Polycom DMA 7000 Operation Manual page 41

Security Configuration
Polycom, Inc.
Table 3-5 Fields on the Security Configuration page (continued)
Field
Allow Linux console
access
Allow unencrypted
connections to the
enterprise directory
Allow unencrypted
connections to MCUs
Description
Enables the Linux user root to log into the system using
SSH. This direct Linux access isn't needed for normal
operation, routine maintenance, or even
troubleshooting, all of which can be done through the
administrative GUI.
In extreme circumstances, this option might enable
expert Polycom Global Services.personnel to more fully
understand the state of a troubled system or correct
problems. Enable this option only when asked to do so
by Polycom Global Services.
Normally, the Polycom DMA system connects to an
enterprise directory using SSL or TLS encryption. But if
the Active Directory server or servers (including domain
controllers if you import global groups) aren't configured
to support encryption, the Polycom DMA system can
only connect using an unencrypted protocol. This option
allows such connections if an encrypted connection
can't be established.
This configuration causes an extreme security flaw: the
unencrypted passwords of enterprise users are
transmitted over the network, where they can easily be
intercepted.
Use this option only for diagnostic purposes. By toggling
it, you can determine whether encryption is the cause of
a failure to connect to an enterprise directory or to load
group data. If so, the solution is to correctly configure
the relevant servers, not to allow ongoing use of
unencrypted connections.
Normally, the Polycom DMA system uses only HTTPS
for the conference control connection to RMX MCUs,
and therefore can't control an RMX MCU that accepts
only HTTP (the default). This option enables the system
to fall back to HTTP for RMX MCUs not configured for
HTTPS.
We recommend configuring your MCUs to accept
encrypted connections rather than enabling this option.
When unencrypted connections are used, the RMX
login name and password are sent unencrypted over
the network.
System Security
33