Cisco Systems 3.3 Server User Manual


 
9-35
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Chapter 9 System Configuration: Advanced
RDBMS Synchronization
Step 7 Schedule RDBMS synchronization on the senior synchronization partner. For
steps, see Scheduling RDBMS Synchronization, page 9-41.
Step 8 Configure your third-party system to begin updating the accountActions table
with information to be imported into the CiscoSecure user database.
Step 9 Confirm that RDBMS synchronization is operating properly by monitoring the
RDBMS Synchronization report in the Reports and Activity section. For more
information about the RDBMS Synchronization log, see Cisco Secure ACS
System Logs, page 11-13.
Also, monitor the CSDBSync service log. For more information about the
CSDBSync service log, see Service Logs, page 11-31.
Considerations for Using CSV-Based Synchronization
The behavior of the Microsoft ODBC driver for text files creates additional
considerations if you are planning to use a CSV-based accountActions table. The
Microsoft ODBC driver for text files always operates in a read-only mode. It
cannot delete records from a CSV accountActions table. Because of this,
synchronization events initiated or scheduled in the HTML interface never release
the CSV file, so the updates to the accountActions table from your third-party
system fail.
The solution is to initiate synchronization events from a script, such as a DOS
batch file. In the script, RDBMS synchronization is initiated with the CSDBSync
-run command.
Assuming a default installation, CSDBSync.exe is installed at:
C:\Program Files\CiscoSecure ACS vx.x\CSDBSync
You can write a script that uses the CSDBsync command. You can schedule times
when the script is run by using the Windows at command. For information about
the at command, please refer to your Microsoft Windows documentation.
Also, due to limitations of the Microsoft ODBC text file driver, using the CSV
format requires a change to the accountactions CSV file shipped with
Cisco Secure ACS and to Cisco Secure ACS configuration. For more information,
see Preparing for CSV-Based Synchronization, page 9-36.