Cisco CiscoSecure ACS for UNIX Upgrade to v2.3 CSU-2.3-UG User Manual
Product codes
CSU-2.3-UG
xxvi
CiscoSecure ACS 2.3 for UNIX User Guide
78-5222-02 Rev. A0
Manually Enabling Profile Cache Updating
Manually Enabling Profile Cache Updating
Step 11
Obtain your server license key and answer the preinstallation questions according to the instructions in
the section “Basic Installation Procedures,” page iv.
the section “Basic Installation Procedures,” page iv.
Note
Do not enter the pkgadd -d/cdrom/csus_23 CSCEacs string to start the installation program.
Step 12
To start the installation program, enter:
pkgadd -d /tmp CSCEacs
Manually Enabling Profile Cache Updating
Profile cache updating must be enabled for CiscoSecure ACS servers whose CiscoSecure profile
databases are modified directly by Oracle or Sybase database replication implementations or by
third-party applications.
databases are modified directly by Oracle or Sybase database replication implementations or by
third-party applications.
In the case of Oracle or Sybase database replication, you enable profile cache updating in the process of
implementing the replication.
implementing the replication.
If you are using third-party applications that directly modify the CiscoSecure ACS profile data, use the
following procedure to enable profile cache updating following the normal CiscoSecure installation.
following procedure to enable profile cache updating following the normal CiscoSecure installation.
Note
For profile cache updating to work, the database user account used by the third-party application must
be different from the user account that you specified when you originally installed and configured the
Oracle or Sybase engines for CiscoSecure ACS.
be different from the user account that you specified when you originally installed and configured the
Oracle or Sybase engines for CiscoSecure ACS.
Step 1
After completing CiscoSecure ACS installation on your UNIX host, change to the CiscoSecure
$BASEDIR/utils/bin directory and run the CSdbTool utility. Enter:
$BASEDIR/utils/bin directory and run the CSdbTool utility. Enter:
./CSdbTool cache_trigger
This installs triggers in the CiscoSecure ACS database tables that insert the changes in a special log
table, cs_trans_log, whenever a third-party program alters any profile data. These changes are
periodically incorporated into the profile cache.
table, cs_trans_log, whenever a third-party program alters any profile data. These changes are
periodically incorporated into the profile cache.
Step 2
In the CSConfig.ini file, make sure the following parameters are set:
[ProfileCaching]
EnableProfileCaching = ON
;polling period in minutes for cs_trans_log table
DBPollinterval =
number_of_minutes
where number_of_minutes is the time in minutes that the customer wants between profile cache updates.
This interval should match the intervals at which database replication or third-party applications directly
modify the ACS profile data. For example, if database replication is configured to take place every 15
minutes, then the number_of_minutes for DBPollinterval should also be set to 15.
This interval should match the intervals at which database replication or third-party applications directly
modify the ACS profile data. For example, if database replication is configured to take place every 15
minutes, then the number_of_minutes for DBPollinterval should also be set to 15.
The default value is 30 minutes.