Prerequisites For Clear-Text Connections - Juniper JUNOS OS 10.3 - XML MANAGEMENT PROTOCOL GUIDE 6-30-2010 Manual

Copyright © 2010, Juniper Networks, Inc.
To store a password that you have previously created and hashed using Message
Digest 5 (MD5) or Secure Hash Algorithm 1 (SHA-1), issue the following command:
[edit system login user account-name authentication]
user@host# set encrypted-password "password"
Issue the command.
commit
3.
[edit system login user account-name authentication]
user@host# top
[edit]
user@host# commit
Repeat the preceding steps on each device where the client application establishes
4.
Junos XML protocol sessions.
Enable the client application to access the password and provide it when the Junos
5.
XML protocol server prompts for it. There are several possible methods, including
the following:
Code the application to prompt the user for a password at startup and to store
the password temporarily in a secure manner.
Store the password in encrypted form in a secure local-disk location or secured
database and code the application to access it.

Prerequisites for Clear-Text Connections

A client application that uses the Junos XML protocol-specific clear-text access protocol
sends unencrypted text directly over a TCP connection without using any additional
protocol (such as SSH, SSL, or Telnet).
NOTE: Devices running the Junos-FIPS software do not accept Junos XML protocol
clear-text connections. We recommend that you do not use the clear-text protocol in
a Common Criteria environment. For more information, see the Secure Configuration
Guide for Common Criteria and Junos-FIPS.
To enable client applications to use the clear-text protocol to connect to the Junos XML
protocol server, perform the following steps:
Verify that the application can access the TCP software. On most operating systems,
1.
TCP is accessible in the standard distribution. Do this on each computer where the
application runs.
Satisfy the prerequisites discussed in "Prerequisites for All Access Protocols" on
2.
page 27.
Configure the device running Junos OS to accept clear-text connections from client
3.
applications on port 3221 by including the
hierarchy level:
system services]
[edit]
user@host# set system services xnm-clear-text
Chapter 3: Controlling the Junos XML Management Protocol Session
xnm-clear-text statement at the [edit
29