Chapter 8 Establishing Cisco Secure ACS System Configuration
RDBMS Synchronization
8-38
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Step 4 Validate your third-party system to ensure that it updates the accountActions table
properly. Rows generated in the accountActions table must be valid. For details
on the format and content of the accountActions table, see Appendix F, “RDBMS
Synchronization Import Definitions.”
Note After testing that the third-party system updates the accountActions table
properly, discontinue updating the accountActions table until after you
have completed Step 5 and Step 6.
Step 5 Set up a system DSN on the Cisco Secure ACS. For steps, see Configuring a
System Data Source Name for RDBMS Synchronization, page 8-40.
Step 6 Schedule RDBMS synchronization in Cisco Secure ACS. For steps, see
Scheduling RDBMS Synchronization, page 8-44.
Step 7 Configure your third-party system to begin updating the accountActions table
with information to be imported into the CiscoSecure user database.
Step 8 Confirm that RDBMS synchronization is operating properly by monitoring the
RDBMS Synchronization report in the Reports and Activity section. For more
information about the RDBMS Synchronization log, see Cisco Secure ACS
System Logs, page 9-11.
Also, monitor the CSDBSync service log. For more information about the
CSDBSync service log, see Service Logs, page 9-28.
Considerations for Using CSV-Based Synchronization
The behavior of the Microsoft ODBC driver for text files creates additional
considerations if you are planning to use a CSV-based accountActions table. The
Microsoft ODBC driver for text files always operates in a read-only mode. It
cannot delete records from a CSV accountActions table. Because of this,
synchronization events initiated or scheduled in the HTML interface never release
the CSV file, so the updates to the accountActions table from your third-party
system fail.
The solution is to initiate synchronization events from a script, such as a DOS
batch file. In the script, RDBMS synchronization is initiated with the CSDBSync
-run command.
To Next Page
Loading...
