Chapter11 Working with User Databases
ODBC Database
11-30
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
ODBC Database
Cisco Secure ACS supports PAP, CHAP, MS-CHAP, and ARAP authentication
using a relational database via the ODBC authenticator feature. As with
WindowsNT/2000 database support, Cisco Secure ACS’s ODBC-compliant
relational database support enables you to make use of existing user records held
in an external ODBC-compliant relational database. Configuring
Cisco Secure ACS to authenticate against an ODBC-compliant relational
database does not affect the configuration of the relational database. To manage
your relational database, refer to your relational database documentation.
The Windows ODBC feature enables you to create a data source name (DSN),
which specifies the database and other important parameters necessary for
communicating with the database. Among the parameters you provide are the
username and password required for the ODBC driver to gain access to your
ODBC-compliant relational database.
This section contains the following topics:
•Cisco Secure ACS Authentication Process with an ODBC External User
Database, page 11-31
•Preparing to Authenticate Users with an ODBC-Compliant Relational
Database, page 11-32
•Implementation of Stored Procedures for ODBC Authentication, page 11-33
•Microsoft SQL Server and Case-Sensitive Passwords, page11-34
•Sample Routine for Generating a PAP Authentication SQL Procedure,
page 11-35
•Sample Routine for Generating an SQL CHAP Authentication Procedure,
page 11-36
•PAP Authentication Procedure Input, page11-36
•PAP Procedure Output, page 11 -37
•CHAP/MS-CHAP/ARAP Authentication Procedure Input, page 11-38
•CHAP/MS-CHAP/ARAP Procedure Output, page 11-38
•Result Codes, page 11-39