Management Agent Logon Passwords Are Sent in Clear Text (279699)



The information in this article applies to:

  • Microsoft Metadirectory Services 2.1
  • Microsoft Metadirectory Services 2.2

This article was previously published under Q279699

SUMMARY

In Microsoft Metadirectory Services (MMS), legacy Management Agents (MA), as well as Lightweight Directory Access Protocol (LDAP)-based MA logon passwords are sent in clear text to the server. No security encryption is used when these passwords are sent.

MORE INFORMATION

In general, MMS MAs do not establish a secure connection with connected directories. However, Active Directory Management Agent uses security encryption when sending passwords.

Modification Type:MinorLast Reviewed:1/25/2006
Keywords:kbenv kbinfo KB279699