Considerations for using csv-based synchronization, Step 7 – Cisco 3.3 User Manual

Page 363

Advertising
background image

9-35

User Guide for Cisco Secure ACS for Windows Server

78-16592-01

Chapter 9 System Configuration: Advanced

RDBMS Synchronization

Step 7

Schedule RDBMS synchronization on the senior synchronization partner. For
steps, see

Scheduling RDBMS Synchronization, page 9-41

.

Step 8

Configure your third-party system to begin updating the accountActions table
with information to be imported into the CiscoSecure user database.

Step 9

Confirm that RDBMS synchronization is operating properly by monitoring the
RDBMS Synchronization report in the Reports and Activity section. For more
information about the RDBMS Synchronization log, see

Cisco Secure ACS

System Logs, page 11-13

.

Also, monitor the CSDBSync service log. For more information about the
CSDBSync service log, see

Service Logs, page 11-31

.

Considerations for Using CSV-Based Synchronization

The behavior of the Microsoft ODBC driver for text files creates additional
considerations if you are planning to use a CSV-based accountActions table. The
Microsoft ODBC driver for text files always operates in a read-only mode. It
cannot delete records from a CSV accountActions table. Because of this,
synchronization events initiated or scheduled in the HTML interface never release
the CSV file, so the updates to the accountActions table from your third-party
system fail.

The solution is to initiate synchronization events from a script, such as a DOS
batch file. In the script, RDBMS synchronization is initiated with the CSDBSync
-run
command.

Assuming a default installation, CSDBSync.exe is installed at:

C:\Program Files\CiscoSecure ACS v

x

.

x

\CSDBSync

You can write a script that uses the CSDBsync command. You can schedule times
when the script is run by using the Windows at command. For information about
the at command, please refer to your Microsoft Windows documentation.

Also, due to limitations of the Microsoft ODBC text file driver, using the CSV
format requires a change to the accountactions CSV file shipped with
Cisco Secure ACS and to Cisco Secure ACS configuration. For more information,
see

Preparing for CSV-Based Synchronization, page 9-36

.

Advertising