DX Infrastructure Management

Expand all | Collapse all

Apache SSL proxy sends clear text passwords to UMP

  • 1.  Apache SSL proxy sends clear text passwords to UMP

    Posted 03-10-2011 01:45 AM

    I have a prospect who wants to use the apache proxy module on a DMZ webserver which pulls data from their UMP in their admin LAN.  They are using Active Directory for their NMS users as well as their UMP Contacts.  I told them that their users and contacts  would be accessing our UMP securely by hitting the SSL Apache proxy webserver.  They brought up afterwards that they didn't want to send passwords via clear text from the Apache SSL Proxy to the UMP. I believe those passwords are clear text but I wanted to see if we had any way of resolving this security issue for them.



  • 2.  RE: Apache SSL proxy sends clear text passwords to UMP

    Posted 9 days ago
    Edited by David Kim 9 days ago
    Try to set up Apache reverse proxy to send HTTPS requests to the UMP server.

    Apache Module mod_proxy
    https://httpd.apache.org/docs/current/mod/mod_proxy.html

    Configure HTTPS in Admin Console or UMP
    https://docops.ca.com/ca-unified-infrastructure-management/9-0-2/en/installing/optional-post-installation-tasks/configure-https-in-admin-console-or-ump