Check Data and Reply Data Attributes (Sun Directory Services 3.1 User's Guide)

Sun Directory Services 3.1 User's Guide

Check Data and Reply Data Attributes

The RADIUS add attributes window features four additional buttons:

Chk Add -- Select an attribute and type a value for it in the text window. If you click the Chk Add button, the value is added to the entry definition, and the name of the attribute is added to the Radius Check Data optional attribute which matches the grpCheckInfo in the radius.mapping file.

For example, if you select the User ID attribute from the Choose Attribute list and type the value charles in the text window, when you click on Chk Add, the value charles is added to the User ID attribute, and uid is added to the Radius Check Data attribute.
Rpl Add -- Select an attribute and type a value for it in the text window. If you click the Rpl Add button, the value is added to the entry definition, and the name of the attribute is added to the Radius Reply Data optional attribute which matches the grpReplyInfo in the radius.mapping file.
Chk Del -- Select the value of the attribute you want to delete from the entry definition. If you click the Chk Del button, the value is removed from the entry definition, and the name of the attribute is removed from the Radius Check Data optional attribute which matches the grpCheckInfo in the radius.mapping file.
Rpl Del -- Select the value of the attribute you want to delete from the entry definition. If you click the Rpl Del button, the value is removed from the entry definition, and the name of the attribute is removed from the Radius Check Data optional attribute which matches the grpReplyInfo in the radius.mapping file.

The grpCheckInfo attribute, contains a list of attributes that must be checked by the RADIUS server against the information supplied by the remote user. If the grpCheckInfo attribute is not present, or if it does not contain any attributes, then all the attributes in the remote user's entry are checked before access is granted to the user.

The grpReplyInfo attribute, contains a list of attributes returned by the RADIUS server with an access-accept or access-reject response. It can contain connection parameters such as a PPP or SLIP profile.