178
D14049.07
March 2010
Grey Headline
(continued)
TANDBERG
VIDEO COMMUNICATION SERVER
ADMINISTRATOR GUIDE
Introduction
Overview and
status
System
configuration
VCS
configuration
Zones and
neighbors
Clustering and
peers
Call
processing
Bandwidth
control
Firewall
traversal
Appendices
Applications
Maintenance
Password encryption
All passwords configured on the VCS are stored in encrypted form. This applies to the following,
which all have usernames and passwords associated with them:
•
the default admin administrator account
•
any additional administrator accounts
•
local authentication database credentials (a list of valid usernames and passwords that are
used when other devices are required to authenticate with the VCS)
•
outbound connection credentials (used by the VCS when required to authenticate with another
system)
•
LDAP server (used by the VCS when binding to an LDAP server)
Passwords can be configured using either the CLI or the web interface.
Web interface
When entering or viewing passwords using the web interface, you will see placeholder characters
(e.g. dots or stars, depending on your browser) instead of the characters you are typing.
Command line interface (CLI)
When entering passwords using the command line interface (CLI), you will type the password in
plain text. However, after the command has been executed, the password will be displayed in its
encrypted form with a
{cipher}
prefix, e.g.
xConfiguration LDAP Password: "{cipher}xcy6k+4NgB025vYEgoEXXw=="
FindMe is a standalone application that can be hosted by the VCS or by another remote
server. This means that FindMe user account information is not configured or accessible
using the CLI of the VCS. However, FindMe user passwords are still stored securely.
Overview
Maximum length of passwords
When a password is encrypted, it uses more characters than the original plain text version of the
password. For each type of password, the maximum number of plain text characters that can be
entered and the maximum number of encrypted characters that are displayed through the CLI are
shown in the table below.
Password type
Maximum plain text
characters
Maximum displayed
encrypted characters
Admin account
16
65
Administrator accounts
16
65
Local Database authentication credentials
128
215
Outbound connection credentials
128
215
LDAP server
60
122
FindMe accounts
30
82