Re: [Arsperl-users] Password encryption in API

[Bowman, B. A <Bow...@st...>]

Thank you for the info.  Also we just did a sniff on this and found that =
the username was passed in the clear, but not the passsword.

Thanks,

-----Original Message-----
From: ars...@ar...
[mailto:ars...@ar...]On Behalf Of Carey Matthew
Black
Sent: Thursday, July 06, 2006 3:04 PM
To: ARSperl User Discussion
Subject: Re: [Arsperl-users] Password encryption in API


Brent,

Your answers depends on a few things.

Is your ARSPerl compiled using the encryption extensions? (AKA: Remedy
API version high enough to have the encryption built in to it or not.
I think that was ARS v5 API's.)

It also depends on your ARS server config. (again at or after v5) You
could have it set to force encryption, allow encryption, or not allow
it too.


However.....
   ARS Passwords have ALWAYS (as far as I know) been encoded on the
wire. (not encrypted, but scrambled in a way that makes it not obvious
what the actual password is.)

HTH.

--=20
Carey Matthew Black
Remedy Skilled Professional (RSP)
ARS =3D Action Request System(Remedy)

Solution =3D People + Process + Tools
Fast, Accurate, Cheap.... Pick two.
Never ascribe to malice, that which can be explained by incompetence.



On 7/6/06, Bowman, Brent A <Bow...@st...> wrote:
>
> Hello all,
>
> I have been asked a very interesting question about the login to =
through arsperl and hence through the API.
>
> If I am using arsperl on server A to log into the ARS on server B, is =
the password passed between servers in clear text or is it encrypted?
>
> Also, how does using the API act different from using just the Remedy =
client tool as far as the passing of the login credentials?
>
> Any insight on this would be very helpful.
>
> Thanks,
>
> Brent
>
> Using Tomcat but need to do more? Need to support web services, =
security?
> Get stuff done quickly with pre-integrated technology to make your job =
easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache =
Geronimo
> =
http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D120709&bid=3D263057&dat=3D=
121642
> _______________________________________________
> Arsperl-users mailing list
> Ars...@ar...
> https://lists.sourceforge.net/lists/listinfo/arsperl-users

Using Tomcat but need to do more? Need to support web services, =
security?
Get stuff done quickly with pre-integrated technology to make your job =
easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache =
Geronimo
http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D120709&bid=3D263057&dat=3D=
121642
_______________________________________________
Arsperl-users mailing list
Ars...@ar...
https://lists.sourceforge.net/lists/listinfo/arsperl-users