Novell EDIRECTORY 8.8 SP3, Administration Manual, Page: 633 / 634

Security Considerations
F
633
n
ov
do
cx (e
n)
11
Ju
ly 20
08
F
Security Considerations
This appendix contains the following topics:
Š
Section F.1, “LDAP Binds,” on page 633
Š
Section F.2, “Nessus Scan Results,” on page 634
F.1 LDAP Binds
The LDAP binds should take place over a secure connection. We recommend that you always use a
SSL/TLS connection; else:
Š
The key transmitted over the wire can be sniffed out. So you need to physically secure the
corporate network against eaves-dropping or “packet sniffing”.
Š
You need to keep the servers in a physically secure location with access by authorized
personnel only.
Š When the product is used by users outside of the corporate firewall, a VPN should be
employed.
Š
If a server is accessible from outside the corporate network, a firewall should be configured to
prevent direct access to the server.
Š
Audit logs should be checked periodically.
Š Different administrative duties should be given to separate people. Delegation of
administration provides granular control over the directory objects.
Š
We recommend that you identify a particular LDAP server as the right server for Kerberos
management. You can specify the server name in iManager.
IMPORTANT: The user needs to access the LDAP server using the DNS name instead of the IP
address of the server. This is because the conversion of the IP address to the DNS name is not
secure.