Idea ID: 2834848

SR#101309374081 [Cannot change windows password over SSL]

tkong

Status: Already Offered

over 4 years ago

Use case of doing password management over SSL was not implemented in the product as an out of the box feature which was a surprised to me. The HTTP communication session should be encryption with SSL to mitigate man in the middle attack. Hope PAM engineering can enable this feature asap.

Tags:

configuration

Akhil Laddha over 1 year ago

I've marked the idea as Already offered. If any use case remains problematic with the present implementation, please feel free to submit a new idea. Thanks.
- Cancel
- Vote Up 0 Vote Down
- More
- Cancel
Akhil Laddha over 1 year ago

Regardless of the chosen transport protocol (HTTP or HTTPS), WinRM always encrypts all PowerShell remote communication after initial authentication, according to Microsoft documents.

Can you help us explain the use case that can only be addressed via https?
- Cancel
- Vote Up 0 Vote Down
- More
- Cancel
VuDuong over 4 years ago

I think that his mean is he wants to do windows password rotation feature over encryption and transport protocols, but PAM only is working over non encryption and transport protocols for this feature. Sorry if I misunderstand
- Cancel
- Vote Up 0 Vote Down
- More
- Cancel
Ted Ernst over 4 years ago

Windows encrypts the session by default. Therefore, it was deemed as an unnecessary step to encrypt it again. Let me know if I'm missing your point.

This is described here: https://docs.microsoft.com/en-us/powershell/scripting/learn/remoting/winrmsecurity?view=powershell-7#encryption-and-transport-protocols
- Cancel
- Vote Up 0 Vote Down
- More
- Cancel
leantan over 4 years ago

This feature is very important for us also, please develop it ASAP.
- Cancel
- Vote Up 0 Vote Down
- More
- Cancel

Menu

PAM Ideas

Labels

SR#101309374081 [Cannot change windows password over SSL]

Tags:

Resources