Cleartext password for proxy authentication in logfile production.log

Hello Spiceworks-Support-Team,while troubleshooting some web proxy related issue with our Spiceworks installation, I found out that the credentials for the proxy authentication is shown in cleartext in the logfile "production.log". Should it be like that? I think this is a unwanted"credential exposure".See below the extract from the logfile with replacedcredentials (OurDomain\mydomainuser:cleartext_password_test).From the file "production.log", while Spiceworks is starting...
I[10:06:51.45 c9a360] Initializing nmap
I[10:06:52.80 c9a360] refresh proxy env settings: https://OurDomain\mydomainuser:[email protected]:8080
I[10:06:53.91 c9a360] Didn't instantiate push notification service 407 "Proxy Authentication Required"
I[10:06:54.16 c9a360] Remote Collector info for 0 collectors:
From the file "production.log", while...
This topic first appeared in the Spiceworks Community

Hmmmm... would appear that you need to be actually logged in to enable the additional menu features.
Have you tried deletting the plists for MAS?
This page might help you out...
http://www.macobserver.com/tmo/answers/how_to_identify_and_fix_problems_with_the _mac_app_store
Failing that, I will have to throw this back to the forum to see if anyone else can advise further.
Let me know how you get on?
Thanks.

Similar Messages

My app store is not working after installing mavericks. When I open app store it repeatedly asking me to login with apple ID and to provide User name and Password for proxy authentication in a loop.I am a newbie to mac,Please help me.

My app store is not working after installing mavericks. When I open app store it repeatedly asking me to login with apple ID and to provide User name and Password for proxy authentication in a loop.I am a newbie to mac,Please help me.

Hmmmm... would appear that you need to be actually logged in to enable the additional menu features.
Have you tried deletting the plists for MAS?
This page might help you out...
http://www.macobserver.com/tmo/answers/how_to_identify_and_fix_problems_with_the _mac_app_store
Failing that, I will have to throw this back to the forum to see if anyone else can advise further.
Let me know how you get on?
Thanks.

HT1386 How do I create one Apple ID and iTunes user name and password for all of my Apple products: iPad, iPhone, and iPod plus iTunes on my PC?

How do I create one Apple ID and iTunes user name and password for all of my Apple products: iPad, iPhone, and iPod plus iTunes on my PC?

Yes, I do have multiple devices and it appeared to me that every time I tried to sync or log onto iTunes, the password was incorrect. Consequently, I was and am constantly changing it. Wouldn't it be nice if Apple would simply say that you only need one Apple ID and one password regardless of the number of Apple devices you intend to sync via iTunes.
Barring the above, how about a way to merge all of the Apple IDs and passwords into one.

"Deactivate password" for standard authentication

Hi Guys,
I'm trying to get more information about the "Deactivate password" option on SU01, but the only information I get says that it can be done when we are using an external authentication method like X.509.
So, my question is :
If I have an ABAP instance using standard authentication method (without an external authentication method), is it a good practice to lock users and deactivate their passowrd to increase the security? Does it make sense?
Thanks in advance,
Itamar

Thank you Tim, for your prompt answer.
With your comments I think it is a good practice to deactivate the password for locked users which will not have to access the system again.
Regards,
Itamar
Edited by: Itamar S Marioto on Aug 9, 2011 7:42 PM

Installation is requesting for Proxy Authentication. Why?

We have been trying to install Adobe CC for our teaching pools but every time it is requesting to enter proxy authentication. We are installing it over a wireless network that is free of proxy issues. Why is this happening? I tried looking for some numbers to call for support but there are none. Please help. We cannot proceed with our classes with this problem.

Creative Cloud chat support (all Creative Cloud customer service issues)
http://helpx.adobe.com/x-productkb/global/service-ccm.html

Multiple popups for username/password for basic authentication.

Safari 4.0.5 (5531.22.7) gives multiple popups for username/password while requesting a page which has more than one 'secure' items in it (basic auth). We expected that Safari to reuse the credentials entered the first time around and pass it on for subsequent requests. (Although RFC 2617 specifies that the credentials 'may' be reused, not really sure what Safari is doing here, though this seems to be the behavior on other popular browsers).
There's another discussion that listed this problem but that too seems to be unresolved yet (http://discussions.apple.com/message.jspa?messageID=2074214).

HI and welcome to Apple Discussions...
If you have tried the suggestions at that link but nothing worked, update Safari.
Apple Menu / Software Updates.
Repair disk permissions after the updates are installed.
Carolyn

IPhone requesting password for an account I'm already logged in to

Hello,
My Apple ID has several email addresses connected to it and one of them (it seems) used to be an OLD Apple ID that I deleted.
I've just turned on my new 5S and I'm attempting to restore from iCloud backup. I've successfully entered the pasword for my iCloud account, but now the phone is asking for the password associated with the OLD Apple ID (which I must have used to buy one or more apps that are installed on my phone, but which no longer exists and whose email address is now attached the ID I'm already signed in to). I know. What a mess.
I seem to remember this happening when I upgraded to 4S, but I can't remember how I resolved it.
Can anyone help, please?
Thank you.

Hello KyeLani,
A common, and simple, solution is to try your current Apple ID's password. The following article contains further information and troubleshooting steps that can help resolve this.
iOS 7: If you're asked for the password to your previous Apple ID when signing out of iCloud
http://support.apple.com/kb/TS5223
Cheers,
Allen

HT2623 I forgot the password for my .mac account and cannot log into it from Apple Mail. I have an iCloud mail account but did not convert my .mac account to iCloud. How can I log into my .mac or .me email?

I set up .mac, including email, around 2006. I believe my .mac account became a .me account, but I continued to receive email sent to .mac until about March 2013.
I accessed my .mac account using Apple Mail on an iMac running OS X 4.11. I'm still using that machine.
In July 2013, I upgraded my MacBook Pro to OS X 8.5, bought an iPod Touch and set up an iCloud account.
I forgot my .mac password and I want to open an email message sent to my .mac email account.
When I attempt to log into my .mac account using Apple Mail, my password attempts are rejected by a .me mail server.
Is there any way I can restore my access to my .mac or .me email?
Thanks,
William Postman

Welcome to the Apple Community.
Try...
iForgot.com

Use of active directory userid/password authentication instead of SAP R/3 User/Password for digital signature?

Dear all,
I am looking to setup the use of active directory userid/password authentication instead of SAP R/3 User/Password for digital signature. We SSO to the backened ABAP AS via an SAP NW Portal to which SPNEgo kerberos authentication is setup. Today we specify R3 user id/password to digitally approvae a lot release. The idea is to have users maintain one AD password and don't have to remember the R/3 password anymore and also our Security team to avoid password maintenance.
I know there are 3 options for digital signature and
System signature with authorization by user ID and password (We use this currently)
Digital User signature with verification - (We would like to use this with AD userid/password, so the system still ask the users their AD userid/password for the authentication when they try to "sign" a document.)
User signature without verification
Do you think there is a way to configure the system in order to ask and check the active directory userid/password instead of SAP R/3 password? Where can I found documentation about it ?
I have several different versions of AS ABAP starting from NW 7.02 to NW 7.31.
My active directory is based on Windows 2008.
Thanks in advance!!
Dhee

Actually enabling Kerberos for SSO purposes and enabling Kerberos for digital signatures are two different topics although the latter is because of the former. I'm interested in the topic as well and I'm currently looking at different options. SAP provides a BAdI for the digital signature API which can be used for external authentication but they do not provide the solution to invoke Kerberos authentication based on username and password. SAP provides a semi solution with NWSSO 2.0 SP2 which works only on Windows with classic dynpros meaning SAP GUI for Windows is assumed. The solution is based on an ActiveX component which does the actual Kerberos authentication using the Secure Login Client which is part of the NWSSO suite. Extending that implementation to non-Windows and non-GUI applications would require some sort of web enabled service that could be used to authenticate the user with username and password. In case authentication is successful, a Kerberos token would be returned to SAP which would then be validated. All the required pieces are there since SAP has Kerberos support now in both stacks of the NetWeaver Application Server, some bits are still missing though which leaves customers looking at 3rd party or custom solutions.

Office 2013 Keeps Prompting Proxy Authentication

I am using Microsoft Office 2013 behind company proxy. Each time I launch an office application it will keep on prompting me for proxy authentication on the following domains.
this computer is in domain and I am login with domain username and password.
dilip patel

It's actually easy... go to your browser, for me it was Internet Explorer...go to Settings>>Internet
options>>Connections>>LAN settings>>Advanced. Post the following in the space provided below where it says Do
not use proxy...:
officeimg.vo.msecnd.net;
office.microsoft.com;
odc.officeapps.live.com
use a proper separator i.e. ; or , according to your browser needs.
this solution is taken from
https://superuser.com/questions/712226/how-to-get-rid-of-prompts-for-credentials-connecting-to-proxy-server-officeimg-v/809386#809386?newreg=e7e8c1c66efe4f8ea7790ae18c032fd0

Proxy Authentication Support

All,
Just figured I'd share this workaround.
We've been trying to use 10.1.0.4's proxy authentication functionality with our ISA Proxy servers and it just doesn't work with ISA servers due to well...Microsoft's inability to conform to industry standards... :-/
Anyway, Came up with create and stable workaround. We stood up a copy of this:
http://ntlmaps.sourceforge.net/
Which is basically a NTLM Authentication - Proxy Forwarder. Extremely simple Python based daemon.
Figured this might save you some trouble if you're company forces NTLM Proxy based auth to get to the net and you're wondering how to hook OEM up to Metalink.

Actually, there's quite a bit more to it than that.
proxyHost= IP address of the proxy server
proxyPort= port number of the proxy server
proxyUser= User name for proxy server authorization
proxyPwd= password for proxy server authorization
proxyRealm= proxy server realm
proxyPropsEncrypted= flag indicating whether proxyUser and proxyPwd are encrypted values.
However, when configuring for proxy auth by specifying the realm user and pwd for the authentication user, it doesn't work with an Microsoft ISA Proxy despite the fact that both the ISA Proxy is configured for basic auth support and httpclient.jar supports basic auth as well.
It has "issues" in the negotiation phase. The issue's being worked with Oracle Development. Hence, the reason for my original post. Those who run into the problem will appreciate finding a solution in the search engine. :)

Annoying Proxy authentication requests

In our lan we use Firefox (various versions, from 8 to 23, also 17 ESR releases) on windows computers (xp and 7 32 bit) . We require a http proxy authentication (squid) with username and password. We usually configure only Internet Options in windows control panel checking the flag on "use automatic configuration script" with an url like "http://proxy/proxy.pac". In this script we give a list of intranet sites (web applications) that don't require a proxy authentication on internet because are internal sites on our lan. So on firefox we use the option "Use system proxy settings". The issue is: during a session on those intranet sites the firefox dialog window for proxy authentication often appears annoying the operator who has to close it every time. We have tried to mitigate the problem disabling firefox automatic updates, add-ons updates, search engines updates, do not track requests, attack sites and web forgeries lists updates, telemetry, health and crash reports. It seems not to be enough to solve the problem.
Are there other settings to set in "about:config" page? workarounds? add-ons?
Thanks for your help in advance.
PS: sorry for my english, I'm still learning.

I have done some other tests and disabling all settings i mentioned above in the topic the issue is solved.
Bye

How to trigger and change password for AD user after form based login

Hello,
We are authenticating against Active Directory with Weblogic 10.3 using FORM based security. Everything is working. I need to now change a password for an authenticated user. For example, I have set a user to have their password expire on next logon from the AD side. The user logs in but somehow I need to trap some info from Active Directory (or an LDAP conversation) to figure out if I need to force the user to change password.
Do I need to start looking at custom code with LDAP Java SDK's or can I use a canned MBean from Weblogic Server.
I am looking at http://www.mozilla.org/directory/ for LDAP.
Can I set/reset an AD user's password with an MBean like the following link?
http://download.oracle.com/docs/cd/E13222_01/wls/docs92/javadocs/index.html?weblogic/management/security/authentication/UserPasswordEditorMBean.html
If anyone has any experience with this or can point me in the right direction let me know.
If anyone else is interested please add to the tread and I'll be sure to keep the found solution(s) updated here.
Thanks...........
JJ Everett

Hello JJ
Please see document ID 403484.1 in http://metalink.oracle.com. This may help to understand what you are aiming to do. Cheers
-- Nathan

HT5661 I have installed IOS7. My iphone wants a password for an old account which I had updated to a new account. I do not remember the old password. How can I change my userid on my iphone to my new user id?

I have installed iOS7 on my iphone. The phone for some reason has my old user id which I have forgotten the password for.
My other i products are all under my new user id.
How can I change my user id on my iphone 4s?

Change you account in
Settings >> Messages
Settings >> FaceTime
Settings >> iTunes & AppStore

Proxy Authentication while Installing Dreamweaver Widget Browser (Mac)

Hi,
I have created the Adobe CS6 Web and Design Premium package using AAMEE 3.0. I have chosen to exclude adobe air and help. Exception folders have Adobe AIR Installer , Adobe Dreamweaver Widget browser and Adobe Help. ExceptionInfo.txt provides the list of commands to install the exceptions. While running the commands from the text file, Adobe AIR and Adobe Help works fine but Dreamweaver widget prompts for proxy authentication inspite of -slient parameter.
I am using the below command from ExceptionInfo.txt to install Widget Browser
Adobe AIR Installer.app/Contents/MacOS/Adobe AIR Installer -silent -eulaAccepted -programMenu WidgetBrowser.air
Does this a common issue or do I need to change something in the command line?
Regards,
Karthikeyan M

Hi Karthikeyan
I haven't had the opportunity to confirm this with CS6 recently, but depending on the callback the air application makes, I have seen examples where using the -revocationCheck never command line flag could potentially make a difference. It would be interesting to see if it does under these specific circumstances with the widgetbrowser.
See http://blogs.adobe.com/simplicity/2011/08/disabling-air-certificate-revocation-checks-duri ng-silent-install.html and http://helpx.adobe.com/creative-suite/kb/creative-suite-deployment-proxy-log.html for some background.
Kind regards
Henk

Cleartext password for proxy authentication in logfile production.log

Similar Messages

Maybe you are looking for