<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=big5">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>
<div>
<div>Store them with reversible encryption in a 3rd party database with a web app that responds to requests from the UCCX environment. Set the web app up so it only responds to the UCCX server address.</div>
<div><br>
</div>
<div>Use an http request from the script to request the username and password, have the script reverse the encryption (JAVA?) after it receives it from the web response, and then use that to log on to the UCCX repository.</div>
<div><br>
</div>
<div>I realize this is absurd, but UCCX doesn't have MLA, which is also absurd. If it did have MLA, and the script had a special string type "Password" that at least masked the password in the box in a half way secure way, you could have repository manager
roles and you could store the credentials to that user role in the script semi-secure.</div>
<div><br>
</div>
<div>Or, even better, they could just make uploads to repositories directly from scripts being run on the local box NOT require authentication at all.</div>
<div><br>
</div>
<div>There are a million ways for the BU / Developers to fix this. Until then you pretty much have to backflip through flaming hoops or just store the password in plain text. :)</div>
<div>
<div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px; ">
<br>
</div>
<div>
<p style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px; margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 11px/normal 'Times New Roman'; min-height: 12px; ">
<b></b><br>
</p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 11px/normal Calibri; ">
</p>
<p style="color: rgb(0, 0, 0); font-weight: bold; margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 11px/normal Calibri; ">
<font class="Apple-style-span" size="3"><b>Eric Butcher</b></font></p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 8px/normal Calibri; ">
<font class="Apple-style-span" size="3" style="color: rgb(0, 0, 0); font-weight: bold; "><b>Cisco Unified Communications Engineer</b></font><span style="color: rgb(0, 0, 0); font-weight: bold; font-size: medium; font: normal normal normal 11px/normal Calibri; "><b><br>
</b></span><span style="font: normal normal normal 7.5px/normal Arial; font-size: 10px; "><font class="Apple-style-span" color="#ff1213"><b>CDW</b></font></span><span style="font: normal normal normal 7.5px/normal Arial; color: rgb(146, 146, 146); font-size: 10px; ">
Professional Services</span></p>
<p style="font-weight: bold; margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 7.5px/normal Arial; color: rgb(146, 146, 146); ">
<span class="Apple-style-span" style="font-size: 12px; ">11711 N Meridian, Ste 225</span></p>
<p style="color: rgb(0, 0, 0); font-weight: bold; margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 7.5px/normal Arial; ">
<span class="Apple-style-span" style="font-size: 12px;"><span style="color: #929292">Carmel, IN 46032<br>
</span><span style="font: 10.0px Wingdings">(</span><span style="font: 7.5px Calibri"> </span>317.569.4282 ¡V Single Number Reach<br>
<span style="font: 10.0px Wingdings">¡¯</span> <a href="mailto:eric.butcher@cdw.com">
<span style="text-decoration: underline ; color: #1e39f6">eric.butcher@cdw.com</span></a></span></p>
<p style="font-weight: bold; margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 8px/normal Arial; color: rgb(30, 57, 246); ">
<span style="text-decoration: underline; font-size: 12px;"><a href="http://www.cdw.com/">http://www.cdw.com/</a></span></p>
<div style="color: rgb(0, 0, 0); font-weight: bold; font-size: medium; "><br>
</div>
<p></p>
<p style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px; margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 11px/normal 'Times New Roman'; min-height: 12px; ">
<br>
</p>
</div>
</div>
</div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Matthew Loraditch <<a href="mailto:MLoraditch@heliontechnologies.com">MLoraditch@heliontechnologies.com</a>><br>
<span style="font-weight:bold">Date: </span>Fri, 2 Mar 2012 22:45:27 +0000<br>
<span style="font-weight:bold">To: </span>"<a href="mailto:lelio@uoguelph.ca">lelio@uoguelph.ca</a>" <<a href="mailto:lelio@uoguelph.ca">lelio@uoguelph.ca</a>>, cisco-voip <<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [cisco-voip] OT: storing passwords securely in unix scripts<br>
</div>
<div><br>
</div>
<div dir="ltr"><style type="text/css">P {
MARGIN: 0px
}
</style><style id="owaParaStyle">P {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
</style>
<div fpstyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">
<p>I may be thinking about this wrong, but if they aren't in plain text how is your script going to be able to use them? As far as I know you'd have to supply them back to the device in plain text which means they'd need to be some sort of decryptable encryption
anyway which just puts you into security by obscurity mode. That may be enough for you but seems redundant to me and an extra step if the file the script is using is properly secured file permission wise.</p>
<div>
<p> </p>
<div style="FONT-FAMILY: Tahoma; FONT-SIZE: 13px">
<div><font size="2" face="Tahoma"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #244061; FONT-SIZE: 11pt">
<p style="MARGIN: 0in 0in 0pt" class="MsoNormal"><span><font color="#000000">Matthew G. Loraditch - CCVP, CCNA, CCDA<br>
</font></span><span style="font-size: 9pt; font-family: Arial, sans-serif; "><br>
<font color="#000000">1965 Greenspring Drive</font></span><span><br>
</span><span style="font-size: 9pt; font-family: Arial, sans-serif; "><font color="#000000">Timonium, MD 21093</font></span><span><br>
</span><span style="font-size: 9pt; font-family: Arial, sans-serif; "><br>
<font color="#000000">voice. 410.252.8830<br>
fax. 410.252.9284 <br>
<br>
</font><a href="http://twitter.com/heliontech"><span style="COLOR: blue">Twitter</span></a><font color="#000000"> |
</font><a href="http://www.facebook.com/#!/pages/Helion/252157915296"><span style="COLOR: blue">Facebook</span></a><font color="#000000"> |
</font><a href="http://www.heliontechnologies.com/"><span style="COLOR: blue">Website</span></a><font color="#000000"> |
</font><a href="mailto:support@heliontechnologies.com?subject=Technical%20Support%20Request"><span style="COLOR: blue">Email Support</span></a></span><span style="font-family: Arial, sans-serif; "></span></p>
</span></font></div>
</div>
</div>
<div style="FONT-FAMILY: Times New Roman; COLOR: #000000; FONT-SIZE: 16px">
<hr tabindex="-1">
<div style="DIRECTION: ltr" id="divRpF150645"><font color="#000000" size="2" face="Tahoma"><b>From:</b>
<a href="mailto:cisco-voip-bounces@puck.nether.net">cisco-voip-bounces@puck.nether.net</a> [<a href="mailto:cisco-voip-bounces@puck.nether.net">cisco-voip-bounces@puck.nether.net</a>] on behalf of Lelio Fulgenzi [<a href="mailto:lelio@uoguelph.ca">lelio@uoguelph.ca</a>]<br>
<b>Sent:</b> Friday, March 02, 2012 5:09 PM<br>
<b>To:</b> cisco-voip<br>
<b>Subject:</b> [cisco-voip] OT: storing passwords securely in unix scripts<br>
</font><br>
</div>
<div></div>
<div>
<div style="FONT-FAMILY: Verdana; COLOR: #000000; FONT-SIZE: 10pt">this group is a smart bunch of cookies. anyone have any idea how to securely store passwords on unix/linux so that
<span>i can run scripts that require passwords?<br>
<br>
until Cisco builds SSH key pair recognition (or is it there already? ;), this seems like the only option.<br>
<br>
i don't want to be storing passwords in plain text regardless of how secure the directory might be. or at least avoid it if at all possible.<br>
<br>
thoughts?<br>
<br>
<span name="x"></span>---<br>
Lelio Fulgenzi, B.A.<br>
Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1<br>
(519) 824-4120 x56354 (519) 767-1060 FAX (ANNU)<br>
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^<br>
Cooking with unix is easy. You just sed it and forget it. <br>
- LFJ (with apologies to Mr. Popeil)<br>
<span name="x"></span><br>
</span><br>
</div>
</div>
</div>
</div>
</div>
</div>
_______________________________________________ cisco-voip mailing list <a href="mailto:cisco-voip@puck.nether.net">
cisco-voip@puck.nether.net</a> <a href="https://puck.nether.net/mailman/listinfo/cisco-voip">
https://puck.nether.net/mailman/listinfo/cisco-voip</a> </span>
</body>
</html>