Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: the iab simplifies internet architecture!

  • From: Christopher L. Morrow
  • Date: Fri Nov 11 13:11:40 2005


>
>
>
>
> On Thu, 2005-11-10 at 20:37 -1000, Randy Bush wrote:
> > btw, for another great giggle (many thanks to brian candler
> > for reporting it)
> >
> >     From the documentation for Cisco's VPN client software for
> >     Linux:
> >     http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_user_guide_chapter09186a0080234617.html
> >
> >     "User profiles [which contain all your IPSEC parameters:
> >     pre-shared key, username and password] reside in the
> >     /etc/CiscoSystemsVPNClient/Profiles/ directory. Leave the
> >     permissions for the Profiles folder set at drwxrwxrwx.
> >     Each profile in the Profiles folder should have the
> >     follwoing permissions: -rw-rw-rw-."
>
> The password string is encrypted in the Profile, however, when you save
> it...

encrypted how? cyrpt? md5? cisco7? Some way proven to take 'very long' to
decrypt? is the passwd really necessary or is only the hash required? this
is just wholey irresponsible of any vendor, nevermind one that should
really know better :(




Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.