Credentials are tranmitted to server in plain text.

Moderator: crythias

Locked
srivatsatatti
Znuny newbie
Posts: 85
Joined: 25 Jan 2011, 06:54
Znuny Version: OTRS 3
Company: eStomi Technologies Pvt Ltd
Contact:

Credentials are tranmitted to server in plain text.

Post by srivatsatatti »

The user Credentials are tranmitted to server in plain text.
How can this be encrypted?


Using
OTRS 3.0.11
RHEL
You do not have the required permissions to view the files attached to this post.
OTRS 3.2.x, Linux Ubuntu, Mysql 5.1.
jojo
Znuny guru
Posts: 15020
Joined: 26 Jan 2007, 14:50
Znuny Version: Git Master
Contact:

Re: Credentials are tranmitted to server in plain text.

Post by jojo »

use https
"Production": OTRS™ 8, OTRS™ 7, STORM powered by OTRS
"Testing": ((OTRS Community Edition)) and git Master

Never change Defaults.pm! :: Blog
Professional Services:: http://www.otrs.com :: enjoy@otrs.com
srivatsatatti
Znuny newbie
Posts: 85
Joined: 25 Jan 2011, 06:54
Znuny Version: OTRS 3
Company: eStomi Technologies Pvt Ltd
Contact:

Re: Credentials are tranmitted to server in plain text.

Post by srivatsatatti »

Can you help me with few more details.

In sysconfig there is a parameter where I can set it to Http/Https.
if I set it to https will I achieve it?
OTRS 3.2.x, Linux Ubuntu, Mysql 5.1.
jojo
Znuny guru
Posts: 15020
Joined: 26 Jan 2007, 14:50
Znuny Version: Git Master
Contact:

Re: Credentials are tranmitted to server in plain text.

Post by jojo »

you need to configure the apache webserver for https. Ask your linux admin for assitance
"Production": OTRS™ 8, OTRS™ 7, STORM powered by OTRS
"Testing": ((OTRS Community Edition)) and git Master

Never change Defaults.pm! :: Blog
Professional Services:: http://www.otrs.com :: enjoy@otrs.com
srivatsatatti
Znuny newbie
Posts: 85
Joined: 25 Jan 2011, 06:54
Znuny Version: OTRS 3
Company: eStomi Technologies Pvt Ltd
Contact:

Re: Credentials are tranmitted to server in plain text.

Post by srivatsatatti »

We have configured Apache webserver to https, but still the issue exits.
OTRS 3.2.x, Linux Ubuntu, Mysql 5.1.
jojo
Znuny guru
Posts: 15020
Joined: 26 Jan 2007, 14:50
Znuny Version: Git Master
Contact:

Re: Credentials are tranmitted to server in plain text.

Post by jojo »

if you lgon via https all communication will be encrypted. If you use a link where the password is stored, the password will be always visible in the address bar of the browser.
"Production": OTRS™ 8, OTRS™ 7, STORM powered by OTRS
"Testing": ((OTRS Community Edition)) and git Master

Never change Defaults.pm! :: Blog
Professional Services:: http://www.otrs.com :: enjoy@otrs.com
Locked