Chapter8 E stablishing CiscoSecure ACS System Configuration
RDBMS Synchronization
8-26
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Figure 8-2 RDBMS Synchronization
CSDBSync reads each record from the accountActions table and updates the
CiscoSecure user database as specified by the action code in the record. For
example, a record could instruct CSDBSync to add a user or a change a user’s
password. After CSDBSync processes each record, it deletes the record from the
table.
CSDBSync both reads and writes (deletes records) in the accountActions table.
This requires that the database user account that you configure the system DSN to
use must have both read and write privileges.
For more information about CSDBSync or other Windows services used by
Cisco Secure ACS, see Appendix H, “Cisco Secure ACS Internal Architecture.”
About the accountActions Table
The accountActions table contains a set of rows that define actions CSDBSync is
to perform in the CiscoSecure user database. Each row in the accountActions
table holds user, user group, or AAA client information. Each row also contains
an action field and several other fields. These fields provide CSDBSync with the
information it needs to update the CiscoSecure user database. For full details of
the accountActions table format and available actions, see Appendix G, “ODBC
Import Definitions.”
67474
Cisco Secure
Access Control
Server 2
Cisco Secure
Access Control
Server 1
accountActions
Third Party
RDBMS
ODBC
Cisco Secure
Access Control
Server 3