Novell BUSINESS CONTINUITY CLUSTERING 1.1 SP2 - ADMINISTRATION, Administration Manual

Page: 115 / 142

Security Considerations
10
115
no
vd
ocx
(e
n)
13
Ma
y 20
09
10
Security Considerations
This section contains specific instructions on how to configure and maintain a business continuity
cluster in the most secure way possible. It contains the following subsections:
Š
Section 10.1, “Security Features,” on page 115
Š Section 10.2, “Security Configuration,” on page 116
Š
Section 10.3, “General Security Guidelines,” on page 120
Š Section 10.4, “Security Information for Dependent Products,” on page 120
10.1 Security Features
The following table contains a summary of the security features of Novell
®
Business Continuity
Clustering 1.2:
Table 10-1
Business Continuity Clustering 1.2 Security Features
Feature Yes/No Details
Users are authenticated Yes Administrative users are authenticated via
eDirectory™.
Users are authorized Yes Users are authorized via eDirectory trustees.
Access to configuration information is
controlled Yes Access to the administrative interface is
restricted to valid users who have write rights
to the configuration files.
Roles are used to control access Yes Configurable through iManager.
Logging and/or security auditing is done Yes Fake syslog.
Data on the wire is encrypted by default Yes The following data is encrypted on the wire:
Š
Inter-cluster communications
Š
Identity Manager data can be encrypted
Data stored is encrypted No
Passwords, keys, and any other
authentication materials are stored
encrypted Yes Inter-cluster communications for usernames
and passwords are encrypted. Cluster
credentials are stored encrypted in eDirectory.
Security is on by default Yes