THOMSON SpeedTouch 610 Operation And Maintenance Manual page 15

Advanced system
password Options
E-SIT-CTC-20030324-0002 v1.0
The SpeedTouch™610 allows two optional settings for the system password via the
system config CLI command:
=>system help config
Sets or changes system config parameters
Syntax : config [upnp = <{disabled|enabled}>] [mdap =
<{disabled|enabled}>]
[drst = <{disabled|enabled}>]
[digestauth = <{disabled|enabled}>]
[strictusername = <{disabled|enabled}>]
[dcache = <{disabled|enabled}>]
Parameters :
[upnp = <{disabled|enabled}>]
Enable / disable upnp discovery
[mdap = <{disabled|enabled}>]
Enable / disable mdap discovery
[drst = <{disabled|enabled}>]
Enable / disable DRST access
[digestauth = <{disabled|enabled}>]
Enable / disable HTTP digest authentication
[strictusername = <{disabled|enabled}>]
Enable / disable strict username check
[dcache = <{disabled|enabled}>]
Enable / disable data cache
=>
Following system password options are configurable via this command:
•
[digestauth] = <{disabled|enabled}>
To enable or disable HTTP digest authentication.
By default HTTP digest authentication is disabled (like on most authentication
servers), meaning that credentials provided by the user are sent in cleartext.
With HTTP digest authentication the credentials provided by the user are
encrypted along with a certain random value generated for the nonce by the
SpeedTouch™610 and send back to the SpeedTouch™610. The Speed-
Touch™610 creates its own encrypted credentials using the configured creden-
tials using the same random value and matches them against the encrypted value
received from the user. This way the traversal of unencrypted credentials is
avoided.
Be aware that not all third party applications support HTTP digest
Note
authentication. Therefore it is recommended to keep the default
setting.
•
[strictusername] = <{disabled|enabled}>
To enable or disable strict user name check.
By default the SpeedTouch™610 will ignore the user name, if provided during
authentication. In case strictusername=enabled a user name should be
provided during system password configuration. For each subsequent authentica-
tion this user name must be provided next to the system password.
2 The SpeedTouch™610 System Password
13