Re: CSM Question
Posted in 2007
Topics: Security, Permissions & Auditing
Hi, I would have thought that ENCCSM includes encrypting the password as all the communication between client and server gets encrypted ...? But I may be quite wrong with this as I have never looked into the details of ENCCSM. Regards, Martin -- Martin Fuerderer IBM Informix Development Munich, Germany Information Management IBM Deutschland GmbH Chairman of the Supervisory Board: Hans Ulrich Märki Board of Management: Martin Jetter (Chairman), Rudolf Bauer, Christian Diedrich, Christoph Grandpierre, Matthias Hartmann, Andreas Kerstan Corporate Seat: Stuttgart, Germany; Reg.-Gericht: Amtsgericht Stuttgart, HRB-Nr.: 14 562 WEEE-Reg.-Nr. DE 99369940 informix-list-bounces@iiug.org wrote on 03.04.2007 16:40:45: > Wher should I ask this question? Does anyone know why I have to > choose between SPWDCSM (password encyption) and ENCCSM (data > encryption)? How can I get both all in one? > > Eric B. Rowell > _______________________________________________ > Informix-list mailing list > Informix-list@iiug.org > http://www.iiug.org/mailman/listinfo/informix-list
Martin Fuerderer wrote: > Hi, > > I would have thought that ENCCSM includes encrypting > the password as all the communication between client > and server gets encrypted ...? > But I may be quite wrong with this as I have never looked > into the details of ENCCSM. > ENCCSM is network encryption, that is everything send over the network will be encrypted including username, password, queries and data.
Manoj and Claus, Thank you for clearing the mud for me. It appeared to me and a few others that it meant either one or the other could be done but doesn't state what "data" is... Thank you again, Eric On 4/3/07, Claus Samuelsen <csa@dk.ibm.com> wrote: > Martin Fuerderer wrote: > > Hi, > > > > I would have thought that ENCCSM includes encrypting > > the password as all the communication between client > > and server gets encrypted ...? > > But I may be quite wrong with this as I have never looked > > into the details of ENCCSM. > > > > ENCCSM is network encryption, that is everything send over the network > will be encrypted including username, password, queries and data. > _______________________________________________ > Informix-list mailing list > Informix-list@iiug.org > http://www.iiug.org/mailman/listinfo/informix-list >
Martin Fuerderer wrote: > Hi, > > I would have thought that ENCCSM includes encrypting > the password as all the communication between client > and server gets encrypted ...? > But I may be quite wrong with this as I have never looked > into the details of ENCCSM. You are correct. ENCCSM includes password encryption. > > Regards, > Martin > -- > Martin Fuerderer > IBM Informix Development Munich, Germany > Information Management > > IBM Deutschland GmbH > Chairman of the Supervisory Board: Hans Ulrich M'rki > Board of Management: Martin Jetter (Chairman), Rudolf Bauer, Christian > Diedrich, Christoph Grandpierre, Matthias Hartmann, Andreas Kerstan > Corporate Seat: Stuttgart, Germany; Reg.-Gericht: Amtsgericht Stuttgart, > HRB-Nr.: 14 562 WEEE-Reg.-Nr. DE 99369940 > > informix-list-bounces@iiug.org wrote on 03.04.2007 16:40:45: > >> Wher should I ask this question? Does anyone know why I have to >> choose between SPWDCSM (password encyption) and ENCCSM (data >> encryption)? How can I get both all in one? >> >> Eric B. Rowell >> _______________________________________________ >> Informix-list mailing list >> Informix-list@iiug.org >> http://www.iiug.org/mailman/listinfo/informix-list >
Claus Samuelsen wrote: > Martin Fuerderer wrote: >> I would have thought that ENCCSM includes encrypting >> the password as all the communication between client >> and server gets encrypted ...? >> But I may be quite wrong with this as I have never looked >> into the details of ENCCSM. > > ENCCSM is network encryption, that is everything send over the network > will be encrypted including username, password, queries and data. Actually, the username is passed in the clear, but the password is not. -- Jonathan Leffler #include <disclaimer.h> Email: jleffler@earthlink.net, jleffler@us.ibm.com Guardian of DBD::Informix v2005.02 -- http://dbi.perl.org/