Export User-Database between ACS-Server

Hi everyone ,
an ACS 2.3 is running under Unix with 3000 based user. The job is, to migrate the user-database to a new ACS-Server under Windows.
On the unix-version 2.3 there is no way to export the database to external.
The only way, i hope, is to mirror the old and the new server as redundant server and if the database is mirrored on both server, than the database is ready for export.
Is this correct?
Is there an other way?
Thanks for your input.
Ralf

The migration should go to version 3.1 or 3.2 .
Ralf

Similar Messages

Multisim: export user database grayed out

Hello,
I want to export the user database but I can't because this option is grayed out.
Multisim 12
Windows 7
Any idea why?
Any suggestions and/or ideas?
TIA
Stefaan Claes
Solved!
Go to Solution.

Hi Stefaan,
You can follow this guide to get your databases exported. You probably using full base or education version of Mutlisim and need to do a manual copy as described below.
http://digital.ni.com/public.nsf/allkb/C61ADD277A26C12786257D8C006F4E01?OpenDocument
Best Regards
Jonas Mäki
Applications Engineering
National Instruments

Auto update stats disabled for a user Database in Sql server

While trying to improve the performance of few queries, we found via execution plan that there were lot of Index/Clustered index seeks. Therefore:
First thing we did, was to check our Re-indexing and update stats job which runs weekly for this user DB ( Around 400 GB in size and is used 24*5). The job was running fine.
Later when we ran SP_Blitz, we came to know that auto-update-stats is disabled for this user DB. We expected this to be a possible cause and change it from false to TRUE(Auto update stats)
Also, per SP_blitz there are user-created statistics for this DB. When ran the query to check how many, we saw around 7K user stats out there.
So my question would be 1) setting the Auto update stats to TRUE would require a reboot or once changed i need to track the performance and 2) Should we consider dropping those user created stats or manually look into them one by one.
How should we proceed on this, please suggest, thanks!

There may be good reasons for having auto-stats off, but those cases are not very common. It makes a little more sense to turn if off on table level. An example of the latter is a relatively small table, say < 100000 rows where not many new rows are added,
but the existing rows are being updated frequently. This will trigger autostats, but probably without much benefit.
But if you have a system which is very busy during peak times, you may not want autostats take resources during those hours. But if you turn off autostats, you will need to make sure that stats are updated in some other fashion.
Here is a query that you can use review when your statistics last were updated:
SELECT o.name, s.name, stats_date(o.object_id, s.stats_id) AS lastupdated
FROM sys.objects o
JOIN sys.stats s ON s.object_id = o.object_id
--WHERE s.user_created = 1
ORDER BY lastupdated
7000 user-created statistics sounds a little excessive, but I guess they were added to compensate for the autostats that SQL Server were not permitted to create. I would not recommend dropping these statistics, as SQL Server would spend cycles on recreating
them.
You should not have to restart SQL Server for the Auto-update stats setting to take effect; it takes effect immediately.
Erland Sommarskog, SQL Server MVP, [email protected]

Database between two server (sun and sql server)

I have two server. The first used sun solaris with sybase database and the other used windows sql 2000 server without database. What should i do if i put my web homepage at windows based server and my database at sun-solaris-sybase server. Please help..

Hi Ioakim
Performing an atomic transaction(ACID) that spans a source system, BizTalk and then a different destination system is not possible. This is due to the nature of distributed transactions - it may not be practical to hold locks on resources(needed for atomic
transactions) that are spread across different networks. Given that there is no guarantee that the resources may be released in a reasonable amount of time, transactions in BizTalk can only be scoped to and from the BizTalk MessageBoxDb. Or in other words,
you can read a record to BizTalk transactionally and on the send side, send a message from BizTalk transactionally.
However, you can simulate/fake atomic transaction characteristics(although tricky) using compensation logic within BizTalk orchestrations. So, lets say you read+delete a record from SystemA into BizTalk, and that record has to be updated in SystemB.
If for some reason the insert to SystemB fails, you would have to write custom logic in a compensation block that then performs the reverse operation in SystemA - i.e., it inserts back the record in SystemA in this case. So, using compensating actions, it
is possible to ensure that all the systems involved are transactionally consistent at the end of the day.
There's an article from C.Young that discusses this in some detail-
http://geekswithblogs.net/cyoung/archive/2006/12/06/100424.aspx
Thanks
Arindam

Exporting Users From Iplanet Directory

How do you export users from Iplanet Directory Server so that they can be imported into a MS Active Directory either 2000 or 2003?
Any help would be appreciated with step by step instructions.
Jippy35

Thanks Andbrowny
I gave it a go, but got a strange error, does this mean anything to you?
admin$ sudo ldapsearch -LLL -H ldap://127.0.0.1 -b "cn=users,dc=my,dc=domain,dc=net" > userexport.ldif
Password:
SASL/GSSAPI authentication started
ldapsasl_interactive_binds: Local error (-2)
additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No credentials cache found)
I suspect my OD is screwed, as slapd maxes out all 8 cores every few days, and takes out the mail server as a side effect.
The Linux link wasn't applicable to this, all the commands and paths are different to MacOS X unfortunately.

ACS User Database Export

Is it possible to export the user database stored in the Cisco Secure ACS Database to some file. I need to see all the user accounts and their group assignments etc to be able to do reporting on this.
Any ideas?

yes... csutil -d will dump the db.
look at aaa-reports (www.extraxi.com) they can import the dump file and run reports off it.

How can I share a Tiger server's User database to a Panther server?

I need some help to set this up. Keep in mind I do not have a DNS server.
I have a Tiger server with Xserve and an older Panther server, both on the same local network. I have a whole bunch of users setup on the Tiger server. The Panther server does not have any users setup on it. I do not want to have to type in all the users all over again in the Panther server. What I'd like to be able to do is somehow share and syncronize the user database on the Tiger server with the Panther server.
I looked into the Open Directory settings but I do not understand what to do. How do I configure the Tiger and Panther servers respectively so the Panther server can sync with the Tiger server's users database. Is this possible? It seems like it with Open Directory, one being the Open Directory Master and the other being the Open Directory Replica? But I just don't understand how to set this up. Also the Panther OD settings seem quite different than Tiger's in Open Directory.
Any help would be appreciated.
Message was edited by: robocub1

Hi
It may be best to set up your 10.4 Server as an Open Directory Master first and then use Directory Access on your 10.3 Server to connect to the Tiger Server so as it can use the same User Database. This should be possible. OD Master/Replica relationships are not possible if the OS versions are different, even if the Master was 10.4.11 and the Replica was 10.4.10. You have no chance when its 10.4 and 10.3.
http://images.apple.com/server/macosx/docs/OpenDirectory_Adminv10.5.pdf
The link is for 10.5 but the basics are the same. This is a recent post that describes how to set up an OD Master:
http://discussions.apple.com/thread.jspa?threadID=1377046&tstart=0
I'm guessing that your 10.4 Server is Standalone and is serving simple file services only (AFP and possibly SMB/Windows). If this is the case (and I can't see how it can't be) then your users will be in the local NetInfo node. This will be the default node that is presented to you in WorkGroup Manager. You always get a warning that your are working in an invisible node (if you have not disabled this) when working in the Server's local node. Don't worry there is nothing wrong with the warning. WorkGroup Manager on Panther (10.3) Server works the same way.
You could if you wanted to simply export the Users and Groups from WGM in 10.4 and import them into WGM on 10.3. This should save you having to key them all in again. If the prospect of configuring internal DNS Services and all that goes with it seems to much for you then this is probably the simplest option. How do you do this? Launch WGM (its the same for both versions), select the Server Menu and select Export after first selecting desired users. Do the same for Groups. Use the same procedure in reverse. The Users and Groups files are not very big and can easily be transferred using a memory stick etc.
There are differences between the two versions which are mostly to do with Server Admin. In 10.4 Server there are more services. One of the Services will be Open Directory. In 10.4 Open Directory will only show a green light by the side of the service if it is in any role other than Standalone. Server Admin on 10.3 Server will always show the green light by the side of the Open Directory Service. This does not mean that it is an OD Master, you have to click on Settings and inspect the Role to see what it actually is.
You should be able to connect to a 10.3 Server with 10.4's Admin tools but don't be tempted to use Server Admin to configure/change anything on the 10.3 Server. You should not be able to go the other way 10.3 > 10.4 using the same tools.
Internal DNS Services are a requirement for LDAP Services (and pretty much everything else) on Servers generally, although for simple file services not absolutely necessary. Internal DNS Services do not have to be configured on the Server itself just as long as they are configured on another server, for example, on the same network. If these are the only two servers on the network then you will have to configure DNS Services on either one or both of them depending on what you want.
Not available on your 10.3 Server but is on your 10.4 Server are Access Control Lists (ACLs). This is a permissions model that is in addition to the standard POSIX permissions. Think carefully about how you provide permissions to your network clients if there is a mix of client OS, 10.3, 10.4 etc.
Hope this helps, Tony

ACS and Windows 2000 user database communication port

Could my Windows 2000 SP4 + ACS v3.23 can install any new Windows 2000 service pack ?
I'm affraid to infect ACS Service.
So, I want to install firewall on this server to block malicious traffic.
However, my ACS used external user database Windows 2000 for authentication.
Who can tell me What protocols or port list they are communication?
I have to avoid these traffic on my firewall.

Hi cheng
I think you can install any servie pack without problem and the SP4 is the latest one for WIN2000 and you server already has this SP
For your second question you need to specify many protocols according to your active directory config in this link you can find a list of this protocols and the best way is to make debug or logging or use a siniffer to know the exactly protocols flow between your ACS and AD server
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/deploy/confeat/adrepfir.mspx
Best Regards

Export oracle 10g database from one server to another.

I need to export some databases from production to testing server.
my question is on the user accounts.
if i do the full database will the users be exported too. or i need to recreate the users?
Thanks

This i clearly documented in this table per export and import modes (traditional tools).
Message was edited by:
orafad

ACS 4.2.1.15 External User Database 'Authen DLL '

Having CSACSE-1113-K9 with ACS 4.2.15.
I want to confiure windows user database under extrenal user database but i get an error (attached) 'An error has occured while processing the Authen DLL Configure pagebecasue an error occured....'
External User Database----->database configuration --->Windows Database------>Configure.
I tried to stop the services and start agian but the same issue.
Th eappliance is secondary (backup) ACS. On the primary it is working fine.
Any help would be appreciated.
Regards,
BJ

Hi Abdul,
Can you check if the remote agent on the windows server box is running the same 4.2.1.15 version as well.
Like if ACS -4.2.1.15 then make sure that remote agent is also 4.2.1.15
or
if ACS is running 4.2.1.15 patch 2 then remote agent should also be 4.2.1.15 patch 2
Let me know if the version is same and if not then install the remote agent correctly and try again.

ACS Server certificate export

Hello,
We are in the process of renewing a certificate for our ACS server (v3.2). Is there a way to export the certificate currently in use?
We don't want to lose it if we install a certificate that does not work. We are also exploring using a self-signed certificate, but we're not sure if that will meet our needs.
Thanks!

Thanks for the info...unfortunately, we tried doing the self-signed certificate, but clients couldn't connect to our wireless network (we use that to authenticate wireless users). We then tried to do a restore from a backup taken earlier this morning and it's still trying to restore - as if something is hung and won't shut down.
This is ACS 3.2 running on a Windows 2003 server.

ACS User database Backup

Is it possible to have the ACS user database in an excel sheet

Hi,
You can open .dmp file in notepad but that will not provide any info as its not user readable.
You need to export the lsit of users in .txt extension
here is the command that you need to run from the command prompt where ACS is installed
start > run> cmd > go to this dir
C:\Program Files\CiscoSecure ACS v4.2\bin>net stop csauth
CSUtil.exe -u user.txt
C:\Program Files\CiscoSecure ACS v4.2\bin>net start csauth
Then you can easily access user.txt file in notepad.
HTH
JK

Intergrating ACS with user database in windows DC

Please,
I just installed and configured ACS on window 2003 server on my network. The next task is to integrate the user database in my DC with the ACS. I need you to tell me in steps what else that need to be done.The documentaion is not specific.
(I heard about 'remote agent' please what is this,and is it required?)

I think you can map your DC groups to ACS group
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.0/user/guide/qg.html#wp940538
M.

Set user password auto expired in ACS Server

Hi,
Is the ACS has a function for me to configure in ACS Server to set the users' password will be expired in a period of time(e.g. 90 days)?
Thanks and regards
Ernest

Remember :
RADIUS with expiry only supports password
change when the database that ACS authenticates your users against is active directory (which would not use the password expiry options configurable in ACS but, rather, Windows password expiry).
Password Expiry with tacacs will only work if the user is a part of local database on the
ACS server.
To configure the password expiry, please follow these steps :
- On the ACS server, system configurations > Local Password Managment > uncheck the
check box " Disable Telnet Change Password against the ACS ".
Regards,
~JG
Do rate helpful posts

Difference between ACS Administrator account and ACS user account?

Does an ACS administrator by default have full rights to every device it manages?
I thought ACS administator accounts and user accounts were different.
I have an acs admin account called admin_1. then i created another user account called admin_1 (for switch/router access)
when i set the password for admin_1(user accounts), when i tried to login into the switch it wouldn't take. It would only take the password set for the ACS admin account.
Is this by design?

My understanding was that this is not the case, Ive just tested my installation again to make double sure and the user accounts and the admin accounts are clearly seperated
The RADIUS server does not make use of the Admin user database.

Export User-Database between ACS-Server

Similar Messages

Maybe you are looking for