Thanks Lalit It is odd that the tech note mentions version 10.0 ... however it gives me the answer I need for pre-10.
Regards, John From: Lalit Tyagi [mailto:[email protected]] Sent: 02 February 2011 17:46 To: spectrum Subject: RE:[spectrum] eHealth password storage As per CA tech document TEC519276 It depends which eHealth release and also the OS: Unix vs Windows, as below: In pre- eHealth 10.0: Windows: Microsoft?s CryptoAPI Unix: MD5 In eHealth 10.0 and later: Both UNIX and windows use SHA-1 From: John O'Mahony [mailto:[email protected]] Sent: Wednesday, February 02, 2011 4:26 AM To: spectrum Subject: RE:[spectrum] eHealth password storage Thanks Lalit What I am looking for however is detail of the encryption used to store the password in that file. Do you know that? Spectrum passwords are hashed with SHA-1 and I need to find out what eHealth uses. Regards, John From: Lalit Tyagi [mailto:[email protected]] Sent: 01 February 2011 20:18 To: spectrum Subject: RE:[spectrum] eHealth password storage It is stored in "passwd" file under ...ehealth\web\webCfg folder From: John O'Mahony [mailto:[email protected]] Sent: Tuesday, February 01, 2011 9:51 AM To: spectrum Subject: [spectrum] eHealth password storage Hello again Does anyone know how eHealth stores user passwords? I assume this is encrypted but wanted to know details of that encryption. Anyone know that? Regards, John * --To unsubscribe from spectrum, send email to [email protected]<mailto:[email protected]> with the body: unsubscribe spectrum [email protected] ---------------------------------------- This message is intended exclusively for the individual(s) or entity to which it is addressed. It may contain information that is proprietary, privileged or confidential or otherwise legally exempt from disclosure. If you are not the named addressee, you are not authorized to read, print, retain, copy or disseminate this message or any part of it. If you have received this message in error, please notify the sender immediately by e-mail and delete all copies of the message. * --To unsubscribe from spectrum, send email to [email protected]<mailto:[email protected]> with the body: unsubscribe spectrum [email protected] * --To unsubscribe from spectrum, send email to [email protected]<mailto:[email protected]> with the body: unsubscribe spectrum [email protected] ---------------------------------------- This message is intended exclusively for the individual(s) or entity to which it is addressed. It may contain information that is proprietary, privileged or confidential or otherwise legally exempt from disclosure. If you are not the named addressee, you are not authorized to read, print, retain, copy or disseminate this message or any part of it. If you have received this message in error, please notify the sender immediately by e-mail and delete all copies of the message. * --To unsubscribe from spectrum, send email to [email protected]<mailto:[email protected]> with the body: unsubscribe spectrum [email protected] --- To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected]
