Security of proxy information
I have noticed that the ProxyUserName and ProxyPassword as defined in the registration file for sconadm appear as clear text in the Client Config Registry. Despite one needing root access to retrieve it is still appears to be a security problem. Any comments?
It appears that each client utilising Sun Update Connection must talk to Sun directly (or through a web proxy) rather than through an Update Connection Proxy. Is this so?
Also I note that when registering a system for Update Connection Services the web proxy parameters appear in the Update Manager (as seen with smpatch get). In my case I am using the Update Connection Proxy so I dont want to configure any web proxy information. Can anyone explain the relationship between what is shown with smpatch get and what is configured with sconadm[ and the associated Registration file?
[861 byte] By [
INSJohn] at [2007-11-26 6:05:24]
# 1
Sun update connection clients can connect to the sun update servers in three ways:
1) direct connection
2) through a web proxy
3) through a sun update connection proxy
The proxy parameter in the sconadm command means that you connect your client (sun update client or sun update proxy) through a web (network) proxy.
# 3
In order to register Your sun update connection proxy you need an internet connection( direct or via web proxy).
At the moment of register your Sun update connection client you are not really running Sun update connection Proxy, i explain:
In order to install the Sun Update connection proxy feature you first have to register via sconadm or via sun update manager, once you have registered your client then you can proceed and download the Sun update connection proxy feature. Once you have the Sun update connection proxy running, you dont need to register any other client.
You only need an internet connection for the Sun update connection Proxy ( direct or via web proxy). Clients connecting to the Sun update connection Proxy don't need an internet connection at all, since they are getting the patches from the Sun update Connection proxy.
