Skip to main content link. Accesskey S Skip to tab navigation link. Accesskey 1 Skip to sub navigation. Accesskey 2
  • Browse Blogs
  • My Blog
  • My Updates

+Tags Get help with tags?

  • View as cloud  | list

+ Similar Entries

photo

Domino LDAP

Blog:  Urs Meli
Urs Meli
Updated 
No RatingsRatings 0     CommentsComments 1
photo

Cloud Computing........

Blog:  Gmail In New ...
Charles A Reid
Updated 
No RatingsRatings 0     No CommentsComments 0
photo

Security,,,, don't w...

Blog:  Gmail In New ...
Charles A Reid
Updated 
No RatingsRatings 0     CommentsComments 1
photo

New Year, New Rules ...

Blog:  'Tuner Blog
Scott O'Keefe
Updated 
No RatingsRatings 0     CommentsComments 2
photo

Lotusphere 2010 « L...

Blog:  Henning Schmi...
Henning Schmidt
Updated 
No RatingsRatings 0     No CommentsComments 0

+ Bookmarks

+ Archive

+ Blog Authors  

Patrick Picard

QuickR - Meeting integration - Can the password in qpconfig.xml be encrypted?

Patrick Picard |   | Tags:  quickr sametime security | Comments (1)  |  Visits (404)
As I am integrating Sametime and QuickR together, the installation manual requested me to create a user specifically for meeting integration.

Here are the steps from the Installation Guide:

image
<wbr>Lotus Quickr: Services for Lotus Domino
  • Update the qpconfig.xml section related to sametime

 Why a password in clear text?

   <sametime ldap="false">

      <members_online>

         <expand_external_groups enabled="true" max_depth="5"/>

      </members_online>

      <meetings invite_servers="false">

         <tools>

            <audio enabled="true"/>

            <video enabled="true"/>

         </tools>

         <credentials>

            <dn>cn=ST Integration/o=CTCDEV</dn>

            <password>xxxxxxxx</password>   //Passwords in clear text are the evil! Especially when the user has elevated credentials

         </credentials>

      </meetings>

      <token type='ltpa'/>

   </sametime>


<wbr>Lotus Quickr: Services for Lotus Domino
 No RatingsRatings 0

Comments (1)

photo
1 Patrick Picard commented   Permalink No RatingsRatings 0

I'm really starting to get a sour taste of quickr, sounds lots of things are not well thought through!

Response from IBM:
Unfortunately, this is a limitation of the product. This technote discusses the limitation further:

Title: Quickr Security Issue With Configuration of Sametime Meeting Integration
Doc #: 1109272
URL: http://www.ibm.com/support/docview.wss?rs=899&uid=swg21109272

An enhancement request to remove this limitation was submitted in Software Problem Report #KABS7MDJQP. I have created a customer report documenting your experience of the issue and I have attached it to that SPR.

Add a Comment Add a Comment

Previous |  Main  | Next
Feed for Blog Entries | Feed for Blog Comments | Feed for Comments for this Entry
Skip to main content link. Accesskey S
IBM Lotus Connections Help Tools About