Advanced Attribute Set OptionsUsing the 8950 AAA Policy Assistant in Server
Management Tool
................................................................................................................................... .........................................................................................................................
365-360-001R6.0
Issue 1, December 2008 9-37
.................................................................................................................................... ........................................................................................................................
Figure 9-22 Advanced Authentications Options–Transports tab Options
Advanced Attribute Set Options
About Advanced Attribute Set Options
Attribute sets can be referenced from many of the supported user profile sources such as
RADIUS user files, database records and LDAP configurations, SecurID ACE Server,
UNIX password file or NIS/NIS+ and as part of a policy. This section covers attribute sets
defined as part of the policy. Additional information on referencing other templates is
provided below.
You may allow an attribute set name to be specified in the users profile. By default this
option is enabled, to disable the Attribute Set name from being read from the user profile
Attribute Sets, click in the Attribute Name is defined in the User Profile box. In most cases
you will probably wish to disable this option.
If this option is enabled, the PolicyAssistant looks for the Session-Template attribute in the
Reply Attributes section of the User Profile. If found, the PolicyAssistant attempts to load
the named set from the file designated in the Advanced options panel.
It is possible for 8950 AAA to read multiple attribute sets during the processing of a single
user request. This might be the case if there was an Attribute Set defined in the User
Profile and another set defined for the policy. In this case, the Attribute Set defined in the