Authentication - clear text/encrypted

Hi all,
I have got another thread open about Set-OutlookProvider as I am having issues with 20-odd XP machines off the domain using OutlookAnywhere.
My question is about authentication when using Outlook Anywhere:
If you setup the proxy as follows (see screenshot):
Is the password sent in clear text or not???? I thought it was, but I have been running packet captures with Wireshark and cheking the output and cannot find the password in clear text.
Am I correct in assuming that by ticking the box "connect using SSL Only" and even not using the option to connect with proxies with certificate will send the credentials encrypted rather than in clear text?
Would appreciate comments.
Regards

Check the connection settings in your dialog above - you are using HTTPS. So unless your WireShark is running as a man-in-the-middle, you are getting encrypted traffic. Notice also that you will only use SSL - the checkbox is selected
and you can't change it. So your clients will always use SSL for their OA connections - and their traffic will always be encrypted (including the credential traffic).

Similar Messages

How can I convert the encrypted SQL data to clear text in CCM?

I want to retrieve CCM information from SQL database but many of them display as encrypted as follows,
{14AE763F-D1EE-44A2-93C1-00FB95578E43} {7FD1AACD-6E85-4B79-A0D1-5F25074414D0}
Any way to convert to clear text?
Thanks in advance,

I need to summarize the current CCM configuration into spreadsheet and want to reduce the labor work by manually typing. For example, the Route List display in SQL as I mentioned instead of clear text.
Any tool available to get all the configuration information as clear text?
Thanks,

How to Forward Encrypted Email as Clear Text?

In other email clients when I receive an encrypted email, I can forward it to someone else as clear text.
How do I do this in TB? When I attempt to forward an encrypted email, TB creates an S/MIME attachment instead of copying the original unencrypted text.

Your other email client are not working correctly if they will allow that. Serious security breach that is. What client? so I can follow it up with the relevant vendor?
I send you encrypted mail because I want the information secured and encrypted between me and those I have shared my digital signature with. Allowing you to decide to forward my encrypted mail unencrypted to a third party defeats the whole point of encryption and represents a significant security hole.
By forwarding an s/mime attachment, if the third party is entitled to read my encrypted mail they will have the digital signature and therefore will be able to read the content. If they do not have the correct digital signature then they have no right to access the email. A simple way to defeat security breaches through lack of thought on the part of the parties to the communication.

Does Portal account info go as clear text or encrypted

Hi Gurus,
When I login to portal, Does my account info(User name and password) go to the server as clear text or encrypted. Please post a reply if you have some idea about it.
Thanks
Raj

It is encrypted.
http://www.enhansoft.com/

Clear text value not allowed for credentials in config.xml

I am in the process of migrating our J2EE application from Weblogic 8.1 to Weblogic 10 MP1 and have converted config.xml to the new schema. When starting up in production mode, I see the following error which causes the server to shutdown:
<Server failed. Reason: [Management:141266]Parsing Failure in config.xml: java.lang.IllegalArgumentException: In production mode, it's not allowed to set a clear text value to the property: CredentialEncrypted of SecurityConfigurationMBean>
In 8.1 it seems that it would fill in the credentials based on the username and password in boot.properties so it was possible for our installation program to leave these entries blank. However, when starting in 10.0 it doesn't do this. Below is an excerpt from config.xml.
<security-configuration>
<name>xyz</name>
<realm>
<sec:authentication-provider xsi:type="wls:default-authenticatorType"></sec:authentication-provider>
<sec:authentication-provider xsi:type="wls:default-identity-asserterType">
<sec:active-type>AuthenticatedUser</sec:active-type>
</sec:authentication-provider>
<sec:role-mapper xsi:type="wls:default-role-mapperType"></sec:role-mapper>
<sec:authorizer xsi:type="wls:default-authorizerType"></sec:authorizer>
<sec:adjudicator xsi:type="wls:default-adjudicatorType"></sec:adjudicator>
<sec:credential-mapper xsi:type="wls:default-credential-mapperType"></sec:credential-mapper>
<sec:cert-path-provider xsi:type="wls:web-logic-cert-path-providerType"></sec:cert-path-provider>
<sec:cert-path-builder>WebLogicCertPathProvider</sec:cert-path-builder>
<sec:user-lockout-manager></sec:user-lockout-manager>
<sec:security-dd-model>Advanced</sec:security-dd-model>
<sec:combined-role-mapping-enabled>false</sec:combined-role-mapping-enabled>
<sec:name>myrealm</sec:name>
</realm>
<default-realm>myrealm</default-realm>
<credential-encrypted></credential-encrypted>
<web-app-files-case-insensitive>os</web-app-files-case-insensitive>
<compatibility-connection-filters-enabled>true</compatibility-connection-filters-enabled>
<enforce-strict-url-pattern>false</enforce-strict-url-pattern>
</security-configuration>
Is anyone else trying to do this?
Henry

Hi henry,
While running a particular instance in the production mode(wls 10.x),prior to upgrading the domain you need to upgrade the security provider(all the mbeans ) you use in the previous versions and later on if you follow the domain upgrade you may find a solution for this issue...

AD Authentication and credentials encryption

Hello,
I need to authenticate to Active Directory using different credentials through the System.DirectoryServices.DirectoryEntry in a PowerShell-script. Security is a huge deal in the environment I'm working in, and I have not been able to find a clear answer on
this.
As the DirectoryEntry.AuthenticationType documentation says, since .NET Framework 2.0, the default AuthenticationType is "Secure". Now, apparently using the Secure AuthenticationType in a AD context means the following: "Active Directory Domain
Services uses Kerberos, and possibly NTLM, to authenticate the client." What I need to make sure of is that the credentials are not passed in clear-text over the network. Is it sufficient to rely on the Secure authentication type or should I specify additional
AuthenticationTypes, in which case what would be the most secure combination?
Additionally to this, another security concern would be that the password would be stored in local memory until the next time the .NET garbage collection takes place, since there is no native method of disposing System.String. Can I use the System.GC.Collect-method
to remove the clear-text passwords from memory? I've read that this is not good practice as it can potentially cause performance issues, but looking at this from a security-perspective, it may be worth looking into anyways if it can remove the string from
memory.
I am not sure if this is the right forum to ask these kind of questions, but figured it would be worth a shot.
Thanks,
Andreas

It's better to never store the password as a string at all (never mind the fact that it's sitting in a plain text PowerShell script file.) For example, using a character array allows you to zero out the memory whenever you like:
# The characters of "SecretPassword", obtained with the command:
# [int[]]"SecretPassword".ToCharArray() -join ', '
$chars = [char[]](83, 101, 99, 114, 101, 116, 80, 97, 115, 115, 119, 111, 114, 100)
$securePassword = New-Object securestring
foreach($char in $chars)
$securePassword.AppendChar($char)
$securePassword.MakeReadOnly()
[Array]::Clear($chars, 0, $chars.Count)
This is better than relying on the garbage collector for strings, which would simply make the string's memory available again (without zeroing it out), but it's still not perfect. The CLR may have moved the character array around before it was zero'ed,
leaving older copies of it around
Best is to not hard-code the password at all, in any form. Read it from secure storage somewhere directly into a SecureString (such as by using the ConvertTo-SecureString / ConvertFrom-SecureSting cmdlets without the -AsPlainText switch; this encrypts
the data using DPAPI by default.)

Should trace files contain clear text for queries?

Hi:
I've set up a JDBC connection pool in Oracle WLS 10.3.3 and want to verify that the traffic is in fact encrypted. (I am not going for authentication, just encryption). So I have turned tracing on in the server and I run an application in WLS. In the trace file I see the following:
2011-09-27 18:11:50.248292 : na_tns:Secure Network Services is available.
2011-09-27 18:11:50.248307 : nau_adi:entry
2011-09-27 18:11:50.248324 : nau_adi:exit
2011-09-27 18:11:50.248333 : na_tns:    authentication is not active
2011-09-27 18:11:50.248346 : na_tns:    encryption is active, using AES256
2011-09-27 18:11:50.248356 : na_tns:    crypto-checksumming is active, using SHA1
2011-09-27 18:11:50.248365 : na_tns:exitI am taking this to mean that in fact the application is using an encrypted JDBC connection. Later on in this file though, I see the clear text of the query (everything is clear text actually). I believe this is correct because by the time the query makes it into the trace file the DB has decrypted it and executed it. Is this correct?
Thanks.

Are you referring to the database session trace file (e.g. generated by SQL_TRACE=TRUE, event 10046, DBMS_SESSION.SESSION_TRACE_ENABLE etc) ?
What is dumped (ie. SQL statements) is always clear text. (There used to be an issue with passwords from ALTER USER commands still present in the shared pool but I believe that has been fixed so the password is not dumped in clear text).
SQLNet traffic between an Application Server and Database Server is encrypted.
Hemant K Chitale

ACS 5.3 Showing Clear Text Password in Authorization reports

Hello,
When a tacacs user is changing the local password on the router (for local user), the acs 5.3 is showing the new password in clear text in authorization reports/logs.
This behaviour is seen on acs 5.x, whereas acs 4.2 is showing encrypted password in the reports.
I have checked debugs on Router and it is sending password in clear text in Tacacs Authorization packet but encrypted password in Tacacs Accounting logs.
Debug tacacs accounting
debug aaa accounting
4w3d: TPLUS: Received accounting response with status PASS
4w3d: TPLUS: Queuing AAA Accounting request 208 for processing
4w3d: TPLUS: processing accounting request id 208
4w3d: TPLUS: Sending AV task_id=459
4w3d: TPLUS: Sending AV timezone=UTC
4w3d: TPLUS: Sending AV service=shell
4w3d: TPLUS: Sending AV priv-lvl=15
4w3d: TPLUS: Sending AV cmd=username sansehga privilege 15 password *****
4w3d: TPLUS: Accounting request created for 208(sanjay)
debug tacas authorization
debug aaa authorization
4w3d: AAA/MEMORY: create_user (0x851611DC) user='sanjay' ruser='R1' ds0=0
port='tty7' rem_addr='10.76.212.159' authen_type=ASCII service=NONE priv=15
initial_task_id='0', vrf= (id=0)
4w3d: tty7 AAA/AUTHOR/CMD(1390711548): Port='tty7' list='' service=CMD
4w3d: AAA/AUTHOR/CMD: tty7(1390711548) user='sanjay'
4w3d: tty7 AAA/AUTHOR/CMD(1390711548): send AV service=shell
4w3d: tty7 AAA/AUTHOR/CMD(1390711548): send AV cmd=username
4w3d: tty7 AAA/AUTHOR/CMD(1390711548): send AV cmd-arg=sansehga
4w3d: tty7 AAA/AUTHOR/CMD(1390711548): send AV cmd-arg=privilege
4w3d: tty7 AAA/AUTHOR/CMD(1390711548): send AV cmd-arg=15
4w3d: tty7 AAA/AUTHOR/CMD(1390711548): send AV cmd-arg=password
4w3d: tty7 AAA/AUTHOR/CMD(1390711548): send AV cmd-arg=sehgal
4w3d: tty7 AAA/AUTHOR/CMD(1390711548): send AV cmd-arg=<cr>
4w3d: tty7 AAA/AUTHOR/CMD(1390711548): found list "default"
4w3d: tty7 AAA/AUTHOR/CMD(1390711548): Method=tacacs+ (tacacs+)
4w3d: AAA/AUTHOR/TAC+: (1390711548): user=sanjay
4w3d: AAA/AUTHOR/TAC+: (1390711548): send AV service=shell
4w3d: AAA/AUTHOR/TAC+: (1390711548): send AV cmd=username
4w3d: AAA/AUTHOR/TAC+: (1390711548): send AV cmd-arg=sansehga
4w3d: AAA/AUTHOR/TAC+: (1390711548): send AV cmd-arg=privilege
4w3d: AAA/AUTHOR/TAC+: (1390711548): send AV cmd-arg=15
4w3d: AAA/AUTHOR/TAC+: (1390711548): send AV cmd-arg=password
4w3d: AAA/AUTHOR/TAC+: (1390711548): send AV cmd-arg=sehgal
4w3d: AAA/AUTHOR/TAC+: (1390711548): send AV cmd-arg=<cr>
4w3d: AAA/AUTHOR (1390711548): Post authorization status = PASS_ADD
Please share if someone has found the fix to this problem.
Regards,
Akhtar

Thanks Tarik,
But it seems it did not help overall
Akhtar: Cisco needs long time to fix bugs unless it is P1 or P2 bug. Otherwise they'll do it at their leisure.
If you are not on latest patch already then upgrade. If you are already on the latest patch then wait for the next one. If your bug is not mentioned to be fixed on the resolved caveats don't panic. I've seen many bugs fixed but not mentioned in the release notes. What you need to do is to contact TAC so they contact the BU for your behalf to confirm if the bug is resolved or not.
Regards,
Amjad

CUCM Security - Are Jitter, Latency and Packet Loss Stats in Clear Text ?

I've reviewed the Cisco Unified Communications Manager Security Guide and see no suggestion that implementing encryption prevents MoS scoring. In other words, when you implement encryption, do you still have access to jitter, latency and packet loss information in clear text?
TIA,
Amir

Well.. the phones measure the statistics.
The phones then report the stats to CUCM for inclusion in the CMRs.
... as I recall this is done via SCCP.
So yes, it's clear text, unless your signalling is encrypted generally. On most clusters it's not.
Aaron

Unable to clear text Field in Multi Screen JFrame GUI Application

i am working with a Swing GUI project where I want to accept user input in a
text field
I have used singleton pattern which will create only one instance of object
due to this when i move from one scree to another the input of textfield
doesnt updated I have used setText method to clear the JTextField but it wont
works
Program one -- 1st screen
import java.awt.event.ActionEvent;
import java.awt.event.ActionListener;
import javax.swing.JButton;
import javax.swing.JFrame;
import javax.swing.JPanel;
import javax.swing.SwingUtilities;
import java.awt.event.*;
import javax.swing.JTextField;
public class Frame1 extends JFrame
public static Frame1 frame1;
public JButton button;
public JTextField input;
public static Frame1 getInstance()
if(frame1==null)
frame1 = new Frame1();
return frame1;
public JButton getJButton(String mytext)
JButton button = new JButton();
button.setText(mytext);
button.setBounds(450,450,150,50);
return button;
public void myGUI()
JPanel panel = new JPanel();
panel.setLayout(null);
button = getJButton("1st Frame");
addActionListener(button);
input = new JTextField(10);
input.setBounds(200,300,100,30);
panel.add(input);
panel.add(button);
add(panel);
setUndecorated(true);
setSize(1024, 768);
setVisible(true);
setDefaultCloseOperation(EXIT_ON_CLOSE);
public void addActionListener(Object obj)
try{
JButton button1 = (JButton)obj;
button.addActionListener(new ActionListener() {
public void actionPerformed(ActionEvent ae)
String text = "";
input.insert("", 0);
Frame2.getInstance().myGUI();
Frame2.getInstance().repaint();
dispose();
catch(Exception e1)
System.out.println("Exception==> "+e1.toString());
public static void main(String[] args)
Frame1.getInstance().myGUI();
Frame1.getInstance().repaint();
program 2 - 2nd screen
import javax.swing.JFrame;
import javax.swing.JPanel;
import java.awt.event.ActionEvent;
import java.awt.event.ActionListener;
import javax.swing.JButton;
import javax.swing.JFrame;
import javax.swing.JPanel;
import javax.swing.SwingUtilities;
import java.awt.event.*;
import javax.swing.JTextField;
public class Frame2 extends JFrame
static Frame2 frame2;
public JButton BackButton;
public JTextField input;
public static Frame2 getInstance()
if(frame2==null)
frame2 = new Frame2();
return frame2;
public JButton getJButton(String mytext)
JButton button = new JButton();
button.setText(mytext);
button.setBounds(450,450,150,50);
return button;
public void addActionListener(Object obj)
try{
JButton BackButton1 = (JButton)obj;
BackButton.addActionListener(new ActionListener()
public void actionPerformed(ActionEvent ae)
input.setText("");
Frame1.getInstance().myGUI();
Frame1.getInstance().repaint();
dispose();
catch(Exception e2)
System.out.println("Exception==> "+e2.toString());
public void myGUI()
JPanel panel2 = new JPanel();
panel2.setLayout(null);
BackButton = getJButton("2nd Screen");
addActionListener(BackButton);
input = new JTextField(10);
input.setBounds(200,300,100,30);
panel2.add(input);
panel2.add(BackButton);
add(panel2);
setUndecorated(true);
setSize(1024, 768);
setVisible(true);
setDefaultCloseOperation(EXIT_ON_CLOSE);
In this application the status of TextField input remain same means it shows
the earlier input in the textfield wnen I come to earlier or next screen.
what is the solution to clear the TextField input while moving from 1st
scrren to 2nd screen.

multiple screens = multiple posts
well done indeed - just another farking cross-poster
[http://www.coderanch.com/t/492998/Swing-AWT-SWT-JFace/java/unable-clear-text-box-Multi#2218566]

Allowing clear-text logins for multiple users

I'm not sure if this is the correct section to place this question in, so Mods, please move if needed.
As many know, Apple changed the AFP Client defaults in 10.5.x so that clear-text logins to servers are disallowed by default. You can edit the afpcleartextallow option in ~/Library/Preferences/com.apple.AppleShareClient.plist to enable it on a per user basis.
What I wish to know is wether it's possible to allow clear-text logins on a global basis. I've looked at /Library/Preferences/com.apple.AppleShareClient.plist and it does not contain the afpcleartextallow option, and adding the option and setting it to "yes" (without editing the file in the user's preference folder) does not allow clear-text logins.
Is there some global preference file that this option could be added to that would preclude me from having to edit the preference file for every user? Part of the reason it's a problem is if you have multiple user accounts on multiple machines, or network based home folders stored on an AFP server that only supports clear text, for example, a Netware 6.5 server running NFA for Mac.
One problem I've seen is that until the user is actually at the desktop (well I think it's specifically when the Finder loads and reads the per-user preferences) the OS will prevent clear-text logins, regardless of the setting in the pref file, thus you cannot automatically mount volumes at login if the server only supports clear-text.
Any suggestions or advice greatly welcomed.

If you are familiar with the exchange man shell, use the new-mailboxsearch powershell cmdlet in your code. You can pass it a list of -SourceMailboxes(use get-content to pass your .txt to a variable, you'll want to place each name on a new line) to
search on/set the in place hold.. Here is the technet material on new-mailboxsearch.
http://technet.microsoft.com/en-us/library/dd298064(v=exchg.150).aspx

Remove password in clear text warning.

After I bound my Lion Server to an AD account and set it up for Profile Manager (http://support.apple.com/kb/HT4837) I have a warning message when i login saying that my password will be sent in clear text. I want to get rid of this message. I have SSL enabled and the login page is HTTPS. Any ideas how to fix this?

Balendran,
          Sorry for the confusion. The issue was not that passwords were in clear text inside the wli-ra.xml. The problem was that the password was displayed in clear text on one of the configuration windows of WLI.
          For example, the DBMS adapter (the sample adapter shipped with WLI) has a property called "Password" in the wli-ra.xml:
          <?xml version="1.0" encoding="UTF-8"?>
          <connector>
          <resourceadapter>
          <config-property>
          <config-property-name>Password</config-property-name>
          <config-property-type>java.lang.String</config-property-type>
          <config-property-value></config-property-value>
          </config-property>
          </resourceadapter>
          </connector>
          When you try to configure Event Connection, one of the pages that come up is called "Configure Event Delivery Parameters", and on which it listed all the properties in the above wli-ra.xml for you to fill in values. As you type in the values for the Password property (as for all other properties), the value is displayed as clear text on the screen. That's the issue I am trying to solve. Any suggestions?
          Thanks.
          Yongtao

Can I set up multiple instances on iPlanet on one server, one to handle clear-text traffic, and one to handle SSL traffic?

Long story, but the iPlanet version is 4.1 SP9. We will be filtering users coming in remotely (via internet VPN or dialup) to the SSL implementation, the internal intranet users to the clear-text implementation... thanks!

Hi,
you can run more then one instance in iWS.
like one for http://www.test.com:80(for TEXT) and other for https://www.test.com:6000
(Note: you couldn't not able to use same port for different instance). I hope this may answer your question.
Thanks,
Daks.

Forced to use Clear Text Passwords for OD binding

Running a Tiger Server 10.4.11 as OD master with one Replica. When binding clients to server in Directory Access/LDAPv3, If I "disable Clear Text Passwords," the users can not login. Uncheck this option, everything works fine. Non "Clear Text" passwords used to work, stopped about two weeks ago. If I bind to the Replica, I can disable clear text. Not sure where to look to see what broke.

Did your SSL cert expire ?
Any 10.5 clients ? If so, see
http://www.afp548.com/article.php?story=20071203011158936

Report Builder SQL Queries - Convert CN to clear text

I am trying to customize a query in Report Builder to message values as they are delivered, and running into value expression errors.
My query returns data from the AD Computer Object "managedBy" field. The problem is that this field returns data in the format of:
CN=Security Group Name,OU=blah,OU=blah,DC=stuff,DC=com etc
I am trying to get it to return just the "Security Group" value which is much more useful. I found this great article which almost works for me: https://social.technet.microsoft.com/forums/systemcenter/en-US/6610d238-72f2-4e75-a0cc-e1383dd8e94b/ad-system-discovery-convert-cn-to-clear-text
However, once I try to save the report in Report Builder I get:
System.Web.Services.Protocols.SoapException: The Value expression for the text box ‘managedBy0’ refers to the field ‘managedBy0’. Report item expressions can only refer to fields within the current dataset scope or, if inside an aggregate, the specified
dataset scope. Letters in the names of fields must use the correct case.
This is the original SQL query:
select all SMS_R_System.Name0,SMS_R_System.managedBy0,SMS_R_System.description0,SMS_G_System_OPERATING_SYSTEM.Caption00,SMS_R_System.Resource_Domain_OR_Workgr0,SMS_R_System.whenCreated0,SMS_R_System.Last_Logon_Timestamp0 from vSMS_R_System AS SMS_R_System
INNER JOIN Operating_System_DATA AS SMS_G_System_OPERATING_SYSTEM ON SMS_G_System_OPERATING_SYSTEM.MachineID = SMS_R_System.ItemKey INNER JOIN _RES_COLL_CAS000A9 AS SMS_CM_RES_COLL_CAS000A9 ON SMS_CM_RES_COLL_CAS000A9.MachineID = SMS_R_System.ItemKey
My edited query:
select all SMS_R_System.Name0,REPLACE(SUBSTRING(SMS_R_System.managedBy0,4,CHARINDEX(',OU',SMS_R_System.managedBy0,3)-4),'\,',','),SMS_R_System.description0,SMS_G_System_OPERATING_SYSTEM.Caption00,SMS_R_System.Resource_Domain_OR_Workgr0,SMS_R_System.whenCreated0,SMS_R_System.Last_Logon_Timestamp0
from vSMS_R_System AS SMS_R_System INNER JOIN Operating_System_DATA AS SMS_G_System_OPERATING_SYSTEM ON SMS_G_System_OPERATING_SYSTEM.MachineID = SMS_R_System.ItemKey INNER JOIN _RES_COLL_CAS000A9 AS SMS_CM_RES_COLL_CAS000A9 ON SMS_CM_RES_COLL_CAS000A9.MachineID
= SMS_R_System.ItemKey
Thoughts?

Hey,
Since you manipulate the original value of
ManagedBy0 in your SELECT, the column name will change to
(No column name). I did a test on my side and look what I get.
Error : "The Value expression for the text box ‘managedBy0’ refers to the field ‘managedBy0’."
He search for a variable
ManagedBy0 in your query but don't find any because there's no name assigned.
Try to run this query. Add
AS ManagedBy0 after your REPLACE.
select all
SMS_R_System.Name0,
REPLACE(SUBSTRING(SMS_R_System.managedBy0,4,CHARINDEX(',OU',SMS_R_System.managedBy0,3)-4),'\,',',') AS ManagedBy0,
SMS_R_System.description0,
SMS_G_System_OPERATING_SYSTEM.Caption00,
SMS_R_System.Resource_Domain_OR_Workgr0,
SMS_R_System.whenCreated0,
SMS_R_System.Last_Logon_Timestamp0 from vSMS_R_System AS SMS_R_System INNER JOIN Operating_System_DATA AS SMS_G_System_OPERATING_SYSTEM ON SMS_G_System_OPERATING_SYSTEM.MachineID = SMS_R_System.ItemKey INNER JOIN _RES_COLL_CAS000A9 AS SMS_CM_RES_COLL_CAS000A9 ON SMS_CM_RES_COLL_CAS000A9.MachineID = SMS_R_System.ItemKey
Let me know.
Nick Pilon | Blog : System Center Dudes

Authentication - clear text/encrypted

Similar Messages

Maybe you are looking for