How to retrieve digest credentials?

[andrysek1]

Please, is there any way how to get digest credentials of a specific end user?

The getUser  call looked very promising,  it returns digestCredentials  field, but it is always empty.  The same is true for password and pin fields.  If these fields can not be retrieved, why are they in the response at all?

Thank you very much for any hints.

Josef Andrysek

[andrysek1]

I already found answer on another thread: GetUserRes does not appear to return all information

I understand that the fields can not be returned by design, but can I at lest distinguish between "empty digest credentials" and "not empty digest credentials"?

[andrysek1]

I was able to answer also the second part.

SQL query

select * from enduser

gives me <passwordreverse>  field, which contains encrypted value of the digest credentials.  Is the encryption mechanism somewhere documented? I would like to check if my locally stored password is the same as the password in "digest credentials" on CUCM.

Thank you very much.

[Geevarghese Cheria]

Hi Josef,

The actual credential secrets (password/pin/digest p/w) are not returned  by design.  This follows security best practice for most authentication  data stores (e.g. LDAP.)

Reference - GetUserRes does not appear to return all information

Thanks and Regards,

Geevarghese