User Guide for Cisco Secure Access Control Server - Stewing Home

RDBMS Synchronization
8-18
User Guide for Cisco Secure Access Control Server 4.2
Chapter 8 System Configuration: Advanced
RDBMS Synchronization is available for manipulating ACS database objects effectively. You can invoke
RDBMS synchronization using a CSV account actions file.
Note ACS cannot use the accountactions.csv file at:
C:/Program_Files/CiscoSecureACSv4.2/CSDBSync/Databases/CSV/accountactions.csv.
The process differs for the ACS Windows and ACS SE platforms. ACS SE requires a command-lineinterface-like
utility to invoke RDBMS synchronization. You can invoke RDBMS synchronization using
the SSH server implementation and using the command csdbsync -syncnow. When you specify a CSV
file location on an FTP server, the ACS SE creates a Data Source Name (DSN) and performs RDBMS
synchronization. The ACS Windows version provides two options. You can enable the Use Local CSV
option, and the DSN is automatically created and synchronization occurs, or you must create a DSN
manually to perform RDBMS synchronization. ACS for Windows uses a local CSV file that you specify
when you configure RDBMS synchronization.
You can also run the csdbsync command from the Windows command line, similar to as you run it on
the SSH remote shell with the SE. You can code a text file to specify dACLs that you use as input to a
CREATE_DACL (account action code 385) entry in the CSV file.
RDBMS synchronization includes a support mechanism to configure downloadable ACLs, assign
dACLS's to users, and AAA client configuration management. You can create, update and delete
downloadable ACLs for users using the account action codes, 380, 381, and 382, respectively.
You can also create, read, update, and delete single or multiple AAA clients through RDBMS
Synchronization. You can use the account codes 224 and 255, respectively, to update or read the AAA
clients. With the capability of reading the AAA clients, you can export the AAA client list for a particular
NDG, or a AAA client list with a specified IP range, or the list of all AAA clients.
ACS for Windows
You use the RDBMS Synchronization feature to update the ACS internal database with information from
an ODBC-compliant data source. The ODBC-compliant data source can be the RDBMS database of a
third-party application. It can also be an intermediate file or database that a third-party system updates.
Regardless of where the file or database resides, ACS reads the file or database via the ODBC
connection.
The RDBMS Synchronization feature provides the ability to update the ACS internal database with
information from a local CSV file.
ACS SE
The RDBMS Synchronization feature provides the ability to update the ACS internal database with
information from a text file on an FTP server.
The accountActions.csv file is uploaded to ACS and is used to read the action codes for the RDBMS
Synchronization operations. A third-party application may generate the text file. ACS gets the file from
the FTP server, reads the file, and performs the configuration actions that the file specifies.
You specify the actions in a relational database table (ACS for Windows only) or text file, named
accountActions. For more information about the accountActions table, see About the accountActions
Table (ACS for Windows), page 8-28. For more information about the accountActions file, see About
the accountActions File (ACS SE), page 8-29. For specific information about all actions that RDBMS
Synchronization can perform, see Appendix E, “RDBMS Synchronization Import Definitions.”
OL-14386-02