Additional NavisRadius information that will help configuring a solution with ACE/Server
3 years ago
Originally Published: 2001-06-20
Article Number
000056327
Applies To
RSA ACE/Server 4.1 (no longer supported as of 2-1-2004)
NavisRadius 4.0
RADIUS
Lucent RADIUS
Sun Solaris 2.7
Issue
Additional NavisRadius information that will help configuring a solution with ACE/Server
Nothing appears in the ACE/Server log when you try and authenticate through NavisRadius.
Cause
The pathname for the sdconf.rec is incorrect or missing. If NavisRadius fails to know where to send the authentication packets then no authentication will take place, hence the ACE/Server log not showing any authentication transactions.
Resolution
After defining client(s), the DEFAULT user to use SecurID authentication,  Method Selectors and Authentication Methods, please ensure that a entry of VAR_ACE=<pathname to sdconf.rec> is given to the AuthSecurid-ProcessEnv (found by editing the Authentication Method - doAuthSecurid in NavisRadius Server > PolicyFlow Editor > Authentication Methods tab > Click 'doAuthSecurid') e.g. :

If ACE/Server was installed into directory /export/home/ace41 on the Solaris system the pathname to sdconf.rec would be /export/home/ace41/ace/data and the entry required would be 'VAR_ACE=/export/home/ace41/ace/data'.