beautypg.com

Pap authentication procedure input – Cisco 3.3 User Manual

Page 548

background image

Chapter 13 User Databases

ODBC Database

13-64

User Guide for Cisco Secure ACS for Windows Server

78-16592-01

Sample Routine for Generating an EAP-TLS Authentication
Procedure

The following example routine creates in Microsoft SQL Server a procedure
named CSNTFindUser, the default procedure used by Cisco Secure ACS for
EAP-TLS authentication. Table and column names that could vary for your
database schema are presented in variable text. For more information about data
type definitions, procedure parameters, and procedure results, see

ODBC

Database, page 13-55

.

if exists (select * from sysobjects where id = object_id(`dbo.CSNTFindUser’) and sysstat &

0xf = 4)

drop procedure dbo.CSNTFindUser

GO

CREATE PROCEDURE CSNTFindUser

@username varchar(64)

AS

SET NOCOUNT ON

IF EXISTS( SELECT

username

FROM

users

WHERE

username

= @username )

SELECT 0,

csntgroup

,

csntacctinfo

,"No Error"

FROM

users

WHERE

username

= @username

ELSE

SELECT 3,0,"odbc","ODBC Authen Error"

GO

GRANT EXECUTE ON dbo.CSNTFindUser TO ciscosecure

GO

PAP Authentication Procedure Input

Table 13-2

details the input provided by Cisco Secure ACS to the stored

procedure supporting PAP authentication. The stored procedure should accept the
named input values as variables.