User Guide for Cisco Secure Access Control Server - Stewing Home

Chapter 12 User Databases
OL-14386-02
ODBC Database (ACS for Windows Only)
In the Admin DN box, type the following information from your LDAP server:
uid=user id,[ou=organizational unit,]
[ou=next organizational unit]o=organization
where user id is the username
organizational unit is the last level of the tree
next organizational unit is the next level up the tree.
For example:
uid=joesmith,ou=members,ou=administrators,o=cisco
Tip If you are using Netscape DS as your LDAP software, you can copy this information from the
Netscape console.
h. In the Password box, type the password for the administrator account that is specified in the Admin
DN box. The server determines password case sensitivity.
Step 22 Click Submit.
ACS saves the generic LDAP configuration that you created. You can now add it to your Unknown User
Policy or assign specific user accounts to use this database for authentication. For more information
about the Unknown User Policy, see About Unknown User Authentication, page 15-3. For more
information about configuring user accounts to authenticate by using this database, see Chapter 6, “User
Management.”
ODBC Database (ACS for Windows Only)
As with Windows user database support, you can use ACS ODBC-compliant relational database support
to use existing user records in an external ODBC-compliant relational database. Configuring ACS to
authenticate against an ODBC-compliant relational database does not affect the configuration of the
relational database. To manage your relational database, refer to your relational database documentation.
Note As with all other external databases that ACS supports, the ODBC-compliant relational database is not
supplied as part of ACS. For general guidance with setting up your ODBC external user database, see
Preparing to Authenticate Users with an ODBC-Compliant Relational Database, page 12-37.
You can use the Windows ODBC feature to create a data source name (DSN), which specifies the
database and other important parameters that are necessary for communicating with the database.
Among the parameters that you provide are the username and password that are required for the ODBC
driver to gain access to your ODBC-compliant relational database.
This section contains:
What is Supported with ODBC User Databases, page 12-36
ACS Authentication Process with an ODBC External User Database, page 12-36
Preparing to Authenticate Users with an ODBC-Compliant Relational Database, page 12-37
Implementation of Stored Procedures for ODBC Authentication, page 12-38
Microsoft SQL Server and Case-Sensitive Passwords, page 12-39
User Guide for Cisco Secure Access Control Server 4.2
12-35