Cisco Systems Servers Manuale Utente

procedure. For more information and an example routine, see the 

.

If you enabled CHAP/MS-CHAP/ARAP authentication, the 
CHAP authentication SQL procedure must exist on the ODBC 
database and must have the exact name specified in the PAP SQL 
Procedure box. If it does not, be sure to create it in the ODBC 
database before attempting to authenticate users against the 
ODBC database.

Click Submit.

Result: Cisco Secure ACS saves the ODBC configuration you created. You can 
add it to your Unknown User Policy or assign specific user accounts to use this 
database for authentication. For more information about the Unknown User 
Policy, see the 

. For more 

information about configuring user accounts to authenticate using this database, 
see 

For Cisco Secure ACS-authenticated users accessing your network via Cisco 
Aironet devices, Cisco Secure ACS supports MS-CHAP and EAP-TLS 
authentication with a proxy RADIUS server. Cisco Secure ACS uses MS-CHAP 
version 1 for LEAP Proxy RADIUS Server authentication. To manage your proxy 
RADIUS database, refer to your RADIUS database documentation.

Lightweight extensible authentication protocol (LEAP) proxy RADIUS server 
authentication allows you to authenticate users against existing Kerberos 
databases that support MS-CHAP authentication. You can use the LEAP Proxy 
RADIUS Server database to authenticate users with any third-party RADIUS 
server that supports MS-CHAP authentication.