Create

Use Create to add new entries to the RADIUS directory. You must have write permission for the parent of the entry you want to create. See Login for details.


Quick Reference


Creating a New Entry

  1. Click on the Create icon or select Create from the Entry menu.
    The Create window is displayed.

    There are two steps to creating a RADIUS directory. You must complete the current step before you can progress to the next one. Click on Next Step or Previous Step to navigate between them.

    1. Name the entry
    2. Assign attributes to the entry and name them.

  2. When you have completed the entry click Done.


Naming

Before creating the new entry you need to name it.
  1. Select the type of entry you want to add (Remote User or Remote Access Server).

  2. For a Remote User add, specify the profile for the new entry (Standard, PPP, SLIP or LOGIN).
    The list of RADIUS profiles available is defined in the Deja.properties file on the directory server. See the Sun Directory Services 3.1 User's Guide for information.

  3. Specify the parent of the entry:

    • Type the Distinguished Name of the Entry's parent in the Parent text field.

    • Alternatively, click once on the parent in the browser window to select it and click the Get from Browser button next to the Parent text field.
      The Distinguished Name of the selected entry is imported to the Parent text field.

  4. Select the naming attribute with the option button.
    The list of available naming attributes is defined in the Deja.properties file on the directory server. See the Sun Directory Services 3.1 User's Guide for information.

  5. Type the Relative Distinguished Name of the entry in the Entry Name text field.

  6. Click the Next Step button to select attributes.


Selecting Attributes

Each type of RADIUS entry has a number of attributes associated with it. Some of these attributes are mandatory (marked with an "M") and must be given a value, others are optional (marked with an "O") and can be left without a value. In this window you can assign values to the attributes. Initially only the mandatory attributes are displayed.

Some attributes accept multiple values, others can only have one value. This is defined in the schema by the SINGLE-VALUE keyword. If you try to add more than one value to a single-valued attribute, an error message is displayed.


grpCheckInfo

The grpCheckInfo attribute, contains a list of attributes that must be checked by the RADIUS server against the information supplied by the remote user. If the grpCheckInfo attribute is not present, or if it does not contain any attributes, then all the attributes in the remote user's entry are checked before access is granted to the user.

grpReplyInfo

The grpReplyInfo attribute, contains a list of attributes returned by the RADIUS server with an access-accept or access-reject response. It can contain connection parameters such as a PPP or SLIP profile.

 

 


© Copyright 1998 Sun Microsystems, Inc.
901 San Antonio Road, Palo Alto, California 94303 U.S.A.