Cisco Systems Servers Manuale Utente

Pagina di 654
11-31
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Chapter 11      Working with User Databases
ODBC Database
Cisco Secure ACS Authentication Process with an ODBC 
External User Database
Cisco Secure ACS forwards user authentication requests to an ODBC database in 
one of two scenarios. The first scenario is when the user’s account in the 
CiscoSecure user database lists an ODBC database configuration as the 
authentication method. The second is when the user is unknown to the 
CiscoSecure user database and the Unknown User Policy dictates that an ODBC 
database is the next external user database to try.
In either case, Cisco Secure ACS forwards the username and password to the 
ODBC database via an ODBC connection. The ODBC database either passes or 
fails the authentication request from Cisco Secure ACS. The relational database 
must have a stored procedure that queries the appropriate tables and returns values 
to Cisco Secure ACS. If the returned values indicate that the username and 
password provided are valid, Cisco Secure ACS instructs the requesting AAA 
client to grant the user access; otherwise, Cisco Secure ACS denies the user 
access. See 
. Upon receiving the response from the ODBC database, 
Cisco Secure ACS instructs the requesting AAA client to grant or deny the user 
access, depending upon the response from the ODBC database.