It seems that from version 7, the DB password is encrypted in the ServerConf.xml file. It now contains something similar to <dbPassword>crypt:####</dbPassword>, where #### is the encrypted password.
We are using MS SQL as the DB, with Windows Authentication. So, that DB user is actually an ActiveDirectory (AD) user that can be used for SSO.
To test SSO, I used this same AD user in <ntlmParamValue>password</ntlmParamValue>, but I copied/pasted the crypt:#### there. And it works fine !
That's great, because it means you actually don't need to save the SSO information in clear text.
Of course, this worked because I knew the encrypted version of the password that the installation program generated for me in the <dbPassword> key.
My question : how can we generate an encrypted version of a password ourselves.... I mean how can we obtain the encrypted string to put behind "crypt:" starting from the clear text version ?
We could of course install a new version of SysAid somewhere and faking the DB password to get it... But it would probably be easier if Ilient provided a tool for this (a system web page for example ?).
|