Filter
Top Products
11-43
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Chapter 11 Working with User Databases
ODBC Database
Note Increase the ODBC worker thread count only if the ODBC driver you
are using is certified thread safe. For example, the Microsoft Access
ODBC driver is not thread safe and can cause Cisco Secure ACS to
become unstable if multiple threads are used. Where possible,
Cisco Secure ACS queries the driver to find out if it is thread safe. The
thread count to use is a factor of how long the DSN takes to execute
the procedure and the rate at which authentications are required.
Step 11 From the DSN Procedure Type list, select the type of output your relational
database provides. Different databases return different output:
• Returns Recordset—The database returns a raw record set in response to an
ODBC query. Microsoft SQL Server responds in this manner.
• Returns Parameters—The database returns a set of named parameters in
response to an ODBC query. Oracle databases respond in this manner.
Step 12 To support PAP authentication with the ODBC database, follow these steps:
a. Select the Support PAP authentication check box.
b. In the PAP SQL Procedure box, type the name of the PAP SQL procedure
routine that runs on the ODBC server. The default value in this box is
CSNTAuthUserPap. If you named the PAP SQL procedure something else,
change this entry to match the name given to the PAP SQL procedure. For
more information and an example routine, see the “Sample Routine for
Generating a PAP Authentication SQL Procedure” section on page 11-35.
Note If you enabled PAP authentication, the PAP authentication SQL
procedure must exist on the ODBC database and must have the
exact name specified in the PAP SQL Procedure box. If it does
not, be sure to create it in the ODBC database before attempting
to authenticate users against the ODBC database.
Step 13 To support CHAP authentication with the ODBC database, follow these steps:
a. Select the Support CHAP/MS-CHAP/ARAP Authentication check box.
b. In the CHAP SQL Procedure box, type the name of the CHAP SQL procedure
routine on the ODBC server. The default value in this box is
CSNTExtractUserClearTextPw. If you named the CHAP SQL procedure
something else, change this entry to match the name given to the CHAP SQL