Administer at least one local host account in all servers so that access is possible even if external AAA servers are not reachable.
All ASG authenticated accounts must be local host accounts. A PAM module to support ASG authentication through an external server does not exist.
Because system access by Avaya Services is infrequent yet often required to maintain maximum uptime, do not enable password aging for Avaya Services accounts.
Use RADIUS, RSA SecurID, and SafeWord AAA services in conjunction with a parallel local host account or LDAP/NSS. When configuring a local host account, lock the local account to prevent a stale local password from being used in the event that the external AAA server is not reachable.
Simple Authentication and Security Layer (SASL) authentication is not supported.