What's New in the HP-UX AAA Server A.06.00.09

Defect Fix for Authentication Requests Containing Vendor Specific Attributes

In previous versions of the HP-UX AAA Server, authentication requests would fail if they contained either of the following vendor specific attributes:

The HP-UX AAA Server A.06.00.09 resolves this defect (JAGae67791).

Reminder: Changes to the HP-UX AAA Server Product as of A.06.00.08

The previous release of the HP-UX AAA Server, version A.06.00.08, included the following two changes:

The following is an overview of these two changes. Refer to the HP-UX AAA Server A.06.00.08 Release Notes (T1428-90024) for complete information.

Apache Web Server Structural Changes

Versions of the HP-UX AAA Server preceding A.06.00.08 required the entire HP Apache Web Server product. As of the A.06.00.08 release, the HP-UX AAA Server requires the HP-UX Tomcat-based Serverlet Engine v1.0.00.01 (or higher), a component of the HP-UX Web Server Suite. The HP-UX Tomcat-based Serverlet Engine v1.0.00.01 is not vulnerable to the security issues described in HP Security Bulletin #HPSBUX0303-249. The HP-UX Tomcat-based Serverlet Engine v1.0.00.01 (product number HPUXWST100001) is available at: http://www.software.hp.com on the Internet and Security solutions page, or at http://www.hp.com/products1/unix/webservers.

EAP-TLS and EAP-TTLS Not Supported

Also as of the A.06.00.08 release, the HP-UX AAA Server does not support EAP-TLS and EAP-TTLS functionality.