Authentication; User Permissions For Ftp Backup/Restore Files - Avaya 4600 Series Administrator's Manual

Server Administration
For FTP, when the Automatic Backup option on a 4610SW, 4620/4620SW, 4621SW, 4622SW,
or 4625SW IP Telephone is set to Yes and FTPSRVR is specified, the FTPSTOR command
attempts to save all Speed Dial contents, all system options, and non-password parameters to
the FTP server specified by FTPSRVR. The system parameter FTPUSERSTAT determines If
the user can specify the backup path, as described in
Restore Files.
For HTTP, when the Automatic Backup option on a 4610SW, 4620/4620SW, 4621SW, 4622SW,
or 4625SW IP Telephone is set to Yes and BRURI is specified, the HTTPPUT command
attempts to save all Speed Dial contents, all system options, and non-password parameters to
the HTTP server specified by BRURI. For both backup and restore, the URI is constructed from
the value of BRURI and the filename. When the telephone stores or retrieves data with HTTP/
HTTPS (as indicated by BRURI administration), the only permission relevant to backing up or
restoring date is the value of RESTORESTAT. This is because HTTP/HTTPS is invoked when
BRURI is non-null, and if the HTTP/HTTPS operation fails, FTP is not tried.

Authentication

If TLS is used the telephone's call server registration password can be included in an
Authorization request-header in each transmitted GET and PUT method. This is intended for
use by the Avaya IP Telephone File Server Application (available for download on the Avaya
support Web site
transaction can be authenticated.
If no digital certificates have been downloaded based on the system parameter TRUSTCERTS,
the telephone establishes a TLS connection only to a backup/restore file server that has a
Avaya-signed certificate (which is included by default with the Avaya IP Telephone File Server
Application), and the credentials are always included. However, if at least one digital certificate
has been downloaded based on TRUSTCERTS, the credentials are included only if BRAUTH is
set to "1". This is a security feature to allow control over whether the credentials are sent to
servers with third-party certificates. If a non-Avaya certificate is used by the server on which the
Avaya IP Telephone File Server Application is installed, set BRAUTH to "1" to enable
authentication of the telephones. The default value of BRAUTH is "0".
When the call server IP address and the telephone's registration password are included as the
credentials in an Authorization request-header, the call server IP address is included first in
dotted-decimal format, followed by a colon (hex 3A), followed by the telephone's registration
password.

User Permissions for FTP Backup/Restore Files

When the system value FTPUSERSTAT is "0", the end user cannot specify alternative FTP
servers or FTP directory paths. The user can only use the server and path data previously
administered via DHCP or in a settings file by FTPSRVR. When FTPUSERSTAT is "1", the end
128 4600 Series IP Telephone LAN Administrator Guide
http://www.avaya.com/support)
User Permissions for FTP Backup/
so that the telephone requesting the file