Chapter 11 Working with User Databases
ODBC Database
11-46
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Sample Routine for Generating an SQL CHAP Authentication
Procedure
The following example routine creates in Microsoft SQL Server a procedure
named CSNTExtractUserClearTextPw, the default procedure used by
Cisco Secure ACS for CHAP/MS-CHAP/ARAP authentication. Table and
column names that could vary for your database schema are presented in variable
text. For more information about data type definitions, procedure parameters, and
procedure results, see
ODBC Database, page 11-39
.
if exists (select * from sysobjects where id =
object_id(`dbo.CSNTExtractUserClearTextPw’) and sysstat & 0xf = 4)
drop procedure dbo.CSNTExtractUserClearTextPw
GO
CREATE PROCEDURE CSNTExtractUserClearTextPw
@username varchar(64)
AS
SET NOCOUNT ON
IF EXISTS( SELECT
username
FROM
users
WHERE
username
= @username )
SELECT 0,
csntgroup
,
csntacctinfo
,"No Error",
csntpassword
FROM
users
WHERE
username
= @username
ELSE
SELECT 3,0,"odbc","ODBC Authen Error"
GO
GRANT EXECUTE ON dbo.CSNTExtractUserClearTextPw TO ciscosecure
GO
PAP Authentication Procedure Input
Table 11-2
details the input provided by Cisco Secure ACS to the stored
procedure supporting PAP authentication. The stored procedure should accept the
named input values as variables.
