Configuration

To be able to use the RADIUS protocol, you must carry out configuration on Solaris Bandwidth Manager, and on Sun Directory Services. Refer to the documentation delivered with Sun Directory Services for configuration instructions and schema information.

On Solaris Bandwidth Manager:

• Edit the /opt/SUNWconn/ba/html/beans/QRasPolicy.html file, so that Solaris Bandwidth Manager can reply to replication events.

On Sun Directory Services:

• Enable dynamic accounting for the RADIUS server.

• In the database, create the necessary entries for NAS devices and remote users. For each user, in addition to an object class of type remoteUser, you must create an object class of type policyAux. The policyAux object class must have the same Distinguished Name (DN) as the remoteUser object class. This is because the remoteUser object class cannot contain a policyRef attribute. The policyRef attribute must point to a valid policy.

• Set a replication schedule for the replication of information between the directory and the policy agents. Set replication to immediate, so that whenever modifications are made to entries that are within the scope of the replica, they are automatically pushed to the policy agent.

• Replicate the subtree containing remote user entries. If you do not want to replicate all attributes in the remote user entries, make sure that you include at least the following attributes: dynamicIPaddress, dynamicSessionID, dynamicSessionCounter.

• Insure that Replication Events contain a Replication Password. This is the password you set when installing the Solaris Bandwidth Manager packages, and is defined in the /etc/opt/SUNWconn/ba/agent.properties file. You will be prompted for this when configuring the DN of the administrator of the remote system. The DN itself is ignored.