importing user information into Cisco ACS 3.2

[dpatkins]

We are looking for a way to import (using csutil command) a text file that has username, group, beginning date and expiration date. Can this be done? Or is there a script out the that will allow us to do this?

Thanks

Dwane

[darpotter]

Hi

Unfortunately its not possible to set expiry dates via a scripted import with csutil.

You can do this via ODBC and all you need is csv file created in excel or access .mdb.

Look up RDBMS Database Syncronization in the docs.

Darran

[dpatkins]

Thanks for the information Darran. So you are saying I can put something like jdoe cisco123 050506 051106 group 10 and it will work? Do you think it can be done via Web?

Our goal is to allow guest access but let the tech support folks handle this. So if we can have them create an account, input expiration date and group, then we are doing good.

One has to wonder when Cisco will start working on accounts management in ACS. It is not very pleasing.

I will do this.

Thanks

Dwane

[darpotter]

Hi

ACS doesnt have the concept of a starting date. So you'd have to use ODBC to create an account, then mark it as disabled initially. On the date its to become active you'd need to send an action to un-disable the account. The expiry would be handled ok.

The online RDBMS Sync help docs list all of the actions. The db schema is quite simple.

Darran