11-49
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Chapter 11 Working with User Databases
ODBC Database
The CSNTGroup and CSNTacctInfo fields are processed only after a successful
authentication. The CSNTerrorString file is logged only after a failure (if the
result is greater than or equal to 4).
The procedure must return the result fields in the order listed above.
Result Codes
You can set the result codes listed in
Table 11-6
.
The SQL procedure can decide among 1, 2, or 3 to indicate a failure, depending
on how much information you want the failed authentication log files to include.
CSNTacctInfo
String
0-16 characters. A third-party defined string is
added to subsequent account log file entries.
CSNTerrorString
String
0-255 characters. A third-party defined string
is written to the CSAuth service log file if an
error occurs.
CSNTpassword
String
0-255 characters. The password is
authenticated by Cisco Secure ACS for CHAP
authentication.
Table 11-5
CHAP/MS-CHAP/ARAP Stored Procedure Results (continued)
Field
Type
Explanation
Table 11-6
Result Codes
Result Code
Meaning
0 (zero)
Authentication successful
1
Unknown username
2
Invalid password
3
Unknown username or invalid password
4+
Internal error—authentication not processed
