<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
--></style>
</head>
<body class='hmmessage'>
Guys, thanks for reply <BR>
<BR>
But anyone has solution for this ?<BR>
I used to get the solutions for my issues from this group.<BR>
<BR>
Thanks,<BR>
Wael<BR>
<HR id=stopSpelling>
Subject: RE: [cisco-voip] security concern regarding cups<BR>Date: Mon, 23 Nov 2009 13:11:00 -0500<BR>From: jason.aarons@us.didata.com<BR>To: voicenoob@gmail.com; wael733@hotmail.com; cisco-voip@puck.nether.net<BR><BR>
<STYLE>
.ExternalClass .ecxshape
{;}
</STYLE>
<STYLE>
.ExternalClass p.ecxMsoNormal, .ExternalClass li.ecxMsoNormal, .ExternalClass div.ecxMsoNormal
{margin-bottom:.0001pt;font-size:12.0pt;font-family:'Times New Roman','serif';}
.ExternalClass a:link, .ExternalClass span.ecxMsoHyperlink
{color:blue;text-decoration:underline;}
.ExternalClass a:visited, .ExternalClass span.ecxMsoHyperlinkFollowed
{color:purple;text-decoration:underline;}
.ExternalClass p
{margin-right:0in;margin-left:0in;font-size:12.0pt;font-family:'Times New Roman','serif';}
.ExternalClass span.ecxEmailStyle18
{font-family:'Calibri','sans-serif';color:#1F497D;}
.ExternalClass span.ecxEmailStyle19
{font-family:'Calibri','sans-serif';color:#1F497D;}
.ExternalClass .ecxMsoChpDefault
{font-size:10.0pt;}
@page Section1
{size:8.5in 11.0in;}
.ExternalClass div.ecxSection1
{page:Section1;}
</STYLE>
<DIV class=ecxSection1>
<P class=ecxMsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'">Phone Messenger has same issue, I understand there is/will be fix for the IP Phone Service to be https. Can’t recall where I just read about it -jason</SPAN></P>
<P class=ecxMsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'"> </SPAN></P>
<DIV>
<DIV style="BORDER-RIGHT: medium none; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; PADDING-LEFT: 0in; PADDING-BOTTOM: 0in; BORDER-LEFT: medium none; PADDING-TOP: 3pt; BORDER-BOTTOM: medium none">
<P class=ecxMsoNormal><B><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Tahoma','sans-serif'">From:</SPAN></B><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Tahoma','sans-serif'"> cisco-voip-bounces@puck.nether.net [mailto:cisco-voip-bounces@puck.nether.net] <B>On Behalf Of </B>VoiceNoob<BR><B>Sent:</B> Monday, November 23, 2009 8:40 AM<BR><B>To:</B> 'wael ahmed el mezain'; cisco-voip@puck.nether.net<BR><B>Subject:</B> Re: [cisco-voip] security concern regarding cups</SPAN></P></DIV></DIV>
<P class=ecxMsoNormal> </P>
<P class=ecxMsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'">Are you SURE it is sending the LDAP password in plaintext? Have you done a packet capture? Also the screen shot you sent is the AXL configuration not CUPS querying LDAP. </SPAN></P>
<P class=ecxMsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'"> </SPAN></P>
<DIV>
<DIV style="BORDER-RIGHT: medium none; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; PADDING-LEFT: 0in; PADDING-BOTTOM: 0in; BORDER-LEFT: medium none; PADDING-TOP: 3pt; BORDER-BOTTOM: medium none">
<P class=ecxMsoNormal><B><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Tahoma','sans-serif'">From:</SPAN></B><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Tahoma','sans-serif'"> cisco-voip-bounces@puck.nether.net [mailto:cisco-voip-bounces@puck.nether.net] <B>On Behalf Of </B>wael ahmed el mezain<BR><B>Sent:</B> Sunday, November 22, 2009 11:29 AM<BR><B>To:</B> cisco-voip@puck.nether.net<BR><B>Subject:</B> [cisco-voip] security concern regarding cups</SPAN></P></DIV></DIV>
<P class=ecxMsoNormal> </P>
<P class=ecxMsoNormal><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Book Antiqua','serif'">Dears,</SPAN></P>
<P class=ecxMsoNormal><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Book Antiqua','serif'"> </SPAN></P>
<P class=ecxMsoNormal><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Book Antiqua','serif'">We have a security concern regarding cups.</SPAN></P>
<P class=ecxMsoNormal><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Book Antiqua','serif'"><BR>When CUPS querying LDAP the integration account is sending the user name and password in plain text.</SPAN></P>
<P class=ecxMsoNormal><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Book Antiqua','serif'"><BR>Can we use secure LDAP instead? And Also what is the advantage of the attached screen</SPAN></P>
<P class=ecxMsoNormal><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Book Antiqua','serif'"><BR>Please advice.</SPAN></P>
<P class=ecxMsoNormal><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Book Antiqua','serif'"><BR>Regards,</SPAN></P>
<P class=ecxMsoNormal><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Book Antiqua','serif'">wael ahmed</SPAN></P>
<P class=ecxMsoNormal style="MARGIN-BOTTOM: 12pt"><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Verdana','sans-serif'"> </SPAN></P>
<DIV class=ecxMsoNormal style="TEXT-ALIGN: center" align=center><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Verdana','sans-serif'">
<HR align=center width="100%" SIZE=2>
</SPAN></DIV>
<P class=ecxMsoNormal><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Verdana','sans-serif'">Windows Live: Make it easier for your friends to see <A href="http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:en-xm:SI_SB_2:092009">what you’re up to on Facebook.</A></SPAN></P></DIV>
<HR SIZE=1>
<P><BR>
<STRONG>Disclaimer: This e-mail communication and any attachments may contain confidential and privileged information and is for use by the designated addressee(s) named above only. If you are not the intended addressee, you are hereby notified that you have received this communication in error and that any use or reproduction of this email or its contents is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately by replying to this message and deleting it from your computer. Thank you. </STRONG><BR> <br /><hr />Windows Live: Keep your friends up to date <a href='http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:en-xm:SI_SB_1:092010' target='_new'>with what you do online.</a></body>
</html>