Cisco Servers User Manual page 393

Chapter 11 Working with User Databases
Figure 11-1 Using the CiscoSecure User Database for Authentication
78-13751-01, Version 3.0
There are five ways to create user accounts in the CiscoSecure user database:
• Using the Cisco Secure ACS HTML interface (see the
Account" section on page
Using the Database Replication feature (see the
•
Replication" section on page
• Using the Database Import utility,
Command-Line Database Utility" section on page
Using the RDBMS Synchronization feature (see the
•
Synchronization" section on page
Using the Unknown User Policy feature (see the
•
User Databases" section on page
The CiscoSecure user database also is crucial for the authorization process.
Regardless of whether a user is authenticated by the internal user database or by
an external user database, Cisco Secure ACS authorizes network services for
users based upon group membership and specific user settings found in the
CiscoSecure user database. Thus, all users authenticated by Cisco Secure ACS,
even those whose authentication is performed with an external user database, have
an account in the CiscoSecure user database. As always, user settings override
group settings.
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
7-5).
8-6).
(see the
CSUtil.exe
8-24).
12-1).
CiscoSecure User Database
"Adding a Basic User
"CiscoSecure Database
"Cisco Secure ACS
E-1.)
"RDBMS
"Administering External
11-3