.net connector password security on the network

[Former Member]

when using the SAP logon form for user name and password to start an DIALOG RFC who is password and user transmited on the network. Is it clear text or encripted? If it's clear text what options are there to secure the password?

[Former Member]

if the communication channel is RFC, the password is sent encoded but not encrypted over the wire. For being able to encrypt the data, SNC is requried.

For more details, please have a look at the SNC User's Guide at http://service.sap.com/security -> Security in Detail -> Secure System Management

Regards,

Patrick

[Former Member]

Thanks Patrick, the connection type is .net connector 2.0 RFC to WAS 6.40 on an internal network. Do you know where I can find where the documentation on the type of encoding? A question has been raised about the passwords being transmitted in the clear.

[reiner_hille-doering]

Unfortunately I don't know if (and how) the password is encrypted in standard RFC mode, but you allways have a bunch of other authentication options, e.g. SNC that allows NT-based Single Sign On and full content encryption. Many of the options are documented in NCo online help.