Cisco 3.3 User Manual page 557

Chapter 13 User Databases
From the DSN Procedure Type list, select the type of output your relational
Step 11
database provides. Different databases return different output:
•
•
To support ASCII, PAP, or PEAP(EAP-GTC) authentication with the ODBC
Step 12
database, follow these steps:
a.
b.
To support CHAP, MS-CHAP, ARAP, EAP-MD5, or LEAP authentication with
Step 13
the ODBC database, follow these steps:
a.
b.
78-16592-01
Returns Recordset—The database returns a raw record set in response to an
ODBC query. Microsoft SQL Server responds in this manner.
Returns Parameters—The database returns a set of named parameters in
response to an ODBC query. Oracle databases respond in this manner.
Select the Support PAP authentication check box.
In the PAP SQL Procedure box, type the name of the PAP SQL procedure
routine that runs on the ODBC server. The default value in this box is
CSNTAuthUserPap. If you named the PAP SQL procedure something else,
change this entry to match the name given to the PAP SQL procedure. For
more information and an example routine, see
a PAP Authentication SQL Procedure, page
If you enabled PAP authentication, the PAP authentication SQL
Note
procedure must exist on the ODBC database and must have the exact
name specified in the PAP SQL Procedure box. If it does not, be sure
to create it in the ODBC database before attempting to authenticate
users against the ODBC database.
Select the Support CHAP/MS-CHAP/ARAP Authentication check box.
In the CHAP SQL Procedure box, type the name of the CHAP SQL procedure
routine on the ODBC server. The default value in this box is
CSNTExtractUserClearTextPw. If you named the CHAP SQL procedure
something else, change this entry to match the name given to the CHAP SQL
procedure. For more information and an example routine, see
for Generating an SQL CHAP Authentication Procedure, page
User Guide for Cisco Secure ACS for Windows Server
ODBC Database
Sample Routine for Generating
13-62.
Sample Routine
13-63.
13-73