Client connection unencrypted?

The OES-Client (24.1) shows at Win11 in the context menu tab 'connection': 'unencrypted' in the column connection. As far as I see (tcpdump) is the content of a text file in plain text transported (NCP) via the LAN from the client to the server. Is there a way to encrypt this transport?

  • 0  

    NCP security can be configured on the server object in the UMC. There are several possible settings under "NCP Security".  To do this, start the server then click on the config asterisk and now you can make settings

    A really good introduction can be found here: Securing NCP Access

    George

    “You can't teach a person anything, you can only help them to discover it within themselves.” Galileo Galilei

  • 0  

    New feature to properly encrypt ALL the NCP traffic now, and this is one of the things we get to see.

    ________________________

    Andy of KonecnyConsulting.ca in Toronto
    Please use the "Like" and/or "Verified Answers" as appropriate as that helps us all.

  • 0 in reply to   

    Is there a possibility to check on the server, which client connections are encrypted and which not? On the clients this is shown under connections - but on the server I have not found a place where I could see, which connections are encrypted

  • 0   in reply to 

    ncpcon connection list
    ... Executing "connection list"

                                "Active NCP Connections"
                                      Bytes     Bytes
    Station  "Login Time"             Read      Written   Requests  Encrypted  MFA  Name
     0       Apr 24 2024 03:08:59 pm  0         0         0         no         no.CN=wasauchimmer.
    *1       Apr 10 2024 03:09:06 pm  0         0         1         no         yes.CN=wasauchimmer.
     2       Not Available            0         0         1         --         --   NOT LOGGED IN
     3       Not Available            0         0         1         --         --   NOT LOGGED IN
    *4       Apr 10 2024 03:09:10 pm  0         0         1         no         yes.CN=wasauchimmer.
    *5       Apr 11 2024 05:09:13 am  0         0         1         no         yes.CN=wasauchimmer..
    *6       Apr 10 2024 03:09:06 pm  0         0         1         no         no   .CN=wasauchimmer.
    *7       Apr 10 2024 03:09:12 pm  0         0         1         no         no   .CN=wasauchimmer.

    in terms of ncp encryption, it depends on the version of the Open Enterprise Server used, by the way

    “You can't teach a person anything, you can only help them to discover it within themselves.” Galileo Galilei

  • 0   in reply to 

    This information is also available in UMC as follows:  

  • 0 in reply to   

    This is a real good place on the UMC page. Before I did not look into the selection of the rows, where you can select encryption to be shown, so did not see any of the additional rows, one can select.

  • 0   in reply to 

    I just realize I'm too old and should retire. I'm still used to working with commandos, regular expressions and grep in the Cli. I'm an old dinosaur who can't do anything with web stuff.

    “You can't teach a person anything, you can only help them to discover it within themselves.” Galileo Galilei

  • 0   in reply to   

    We see value and are fully invested in Cli. With UMC, you can get connection details from multiple servers in one view. It also includes Search and Advanced Filters to narrow results.  

  • 0   in reply to   

    Hi Girish, I always enjoy following your web sessions because I can learn something or find out something new. CLI preferred to UMC / Web was a little joke. Depending on what I want to achieve administratively I use Web / Java Client or CLI

    “You can't teach a person anything, you can only help them to discover it within themselves.” Galileo Galilei