 |
SoftTree Technologies
Technical Support Forums
|
|
Author |
Message |
taso
Joined: 18 May 2007 Posts: 8
|
|
Is a JAL job with password info sent encrypted to agents? |
|
When running a job on a remote host via RAConnect is the password send in clear text? From what I have read in some other posts it seems like jobs are binary streams sent from Master to Remote Agent. Is this the case for all job types?
If any further info (job type) needs clarifying please let me know and I will post the details.
Thanks
|
|
Thu Jun 07, 2007 2:25 pm |
|
 |
SysOp
Site Admin
Joined: 26 Nov 2006 Posts: 7966
|
|
|
|
Please don't confuse different agent types.
For RA agents, all commands are sent as is over the wire. If you specify password on the job command line, it is sent as part of the command text.
For 24x7 agents, which are part of the multi-platform edition, the entire job definition is sent encrypted to the agent. And so all passwords specified in job properties, scripts and commands are covered by that.
|
|
Thu Jun 07, 2007 2:50 pm |
|
 |
taso
Joined: 18 May 2007 Posts: 8
|
|
|
|
To clarify:
The "controlling server" is an instance of 24x7 Automation Suite on a Windows Server (24x7 Scheduler v 3.4.26) which connects to a remote jra_server agent. We were not able to get the ra_server agent to operate correctly on our Linux platform, hence use the java version. The remote agent (jra_server) is executing commands local to it, on the Linux server, however the script contains the password for connectivity from 24x7 Scheduler to the remote jra_server. I want to confirm that the traffic from the Windows box to the Linux server is encrypted since password data is included.
Can you confirm or am I just making things less clear??
|
|
Thu Jun 07, 2007 2:57 pm |
|
 |
SysOp
Site Admin
Joined: 26 Nov 2006 Posts: 7966
|
|
|
|
No. This type of communication is not encrypted. It is based on a simple binary streams protocol for sending data between the agent and the Windows scheduler. The data streams are sent as bunch of concatenated hex codes, so values are not seen as a clear text, but again there is no strong encryption employed. If you know which protocol is used and know how to convert hex codes to ASCII and can guess different parts of the stream, you can theoretically guess the password value. Hope this description helps.
|
|
Thu Jun 07, 2007 4:30 pm |
|
 |
LeeD
Joined: 17 May 2007 Posts: 311 Country: New Zealand |
|
|
|
you could ssh tunnel the comms :-)
|
|
Thu Jun 07, 2007 6:49 pm |
|
 |
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|