Chapter11 Working with User Databases
ODBC Database
11-36
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Sample Routine for Generating an SQL CHAP Authentication Procedure
The following example routine creates in Microsoft SQL Server a procedure
named CSNTExtractUserClearTextPw, the default procedure used by
Cisco Secure ACS for CHAP/MS-CHAP/ARAP authentication. Table and
column names that could vary for your databases schema are presented in
variable text. For more information about data type definitions, procedure
parameters, and procedure results, see the ODBC Database section on
page 11-30.
if exists (select * from sysobjects where id =
object_id(`dbo.CSNTExtractUserClearTextPw’) and sysstat & 0xf = 4)
drop procedure dbo.CSNTExtractUserClearTextPw
GO
CREATE PROCEDURE CSNTExtractUserClearTextPw
@username varchar(64)
AS
SET NOCOUNT ON
IF EXISTS( SELECT username
FROM users
WHERE username = @username )
SELECT 0,csntgroup,csntacctinfo,"No Error",csntpassword
FROM users
WHERE username = @username
ELSE
SELECT 3,0,"odbc","ODBC Authen Error"
GO
GRANT EXECUTE ON dbo.CSNTExtractUserClearTextPw TO ciscosecure
GO
PAP Authentication Procedure Input
Table11-2 details the input provided by Cisco Secure ACS to the stored
procedure supporting PAP authentication. The stored procedure should accept the
named input values as variables.