Event Names

After an action completes its task, it returns an event name to the FSM. The previous state, action, and the event name determine the current event, which in turn determines the next action of the FSM. The event names returned by the standard HP-UX AAA Server actions are predefined, but you can create your own names by modifying the FSM. To implement your own policy decisions or custom logging, you can configure the server to return predefined or custom event names by using the Decision attribute in stored policy.

Predefined Names

Several event names that can be returned by an action are predefined in the server.

Table 27-1 Predefined Event Names

Event Name	Description
ACCT	The incoming request is an Accounting-Request.
ACC_CHAL	Access-Challenge message must be sent in response to an access challenge.
ACCT_ALIVE	The incoming Accounting-Request is an interim accounting message.
ACCT_CANCEL	The incoming Accounting-Request is a message to cancel the session.
ACCT_DUP	The incoming Accounting-Request is a duplicate.
ACCT_MSTART	The originating NAS has just rebooted, so all active sessions from this client can be purged.
ACCT_MSTOP	The originating NAS is about to reboot.
ACCT_OFF	Received accounting message has a Status-Type of Accounting-Off.
ACCT_ON	Received accounting message has a Status-Type of Accounting-On.
ACCT_START	Received accounting message has a Status-Type of Start.
ACCT_STOP	Received accounting message has a Status-Type of Stop.
ACCT_TUNNEL_LINK_START	The incoming Accounting-Request is a message to start a session through an established tunnel.
ACCT_TUNNEL_LINK_STOP	The incoming Accounting-Request is a message to end a session through an established tunnel.
ACCT_TUNNEL_REJECT	The incoming Accounting-Request indicates that a requested tunnel could not be established.
ACCT_TUNNEL_START	The incoming Accounting-Request is a message to establish a tunnel.
ACCT_TUNNEL_STOP	The incoming Accounting-Request is a message to eliminate a tunnel.
ACK	Acknowledgment of the previous action.
ACT_TUNNEL_LINK_REJECT	The incoming Accounting-Request that the user has been denied access to an established tunnel.
AUTHEN	The incoming request is an Access-Request.
AUTH_ONLY	Received Access-Request has a Status-Type of Authenticate-Only.
DUP	The incoming Access-Request is a duplicate. Generally, you should allow the server to handle these events without modification.
ERROR	The previous action generated an error. Generally, you can allow the server to handle these events without modification.
NAK	Negative acknowledgment of the previous action.
NO_SUCH_REALM	The NO_SUCH_REALM value is returned by the REALM Action when a user's realm cannot be found in the authfile.
PW_EXPIRED	This value is returned by the AUTHENTICATE Action if the user profile includes an out-of-date value for the Expiration configuration attribute.
RETRIEVE_SUCCESS	This value is returned by iaaausers, ORACLE, PROLDAP, SQL Access, or another data store action if the action could locate the user profile in the configured data store.
RETRIEVE_ERROR	This value is returned by iaaaUsers, ORACLE, PROLDAP, or another data store action if the action could not locate the user’s profile in the configured data store.
RETRY_LIMIT	The number of received duplicate requests has exceeded the retry limit.
TIMEOUT	The request has timed out due to inactivity.
TIMER	The timer value has expired.
WAIT	The previous action generated a pending event. Generally, you should allow the server to handle these events without modification.

 

Creating New Names

You can create custom event names. An event can be defined anywhere in the state table, but it must be defined before it is referenced. Use the following syntax for creating new event names:

event Name

Name

Can be any alphanumeric string and can include underscores (_).