remote RADIUS server, the proxy egress policy is not executed for the proxied accounting requests.

Workaround: None. If you encounter this problem, contact HP support personnel.

If the /etc/opt/aaa/radius.fsm file is modified to allow a request to be processed by the RAD2RAD action module more than once, the HP-UX AAA Server causes a memory leak. The RAD2RAD action module is usually configured to process a request more than once if the HP-UX AAA Server needs to proxy the request to more than one RADIUS server.

Workaround: None. If you encounter this problem, contact HP support personnel.

Using stored procedure output parameters with MySQL databases will result in NULL values for SQL Access output mappings. Input mappings can be processed normally with MySQL stored procedures.

Workaround: Utilize direct SQL statements for SQL Actions requiring output data from MySQL databases.

The HP-UX AAA Server does not recognize realm aliases for local realms configured with local user file storage.

Workaround: Configure separate realms for each alias.

The HP-UX AAA Server A.08.00.01 loads all shared libraries in the /opt/aaa/aatv/ directory when starting. Libraries with unresolved external references will cause the startup to fail. User-created libraries for previous versions of the product may also fail during execution. Updating the installation replaces only the libraries originally installed with the product—any user-created libraries will remain.

Workaround: Remove any user-created shared libraries from the /opt/aaa/aatv/ directory before starting the HP-UX AAA Server.

Unsupported browsers, including Netscape Navigator 7.0 and Mozilla 1.2.X periodically display various Server Manager icons, buttons, and default values incorrectly.

Workaround: Use a supported browser version with Server Manager.