How can we help you today?
Start a new topic
Answered

$user_hash1 empty in FW 8.9.3.80

Dear support team,


We have an issue with the $user_hash1 variable in 8.9.3.80. Usually we use this value in combination with $user_pname1 to authenticate users to access a phonebook directory xml app on a Teles C5 platform.


We've now upgraded a few phones from 8.9.3.46 and 8.9.3.60 to 8.9.3.80 and as a first test result, these phones are not able to provide the hash parameter to the directory platform anymore.


The value is simply left empty.


What's the solution for this?


Kind regards,

Alex




Best Answer

Hi Alex,


The value of user_hash isn't anymore accessible/viewable on the settings page: the setting also isn't anymore accessible from the Action URL module. 


This change was needed due to security reasons. From a security point of view, having the user_hash accessible from the settings page is the same of publishing the SIP password on the settings page. The user_hash cannot provide any additional security value (is the same of the cleartext password).


I suggest that you use for example the user_pname or the user_name instead of the user_hash .

Thanks and best regards

Catalina

1 Comment

Answer

Hi Alex,


The value of user_hash isn't anymore accessible/viewable on the settings page: the setting also isn't anymore accessible from the Action URL module. 


This change was needed due to security reasons. From a security point of view, having the user_hash accessible from the settings page is the same of publishing the SIP password on the settings page. The user_hash cannot provide any additional security value (is the same of the cleartext password).


I suggest that you use for example the user_pname or the user_name instead of the user_hash .

Thanks and best regards

Catalina

Login or Signup to post a comment