Page 1 of 1

encryption of client login credentials

Posted: Tue Mar 06, 2007 1:09 pm
by katz
Hi,

I am asked by a colleague if the DataStage clients encrypt the login credentials when sent from the client to host. Does anyone know? (We are running client version 7.5.1.A.)

Thanks,
katz

Posted: Tue Mar 06, 2007 1:16 pm
by DSguru2B
Its a simple TCP/IP connection methodology as far as I know. A client server connection methodology. TCP/IP have their own mechnism for passwords. So the question balls down to "What method does TCP use?". I think its better if you search in google.

Posted: Tue Mar 06, 2007 1:26 pm
by katz
Hi DSguru2B,

Thanks. This was more or less my response (the encryption should be handled in another layer of the stack - in this case TCP/IP). Never-the-less, I am being asked to find out if the clients encrypt not only the password, but also the Server name, User Name, and Project.

I do not see this capability in any client documentation or readme file, so I thought maybe this question has arisen for someone else.

Thanks,
katz

Posted: Tue Mar 06, 2007 1:29 pm
by DSguru2B
If there is something extra then I am not aware of it. Maybe one of our elders can shed some more light on it. Else you can always call support.

Posted: Tue Mar 06, 2007 1:32 pm
by Ultramundane
Isn't that a function of the presentation layer in the OSI model or the application layer in the Internet model? I don't think this is a function of the transport or internetworking layers. I was under the impression that it should be handled by the two hosts in either the application or presentation layer.

Posted: Tue Mar 06, 2007 1:52 pm
by katz
Hi Ultra,

You are correct that encryption should be handled in the Presentaion Layer (one below the Application Layer) of the OSI model.

katz

Posted: Tue Mar 06, 2007 2:57 pm
by DSguru2B
...which is no different then any other application using the client server architecture.

Posted: Tue Mar 06, 2007 4:15 pm
by ray.wurlod
Has anyone thought to switch on Server Side Tracing to see what there is to see?
:idea:

Posted: Wed Mar 07, 2007 5:48 am
by katz
Hi,

IBM Support have replied that the password details are encrypted. That seems to have satisfied my questioner, for now.

Thanks, for your quick replies.

katz,

Posted: Wed Mar 07, 2007 8:59 am
by DSguru2B
Just the password, what about the other info. like server name and user name ? Is'nt it funny, when you say the same thing they need proof and if 'they' say it, its accepted blindly :shock: