Known Problems and Limitations

LDAP failover will not work if the LDAP server is unresponsive. The HP-UX AAA Server will not recognize the LDAP server is inaccessible and radiusd will retransmit the request until it times-out.

Authentication may fail when passwords are stored in SHA encryption.

Modifying realms with web based administration can delete Tokenpool names from realm entries. Consequently, the Tokenpool name must be entered again manually in /etc/opt/aaa/las.conf.

LDAP based policy is not enforced when LDAP bind style authentication is configured.

Server Manager cannot modify manually added BIN/CIS options for realm entries in /etc/opt/aaa/authfile.

Administering the HP-UX AAA Server with Server Manager will not preserve comments in configuration files.

Before you can start the Tomcat component of the HP Apache Web Server as a non-root user, you must first start and stop Tomcat as the root user.

The HP-UX AAA Server will not start if any library files in /opt/aaa/aatv/ contain unresolved external references. This can occur when libraries were added or renamed in previous installations.

	IMPORTANT: To avoid this limitation, remove any libraries from /opt/aaa/aatv/ that were not included with the product by default when upgrading from previous versions of the HP-UX AAA Server.