[cisco-voip] security concern regarding cups

[Jason Aarons (US)]

Phone Messenger has same issue, I understand there is/will be fix for
the IP Phone Service to be https. Can't recall where I just read about
it -jason

 

From: cisco-voip-bounces at puck.nether.net
[mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of VoiceNoob
Sent: Monday, November 23, 2009 8:40 AM
To: 'wael ahmed el mezain'; cisco-voip at puck.nether.net
Subject: Re: [cisco-voip] security concern regarding cups

 

Are you SURE it is sending the LDAP password in plaintext? Have you done
a packet capture? Also the screen shot you sent is the AXL configuration
not CUPS querying LDAP. 

 

From: cisco-voip-bounces at puck.nether.net
[mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of wael ahmed el
mezain
Sent: Sunday, November 22, 2009 11:29 AM
To: cisco-voip at puck.nether.net
Subject: [cisco-voip] security concern regarding cups

 

Dears,

 

We have a security concern regarding cups.


When CUPS querying LDAP the integration account is sending the user name
and password in plain text.


Can we use secure LDAP instead? And Also what is the advantage of the
attached screen


Please advice.


Regards,

wael ahmed

 

________________________________

Windows Live: Make it easier for your friends to see what you're up to
on Facebook.
<http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-actio
n/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:en-xm:SI_SB_
2:092009> 




-----------------------------------------
Disclaimer:

This e-mail communication and any attachments may contain
confidential and privileged information and is for use by the
designated addressee(s) named above only.  If you are not the
intended addressee, you are hereby notified that you have received
this communication in error and that any use or reproduction of
this email or its contents is strictly prohibited and may be
unlawful.  If you have received this communication in error, please
notify us immediately by replying to this message and deleting it
from your computer. Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20091123/1817085c/attachment.html>