When you are managing NetWare servers in iManager, any sensitive information (such as usernames and passwords) is encrypted with a shared-key technology before the sensitive data is passed between iManager and the _admin volume on the NetWare server you are managing. This ensures that sensitive data is not exposed during transmission. Other data is transmitted in clear text.
When you are managing OES-Linux and OES2-Linux servers in iManager, all information, including sensitive data, is typically sent via a Secure HTTP (HTTPS) connection between iManager and CIMOM on the Linux server you are managing. This ensures that sensitive data is not exposed during transmission. However, if CIMOM is not running on the Linux server you are managing, the plug-ins attempt to connect via NCP™ or CIFS. These connections are insecure and are a security concern only when transmitting sensitive information.
Effective in OES2-Linux, storage plug-ins have been modified to prevent this potential exposure of sensitive information. Where tasks involve the exchange of sensitive information between iManager and the Linux server you are managing, the plug-in now checks to see if CIMOM is running and available on the Linux server you are managing before it attempts to execute the command. If CIMOM is not running for some reason, it returns an error message and does not execute the task. The plug-ins do not allow sensitive data to be sent across insecure connections (such as NCP or CIFS/SAMBA) to the Linux server. You get an error message explaining that the connection is not secure and that CIMOM must be running before you can perform the task.