[cisco-voip] CUCM and Auto Fill Credentials

[Benjamin Turner]

Running 11.5 and I tested on a few admin users and got clear txt using the tftp address and SEPMac address.cnf.xml

Dang!!!

Get Outlook for Android<https://aka.ms/ghei36>

________________________________
From: cisco-voip <cisco-voip-bounces at puck.nether.net> on behalf of Anthony Holloway <avholloway+cisco-voip at gmail.com>
Sent: Thursday, March 15, 2018 9:38:11 PM
To: Charles Goldsmith
Cc: Cisco VoIP Group
Subject: Re: [cisco-voip] CUCM and Auto Fill Credentials

Charles,  Sounds good, and thank you for the input.

As for clearing the SSH stuff, you could run:

run sql update device set (sshuserid, sshpassword) = ('', '') where sshuserid is not null and sshuserid <> ''

On Thu, Mar 15, 2018 at 6:50 PM Charles Goldsmith <wokka at justfamily.org<mailto:wokka at justfamily.org>> wrote:
Anthony, pertaining to this tidbit about 3rd party password tools, I've found at least with LastPass this is not the case.  In testing this, I'm using Firefox ESR latest, on Windows 7 fully patched and the latest Lastpass update that it's still allowing firefox to insert the credentials if you have that enabled.  Of course, if you disable firefox saving of credentials, it shouldn't do this.

Obviously I'm nitpicking here, but wanted to clarify this a bit for posterities sake, since we are obviously getting into some best practices here.

Turn off browser auto-complete of passwords and use a 3rd party password management tool.

Lastly, once the fields are filled out, I cannot find an easy way to clear them.  You can replace with something else, but not clear.

Thanks for the info on all of this!


On Thu, Mar 15, 2018 at 9:54 AM Anthony Holloway <avholloway+cisco-voip at gmail.com<mailto:avholloway%2Bcisco-voip at gmail.com>> wrote:
One member of the list confirmed that passwords stored with 3rd party password tools, such as LastPass, protect you from this behavior.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20180316/4ef8022d/attachment.html>