RSA Security 6.1 manual Regenerating a Node Secret

Page 84

4Run the rsainstalltool (Windows) or rsaconfiguretool

(Solaris/Linux) utility with the identity option.

To rename a Primary RADIUS Server, enter the following command:

#./rsaconfiguretool -identity PRIMARY

To rename a Replica RADIUS Server, enter the following command:

#./rsaconfiguretool -identity REPLICA

5Restart the updated server so that it can load its new configuration.

6Run the RSA RADIUS Administrator and modify the DNS name or IP address for the server you want to rename. Verify that the secret on the renamed server is correct.

You may need to use the Replication panel to delete the old server name from the list of servers in the realm.

NOTE: After you change the name or IP address of a Primary or Replica RADIUS Server, use RSA Authentication Manager to change the Agent Host record in the Authentication Manager database.

7Publish the modified configuration to propagate the name change to the Replica RADIUS Servers.

Regenerating a Node Secret

You can regenerate the node secret used to authenticate communication between the RSA Authentication Manager and RSA RADIUS Server at any time.

To regenerate a node secret:

1Stop the RSA RADIUS service/daemon on the RADIUS server.

2Log into the RADIUS server as root (Solaris/Linux) or administrator (Windows).

3Navigate to the ..RSA Radius\Service (Windows) or

/opt/rsa/radius (Solaris/Linux) directory.

4Run the rsainstalltool (Windows) or rsaconfiguretool

(Solaris/Linux) utility with the identity option.

To regenerate the node secret for a Primary RADIUS Server, enter the following command:

# ./rsaconfiguretool -identity PRIMARY

72

Administering RADIUS Servers

September 2005

Image 84

Contents RSA Radius Server 6.1 Administrator’s Guide Contact Information Trademarks Distribution Contents Chapter Installing the RSA Radius Server Chapter Administering Profiles Glossary Index About This Guide AudienceWhat’s In This Manual Syntax Conventions Related Documentation RSA Radius Server DocumentationVendor Information Requests for Comments RFCsGetting Support and Service Third-Party ProductsBefore You Call for Customer Support RSA Radius Server Features About RSA Radius ServerRSA Radius Server Overview About RSA Radius Server SeptemberRSA Radius Authentication Radius Packets Radius Configuration Radius Server ConfigurationRadius Client Configuration Shared Secrets RadiusRadius Secret Replication SecretNode Secret Authentication Radius PortsAccounting Accounting Sequence Comma-Delimited Log FilesTunneled Accounting Attributes DictionariesVendor-Specific Attributes Make/Model FieldChecklist Attributes Attribute ListsUpdating Attribute Information Attribute Values Return List AttributesMulti-Valued Attributes Default Values Orderable AttributesSystem Assigned Values Echo PropertyCentralized Configuration Management Replacing a Replica Radius Server Designating a New Primary Radius ServerRecovering a Replica After a Failed Download Changing the Name or IP Address of a ServerInstalling the RSA Radius Server Before You BeginRequired Files Data Migration/RegistrationInstalling on Windows System RequirementsInstalling the RSA Radius Server If you are installing a Replica RSA Radius Server, clickUninstalling the RSA Radius Server Software Installing on Solaris Installer SyntaxPath Installing the RSA Radius Server Software ReppkgEnter RSA administration port Stopping and Starting the Radius Daemon Migration Log File Installing on Linux Linux Server System RequirementsShould be overwritten Installing the RSA Radius Server Software Enter RSA administration port Etc/init.d/sbrd stop # ./uninstallrsa.sh Using RSA Radius Administrator Running RSA Radius AdministratorNavigating in RSA Radius Administrator RSA Radius Administrator MenusFile Menu See , Administering Radius Clients on Panel MenuRSA Radius Administrator Toolbar Web MenuHelp Menu RSA Radius Administrator Windows Adding an EntryEditing an Entry Sample Add WindowCutting/Copying/Pasting Records Sample Edit WindowUsing Context Menus Resizing ColumnsChanging Column Sequence Sorting InformationAccessing Online Help Displaying Version InformationAdding a License Key Exiting the RSA Radius Administrator Add a License for Server WindowAdministering Radius Clients Radius Clients PanelAdding a Radius Client Add Radius Client WindowSecret to display the characters in the shared secret Verifying a Shared Secret Deleting a Radius ClientPage Administering Radius Clients September Administering Profiles Adding a Checklist or Return List Attribute for a ProfileAbout Profiles Default Profile Resolving Profile and User AttributesSetting Up Profiles Adding a ProfileClick Add to add this attribute/value pair to the list Removing a Profile Administering Profiles September Displaying Server Authentication Statistics Displaying StatisticsStatistics Panel System Authentication Statistics Radius client is sending incorrectly formed packets to Displaying Server Accounting Statistics Statistics Panel System Accounting StatisticsAccounting Statistic Meaning Resetting Server Statistics Displaying Radius Client StatisticsOptionally, sort the messages by clicking a column header Displaying Statistics September Administering Radius Servers Replication Panel Adding a Radius Server ManuallyAdd Server Window Enabling a Radius Server Deleting a Radius ServerPublishing Server Configuration Information Notifying Replica Radius ServersRecovering a Replica After a Failed Download Designating a New Primary Radius ServerChanging the Name or IP Address of a Server Regenerating a Node Secret Resetting the Radius Database Administering Radius Servers September Using the Radius System Log LoggingLogging Files Level of Logging Detail Controlling Log File SizeUsing the Accounting Log Accounting Log File FormatFirst Line Headings Comma PlaceholdersStandard Radius Accounting Attributes Acct-Status-TypeAcct-Input-Packets Ldap Configuration Interface File P e n d i x aAbout the Ldap Configuration Interface Ldap UtilitiesLdap Requests Downloading the Ldap UtilitiesConfiguring the Ldap TCP Port Ldap Version ComplianceLdap Virtual Schema Available AttributesLdap Schema Slide 2 Ldap Schema Slide 3 Cn=username,o=radius -w passcode cachedPW Unspecified or 0.0.0.0 RAS IP address When you display Ldap Command Examples Searching for RecordsModifying Records Ldapmodify Option MeaningWhere Adding Records Deleting Records Statistics Variables Counter StatisticsStattype server Stattype authentication Stattype accountingRate Statistics Using the Ldap Configuration Interface September Glossary AAADNS Tokencode Radius Servers TLS 104 Glossary September Index Tokencode