nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Encrypted password in DFS

Hi all,

In my Application DFS is used to connect to documentum and

for security reason I am trying to implement the encrypted password as an input

to DFS. I encrypted the password using dm_encrypt_password method and give as an

input to the DFS. It is not working. But I could able to connect other

documentum clients using this password. Is it possible to use encrypted password

in DFS?

Regards,

Rafi

Find more posts tagged with

Comments

aflowers001

Not too sure if you can use encrypted passwords, but one thing to try is to make sure the password you set in the RepositoryEntry in the IServiceContext, assuming that this is what you're using from your client, is prefixed with DM_ENCR_TEXT=.

Why, may I ask, are you encrypting the password? is it to stop clients reading it and using it? If so could you encrypt using a client algorithm and read in the password at client startup and decrypt it internally and use the decrypted version. If it to stop sniffing then you could look into SSL, although that might be too much of an overkill.

Hi,

I am using DM_ENCR_TEXT=. And My application is not a web application. Encrypting and

decrypting in client will make an overload to my application. I just want

password to be decrypted in server.

Thanks

Rafi

aflowers001

Had a few copies and a think about this one. If I recall right what would need ot happen is that the DFC client (i.e. DFS) would need to call initCrypto pointing to a copy of the servers aes.key file, i.e. the file used to encrypt the password in the first place, and ~i believe the encrypted password needs to be prefixed with DM_ENCR_PASS=.

This would involve a modification to the core DFS code such that some sort of initialising servlet of the like is called to do the initialisation for each service that issues login related DFC calls. As far as I know the way encrypted password work is that the DFC decrypts them at the point it is about to put them over the wire, but I could be wrong as I've not had enough coffee yet !https://community.emc.com/images/emoticons/laugh.gif!.

It's possibly better to have your own encrypted password saved at the client end and decrypt this at the point you wish to add it to an identity save it that way.

These powerlink threads may also help

https://forums.emc.com/nsepn/webapps/xpsgggfs31465mnldcpq14543562/forums/thread.jspa?tstart=0&threadID=16855

https://forums.emc.com/nsepn/webapps/xpsgggfs31465mnldcpq14543562/forums/thread.jspa?tstart=0&threadID=47467

https://forums.emc.com/nsepn/webapps/xpsgggfs31465mnldcpq14543562/forums/thread.jspa?tstart=0&threadID=25622