javier.vazquez

Apache SSL proxy sends clear text passwords to UMP

Discussion created by javier.vazquez on Mar 10, 2011

I have a prospect who wants to use the apache proxy module on a DMZ webserver which pulls data from their UMP in their admin LAN.  They are using Active Directory for their NMS users as well as their UMP Contacts.  I told them that their users and contacts  would be accessing our UMP securely by hitting the SSL Apache proxy webserver.  They brought up afterwards that they didn't want to send passwords via clear text from the Apache SSL Proxy to the UMP. I believe those passwords are clear text but I wanted to see if we had any way of resolving this security issue for them.

Outcomes