IWP Passwords in cleartext?

[Alex_ND]

I did a search, but couldn't find anything. Are the passwords in IWP cleartext or somehow encrypted? Thanks!

[Reed]

They are only encrypted if your web server is using SSL. If you're using IWP without FMSA, they are clear text.

[Alex_ND]

I do have server 8 advanced. Does this add any security measures, or do I still need to use SSL?

Does anyone know of a good tutorial for setting IWP up w/SSL?

[Reed]

The web browser is sending data directly to the web server, and that is passed on to the web publishing engine, then filemaker server. So SSL has to be enabled in Apache on OS X. I haven't done this myself since I don't need encryption for my IWP stuff, but a quick google turned up this among others...

http://developer.apple.com/internet/serverside/modssl.html

Dana

[Alex_ND]

Thanks Dana. We already do have ssl going for other parts of our site, and I'm able to get to the iwp login when I type https://mysite.com:443/fmi/iwp . But I keep getting a message that the username and p/w are incorrect. If I use http: instead of https: it works fine.

I would imagine that I need to tell filemaker server advanced to use port 443 instead of 80, but I'm having trouble finding where to do that. I'll have to take a look at the docs again. Thanks again.