User Guide for Cisco Secure Access Control Server - Stewing Home

Chapter 12 User Databases
PAP Procedure Output
OL-14386-02
ODBC Database (ACS for Windows Only)
The stored procedure must return a single row that contains the nonnull fields.
Table 12-2 lists the procedure results that ACS expects as output from stored procedure.
Table 12-2 PAP Stored Procedure Results
Field Type Explanation
CSNTresult Integer See Table 12-7.
CSNTgroup Integer The ACS group number for authorization. You use 0xFFFFFFFF to assign the default
value. Values other than 0-499 are converted to the default.
Note The group that is specified in the CSNTgroup field overrides group mapping that
is configured for the ODBC external user database.
CSNTacctInfo String 0-16 characters. A customer-defined string that ACS adds to subsequent account log file
entries.
CSNTerrorString String 0-255 characters. A customer-defined string that ACS writes to the CSAuth service log file
if an error occurs.
The CSNTGroup and CSNTacctInfo fields are processed only after a successful authentication. The
CSNTerrorString file is logged only after a failure (if the result is greater than or equal to 4).
Note If the ODBC database returns data in recordset format rather than in parameters, the procedure must
return the result fields in the order previously listed.
CHAP/MS-CHAP/ARAP Authentication Procedure Input
ACS provides a single value for input to the stored procedure that supports CHAP/MS-CHAP/ARAP
authentication. The stored procedure should accept the named input value as a variable.
Note Because ACS performs authentication for CHAP/MS-CHAP/ARAP, the user password is not an input
(Table 12-3).
Table 12-3 CHAP Stored Procedure Input
Field Type Explanation
CSNTusername String 0-64 characters
The input name is for guidance only. A procedure variable that is created from it can have a different
name.
User Guide for Cisco Secure Access Control Server 4.2
12-41