D-43
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Appendix D CSUtil Database Utility
PAC File Generation
Generating PAC Files
Note
If you use the -a or -g option during PAC file generation, CSUtil.exe restarts the
CSAuth service. No users are authenticated while CSAuth is unavailable.
For more information about PACs, see
About PACs, page 10-17
.
To generate PAC files, follow these steps:
Step 1
Use the discussion in
PAC File Options and Examples, page D-41
, to determine
the following:
•
Which users you want to generate PAC files for. If you want to use a list of
users, create it now.
•
What password you want to use to protect the PAC files you generate. If
necessary, create a password. We recommend passwords that are long, use
uppercase and lowercase letters, and include numbers.
•
The full path to the directory you want the PAC files to be created in. If
necessary, create the directory.
Step 2
On the computer running Cisco Secure ACS, open an MS DOS command prompt
and change directories to the directory containing CSUtil.exe.
Step 3
Type
CSUtil.exe -t
additional arguments
where
additional arguments
represents at least one option for specifying which
users to generate PAC files for. You can also use the options to specify filepath
and password.
Press
Enter
.
CSUtil.exe generates the PAC files for each user specified. The PAC files are
named with the username plus a “.pac” file extension. For example, a PAC file for
the username
seaniemop
would be
seaniemop.pac
and a PAC file for the
domain-qualified username
ENGINEERING\augustin
would be
ENGINEERING_augustin.pac
.
