Howdy,

Disabling the password encryption service is not enough...  You do have to turn
it off by issueing 'no service password-encryption,' but that will not unencrypt
passwords that were saved to the configuration while the service was running.

Password encryption utilizes the "hash" function, which is a one-way street.
There is no "unhash" function.  This has been desrcibed on this list before, and
to really get into it, you need to be a math freak/encryption guy(gal).  If they
wish to elaborate, I welcome them to it.  For you and I, hash is one-way.

After disabling password-encryption, in order to get your passwords back into
clear text in the configuration, you need to re-enter the password commands
while in config mode.  This will replace the garbled passwords with clear text.

Hope this helps,

Alan

----- Original Message -----
From: "Stuart Laubstein" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, March 06, 2001 7:51 AM
Subject: AW: Dialer profile--password encryption


> I am using no service password encryption. It is just for my boss so that he
> can see what the ppp passwords are when I print the log of a show run for
> him. I do not want the passwords sent in clear text I just want them in
> clear text in the config. In my example below He would like to see
>
> ppp chap password 0 big_boss  and not ppp chap password 7 dsadkf4958kjsdk
> etc...
>
> sorry if I wasnt clear the first time around.
>
> stuart
>
>
>
> -----Urspr�ngliche Nachricht-----
> Von: Jason Swenson [mailto:[EMAIL PROTECTED]]
> Gesendet am: Tuesday, March 06, 2001 1:42 PM
> An: Stuart Laubstein
> Betreff: Re: Dialer profile--password encryption
>
> Stuart if I understand your question correctly you a probably using service
> password-encryption which will encryption some passwords.  I use radius for
> authenication.  Give me some more detail.
>
> Jason
>
> At 12:42 PM 3/6/01 +0100, you wrote:
> >I have a 3620 in which my boss wants to be able to see the passwords in
> >clear text both after the usename and in the dialer profile. I know that
> >with the username command it will show it but I cannot get it to be clear
> >text in the dialer profile. Any help much appreciated--example below
> >
> >thanks
> >
> >stuart
> >
> >
> >
> >Example
> >
> >
> >no service encryption password
> >
> >username boss password big_boss
> >...
> >...
> >
> >interface dialer 1
> >..
> >..
> >..
> >ppp chap password 7 05g7385496fdjdks
> >
> >
> >
> >_________________________________
> >FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
> _________________________________
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to