Chap/Ms-Chap/Arap Authentication Procedure Input; Chap/Ms-Chap/Arap Procedure Output - Cisco 2509 - Router - EN User Manual

ODBC Database

CHAP/MS-CHAP/ARAP Authentication Procedure Input

Note

CHAP/MS-CHAP/ARAP Procedure Output

User Guide for Cisco Secure ACS for Windows Server
11-48
Cisco Secure ACS provides a single value for input to the stored procedure
supporting CHAP/MS-CHAP/ARAP authentication. The stored procedure should
accept the named input value as a variable.
Because Cisco Secure ACS performs authentication for
CHAP/MS-CHAP/ARAP, the user password is not an input
Table 11-4 CHAP Stored Procedure Input
Field Type
CSNTusername String
The input name is for guidance only. A procedure variable created from it can
have a different name.
The stored procedure must return a single row containing the non-null fields.
Table 11-5 lists the procedure results Cisco Secure ACS expects as output from
stored procedure.
Table 11-5 CHAP/MS-CHAP/ARAP Stored Procedure Results
Field Type
CSNTresult Integer
CSNTgroup Integer
Chapter 11
Explanation
0-64 characters
Explanation
See Table 11-6 Result Codes.
The Cisco Secure ACS group number for
authorization. 0xFFFFFFFF is used to assign
the default value. Values other than 0-499 are
converted to the default.
The group specified in the CSNTgroup
Note
field overrides group mapping
configured for the ODBC external user
database.
Working with User Databases
(Table 11-4).
78-14696-01, Version 3.1