Changing CiscoSecure GRS Data Stores

This appendix contains important information and instructions for changing from the flatfile data store to an Oracle database and vice versa.

Changing from a Flatfile Data Store to an Oracle Database

To change from a flatfile data store to an Oracle database, follow the instructions in the following sections.

Note This procedure creates a number of .dat files in the directory and might erase any current files in the directory with the same name. Make sure you have made backup copies of your .dat files before performing these steps.

Migrating Existing Data (Optional)

To migrate existing data to the Oracle database:

Step 1 Start the GUI.

Step 2 In the General window, click Export.

The following prompt displays:

Directory to export to:

Step 3 Enter the full path to which to export the flatfile data store and click OK. CiscoSecure GRS places the data files in the directory.

Setting Environment Variables

Before you switch files, follow these steps to set the environment variables:

Step 1 Exit the GUI.

Step 2 From the command line, set the environment variables as follows:

ORACLE_HOME=directory

ORACLE_SID=serverID

where directory is the name of the directory in which Oracle is installed

and serverID is the name of the server on which Oracle is installed.

Changing Data Stores Using the GUI

To change data stores using the GUI, follow these steps to complete the process:

Step 1 Start the GUI.

Step 2 In the tree, click Properties.

Step 3 Click the Data Store tab.

Step 4 From the Data Store drop-down menu, click Oracle.

If Oracle is grayed out in the drop-down menu, repeat the steps in the section "Setting Environment Variables."

Step 5 Enter the username and password you use to log in to Oracle. The database directory and server information is filled in automatically. If this information is incorrect, repeat the steps in the section "Setting Environment Variables."

Step 6 Click Commit. The tree refreshes to reflect the information in the new Oracle database. If there is no Local Domain configured in the Oracle database, the Express Setup Wizard opens. See the section "Express Setup Wizard" in the chapter "Configuring CiscoSecure GRS" for instructions.

Changing Data Stores Manually

To change data stores manually, follow these steps to complete the process.

Note We highly recommend you use the GUI to change data stores. See the section "Changing Data Stores Using the GUI" for instructions.

Step 1 Edit the $GRSHOME/etc/grs.ini file and modify the following information in the [Database] section:

dbServer--Oracle database server name. If you do not know the server name, check with your database administrator.
dbUserName--Oracle database username (should be a valid Oracle database account with read/write permission).
dbPassword--Oracle database password.

Step 2 Edit $GRSHOME/etc/.odbc.ini file and modify the following information:

Change the section name [NONE] to dbServer name. You can find the dbServer name in the $GRSHOME/etc/grs.ini file.
Change the Server name from NONE to dbServer name.

Step 3 Edit $GRSHOME/etc/grs.sh file to add the following environment variables:

ORACLE_HOME: Should be set to the directory where Oracle is installed
ORACLE_SID: Oracle server id
LD_LIBRARY_PATH: Append ORACLE_HOME/lib to the existing LD_LIBRARY_PATH

Step 4 Restart CiscoSecure GRS.

Switching from an Oracle Database to the Flatfile Data Store

To switch from an Oracle database to the flatfile data store, follow these steps:

Step 1 Start the GUI.

Step 2 In the tree, click Properties.

Step 3 Click the Data Store tab.

Step 4 From the Data Store drop-down menu, click Flatfile.

Step 5 Click Commit. The tree refreshes to reflect the information in the new Oracle database. If there is no Local Domain configured in the Oracle database, the Express Setup Wizard opens. See the section "Express Setup Wizard" in the chapter "Configuring CiscoSecure GRS" for instructions.

Step 6 Restart CiscoSecure GRS.

Example Data Store Information

The following example shows the type of information stored in the data store domains. The information in your own data store will be slightly different.

corporation.us
  MaxSessions:    10
  RetryTimeout:   10    Number of Retries: 3
  Add domain for Accounting: OFF
  Stripping Flags:     Authen-false Author-false Acct-false
  Strip String:        us
Access Control Server (ACS)
IpAddress     Secret        AuthenPort    AcctPort
---------------------------------------------------------------
10.0.0.1      secret        1026          49

IP Pool/Address Checking: OFF
_LOCAL_ACS_
  MaxSessions:    5
  RetryTimeout:   30    Number of Retries: 3
  Add domain for Accounting: OFF
  Stripping Flags:     Authen-true Author-true Acct-true
  Strip String:        _LOCAL_ACS_
Network Access Servers (NAS)
Name                    Secret           Vendor/Protocol Type
___________________________________________________________________
10.0.0.2                secret           CSCO-T
_DEFAULT_RADIUS_NAS_    secret           CSCO-R

Table of Contents