TRIO 8800 - SIP Credentials written to override file

[Sean_Stanley66]

I recently setup some TRIO 8800s for use with Avaya and when logging the phones in via local phone UI or web UI, the credentials were written in plain text to the override folder on the provisioning server.

Is this expected?  Anyway to block the phone from writing the password in plain text?

I see "sec.encryption.upload.overrides" as an option, is that the only way to protect the password?

Software tested on:

5.4.4.7609

Thanks

Sean

[SteffenBaierUK]

Hi Sean

Can you post your <mac>.cfg and part of you cfg or steps how to reproduce?

Replied via a mobile device

[Sean_Stanley66]

Are you referring to the 000000000000.cfg?  I do not use specific <mac>.cfg files per phone...

I use the 000000000000.cfg and 2 config files created with custom properties.

The override file is shown below:

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<!-- Application SIP LeafDanube 5.4.3.2007 12-May-16 20:57 -->
<!-- Created 21-02-2017 15:02 -->
<!-- Base profile Generic -->
<WEB_CONFIG>
<OVERRIDES
video.codecPref.H261="7"
video.codecPref.H263="6"
video.codecPref.Xdata="5"
reg.1.displayName="Test Room"
reg.1.label="Byward Conference"
voIpProt.server.1.address="1.1.1.1"
voIpProt.server.1.port="5060"
reg.1.address="15555551234"
reg.1.auth.userId="15555551234"
reg.1.auth.password="15555551234"
/>
</WEB_CONFIG>

To recreate, you just need to login a line with an Avaya SIP user account on the TRIO phone via phone UI or web UI.

Then check the override file and the user, password, etc. will be displayed in plain text.  At least it is on my end.

Thanks

Sean