[Fwd: (ASCEND) Pipeline Configurator Caution]

[Mark Hilbush <markh@clark.net>]

Mark Hilbush wrote:
> Clifford Donley wrote:
> > Earlier today I used the configurator to backup my Pipe 75. After it
> > was
> > done, I went back and looked at the file that was created. Every
> > password
> > was saved in clear text. Not nice. The Pipe is one of the new ones
> > that
> > uses 5.0b; the configurator is v5.0a.
> 
> I recall reading somewhere in the documentation (the addendum I think)
> that passwords are stored in the clear and that you should copy the
> file to a "safe" place after you save the config.  Hmmm.

Oops.  Facts were right, reference was wrong.  Sorry, it was a very late
night last night -- being a UPS "management" person, the graveyard shift
has taken on an entirely new meaning to me (no flames about missing
packages please, I got my P75 via FedEx).  It wasn't in the Addendum at
all.  It was in SECTION 1.2 - SAVING CONFIG BEFORE PROCEEDING WITH
UPGRADE of the Pipeline/MAX Software Upgrade Instructions on the Ascend
ftp server
ftp://ftp.ascend.com/pub/Software-Releases/Pipeline/SW-Upgrade-Pipeline. 
In describing tsave, it says that the saved config file has all
passwords and should be moved from the tftp directory into a secure
location.  Since the Configurator uses tsave, it would share this, ehh,
feature.

-- 
Mark Hilbush

Everything should be made as simple as possible, but not simpler.
        -- Albert Einstein
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>

---

• Prev by Date: (ASCEND) Linux, Ascend & ISDN
• Next by Date: Re: (ASCEND) Pipeline 75: single address NAT in version 5.0B?
• Prev by thread: (ASCEND) Re: pipel130 for remote pop
• Next by thread: (ASCEND) Linux, Ascend & ISDN
• Index(es):
  • Main
  • Thread