User Guide for Cisco Secure Access Control Server - Stewing Home

Chapter 12 User Databases
OL-14386-02
Deleting an External User Database Configuration
The RSA server client software version. 6.1 [aceclnt.dll] is included in appliance image. Ther server
client software allows authentication via the RSA Native token card without installing the RSA client
software. You can make changes to the sdconf.rec file and the node secret through the ACS web
interface. RSA client software is unnecessary.
Note ACS assumes the delivery of the node secret is set to automatic in the RSA server.
To configure RSA Authentication with LDAP Group Mapping:
Step 1 In the navigation bar, click External User Databases.
Step 2 Click Database Configuration.
ACS lists all possible external user database types.
Step 3 Click RSA SecurID Token and LDAP Group Mapping.
The External Database Configuration page appears.
Step 4 Click Configure.
Step 5 Click Configure Native RSA.
Step 6 Choose Upload sdconf.rec to upload the token server file from the ACE Server data directory.
The FTP Setup Page appears. Enter the:
a. FTP Server address.
b. Login name.
c. Password.
d. Directory where the sdconf.rec file is located.
e. Decryption Password.
Note The decryption password must exactly match the password that you specified in the Encryption
Password box for the FTP Server.
Step 7 Chose Purge Node Secret to delete any existing configuration settings.
Step 8 Update the port mapper.
Deleting an External User Database Configuration
If you no longer need a particular external user database configuration, you can delete it from ACS.
To delete an external user database configuration:
Step 1 In the navigation bar, click External User Databases.
Step 2 Click Database Configuration.
ACS lists all possible external user database types.
Step 3 Click the external user database type for which you want to delete a configuration.
User Guide for Cisco Secure Access Control Server 4.2
12-57