Cisco Systems Servers Server User Manual


 
Chapter 11 Working with User Databases
ODBC Database
11-40
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
The SQL procedure can decide among 1, 2, or 3 to indicate a failure, depending
on how much information you want the failed authentication log files to include.
A return code of 4 or higher results in an authentication error event. These errors
do not increment per-user failed attempt counters. Additionally, error codes are
returned to the AAA client so it can distinguish between errors and failures and,
if configured to do so, fall back to a backup AAA server.
Successful or failed authentications are not logged; general Cisco Secure ACS
logging mechanisms apply. In the event of an error (CSNTresult equal to or less
than 4), the contents of the CSNTerrorString are written to the Windows NT/2000
Event Log under the Application Log.
Configuring a System Data Source Name for an ODBC External
User Database
On the Cisco Secure ACS server, you must create a system DSN for
Cisco Secure ACS to communicate with the relational database.
To create a system DSN for use with an ODBC external user database, follow
these steps:
Step 1 In Windows Control Panel, double-click the ODBC Data Sources icon.
Step 2 In the ODBC Data Source Administrator window, click the System DSN tab.
Step 3 Click Add.
Step 4 Select the driver you need to use with your new DSN, and then click Finish.
Result: A dialog box displays fields requiring information specific to the ODBC
driver you selected.
3 Unknown username or invalid
password
4+ Internal errorauthentication
not processed
Table 11-6 Result Codes (continued)
Result Code Meaning