Networker

Re: [Networker] More NMC questions

2009-10-23 20:43:16
Subject: Re: [Networker] More NMC questions
From: John Terran <johnterran AT GMAIL DOT COM>
To: NETWORKER AT LISTSERV.TEMPLE DOT EDU
Date: Fri, 23 Oct 2009 17:36:24 -0700
Hi Tim,

I read your service request.
I think on 7.4x the password was not encrypted over the wire, but in 7.5, I
think they made some improvements in this area.
I am pretty sure NMC encrypts the password between NMC client and NMC server
in 7.5.
NMC also encrypts the password field on the client resource too from NMC to
NetWorker server.
Probably anything to do with password
Didn't see the passwords with a sniffer.

As for http or https on the browser pointing to NMC server,
I don't think affects whether or not NMC sends data encrypted.
NMC is a webstart application, so the web server is only used help user
download NMC client jar files.
All the communication between NMC client and NMC server (gstd process) use a
different socket connection.

John


On Thu, Oct 22, 2009 at 3:35 PM, Tim Mooney <Tim.Mooney AT ndsu DOT edu> wrote:

> In regard to: Re: [Networker] More NMC questions, John Terran said (at...:
>
>  I do believe NMC protects the passwords for NMC users
>>
>
> I was told by EMC support in April that it did not, and it was not
> possible to make it encrypt that information.  If you're interested,
> the service request # was 29264116
>
>
> Tim
> --
> Tim Mooney                                             Tim.Mooney AT ndsu DOT 
> edu
> Enterprise Computing & Infrastructure                  701-231-1076 (Voice)
> Room 242-J6, IACC Building                             701-231-8541 (Fax)
> North Dakota State University, Fargo, ND 58105-5164
>
> To sign off this list, send email to listserv AT listserv.temple DOT edu and 
> type
> "signoff networker" in the body of the email. Please write to
> networker-request AT listserv.temple DOT edu if you have any problems with 
> this
> list. You can access the archives at
> http://listserv.temple.edu/archives/networker.html or
> via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER
>

To sign off this list, send email to listserv AT listserv.temple DOT edu and 
type "signoff networker" in the body of the email. Please write to 
networker-request AT listserv.temple DOT edu if you have any problems with this 
list. You can access the archives at 
http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER