Novell DATA SYNCHRONIZER, Administration Manual

Page: 47 / 50

Securing Your Synchronizer System 47
n
ov
do
cx (e
n)
16
Ap
ril 20
10
5.2.1 Securing Your Synchronizer Data
Š “Limiting Physical Access to Synchronizer Servers” on page 47
Š
“Securing File System Access” on page 47
Limiting Physical Access to Synchronizer Servers
Servers where Synchronizer data resides should be kept physically secure, where unauthorized
persons cannot gain access to the server consoles.
Securing File System Access
Encrypted file systems should be used on all Synchronizer servers. Only Synchronizer
administrators should have direct access to Synchronizer data.
5.2.2 Securing Your Synchronizer System
Setting Up SSL Connections
Secure SSL connections should be used between your Synchronizer system and the following
external components:
Š
LDAP server
Š
GroupWise Post Office Agent (POA)
Š
Mobile devices
Š
Browser connection for Synchronizer Web Admin
For instructions, see Section 5.1, “Security Administration,” on page 43 .
Securing Synchronizer Web Admin
One Synchronizer administrator is established when you install the Data Synchronizer Mobility
Pack. Additional users can be granted Synchronizer administrator rights, as described in
Section 3.1.2, “Setting Up Multiple Synchronizer Administrator Users,” on page 16 , but this should
be done judiciously.
Protecting Synchronizer Configuration Files
The configuration files for all Synchronizer components should be protected from tampering.
Configuration files are found in the following default locations:
Synchronizer Component Configuration File
Sync Engine
/etc/datasync/syncengine/engine.xml
Web Admin /etc/datasync/webadmin/server.xml
Config Engine
/etc/datasync/configengine/configengine.xml
Connector Manager
/etc/datasync/syncengine/connectors.xml