In regard to: Re: [Networker] More NMC questions, John Terran said (at...:
Hi Tim,
I read your service request.
Thanks for taking a look at it John!
I think on 7.4x the password was not encrypted over the wire, but in 7.5, I
think they made some improvements in this area.
That would be a step in the right direction, so I hope that's true. I'm
guessing an improvement like that would be documented in the release
notes, so I'll take a swing through the notes for 7.5.x.
I am pretty sure NMC encrypts the password between NMC client and NMC server
in 7.5.
NMC also encrypts the password field on the client resource too from NMC to
NetWorker server.
Probably anything to do with password
Didn't see the passwords with a sniffer.
As for http or https on the browser pointing to NMC server,
I don't think affects whether or not NMC sends data encrypted.
NMC is a webstart application, so the web server is only used help user
download NMC client jar files.
All the communication between NMC client and NMC server (gstd process) use a
different socket connection.
Understood, and I tried to make that point in the ticket I filed, though
I don't think I did a very good job. It's not the initial URL connection
I'm concerned about, it's the actual communication between the client and
the NMC server that I was concerned about.
Thanks for taking a look at the ticket.
Tim
On Thu, Oct 22, 2009 at 3:35 PM, Tim Mooney <Tim.Mooney AT ndsu DOT edu> wrote:
In regard to: Re: [Networker] More NMC questions, John Terran said (at...:
I do believe NMC protects the passwords for NMC users
I was told by EMC support in April that it did not, and it was not
possible to make it encrypt that information. If you're interested,
the service request # was 29264116
Tim
--
Tim Mooney Tim.Mooney AT ndsu DOT
edu
Enterprise Computing & Infrastructure 701-231-1076 (Voice)
Room 242-J6, IACC Building 701-231-8541 (Fax)
North Dakota State University, Fargo, ND 58105-5164
To sign off this list, send email to listserv AT listserv.temple DOT edu and
type
"signoff networker" in the body of the email. Please write to
networker-request AT listserv.temple DOT edu if you have any problems with this
list. You can access the archives at
http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER
To sign off this list, send email to listserv AT listserv.temple DOT edu and type
"signoff networker" in the body of the email. Please write to networker-request
AT listserv.temple DOT edu if you have any problems with this list. You can access the
archives at http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER
--
Tim Mooney Tim.Mooney AT ndsu DOT
edu
Enterprise Computing & Infrastructure 701-231-1076 (Voice)
Room 242-J6, IACC Building 701-231-8541 (Fax)
North Dakota State University, Fargo, ND 58105-5164
To sign off this list, send email to listserv AT listserv.temple DOT edu and type
"signoff networker" in the body of the email. Please write to networker-request
AT listserv.temple DOT edu if you have any problems with this list. You can access the
archives at http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER
| 