Novell Sentinel Rapid Deployment 6.1, Installation Manual

Page: 53 / 84

Security Considerations for Sentinel 6.1 Rapid Deployment 53
no
vd
ocx
(e
n)
17
Sep
te
m
be
r 20
09
5.3 Securing Sentinel Data
IMPORTANT: Because of the highly sensitive nature of the data on the Sentinel Server, you
should keep the machine physically secure and in a secure area of the network. To collect data from
event sources outside the secure network, use a remote Collector Manager.
For certain components, passwords must be stored so that they are available when the system needs
to connect to a resource such as the database or an event source. In this case, when the password is
stored, it is first encrypted to avoid unauthorized access to the clear text password.
Even when the password is encrypted you must be careful that the access to the stored password data
is protected in order to avoid password exposure. For example, you can ensure that the permissions
on the files with sensitive data are not readable by other users.
FILES
advisor_client.xml
Database Credentials
The Database credentials are stored in the
< Installation_Directory >/config/server.xml
file
<class>esecurity.base.ccs.comp.dataobject.ConnectionManager</class>
<property name="username">appuser</property>
<property name="password">7fA+ogBMS6xJ/
sRVGK5qYycDxfIqGDHVX9FApWg==</property>
Advisor Credentials
<obj-component id="DownloadComponent">
<class>esecurity.ccs.comp.advisor.feed.NewAdvClientDownload</class>
<property name="advisor.downloadfrom.url">https://secure-www.novell.com/
sentinel/advisor/advisordata</property>
<property name="username">kveerareddy</property>
<!-- Set the password (encrypted) using the adv_change_password script -
->
<property name="password">jqhlWIX8HD6GDHVX9FApWg==</property>
<property name="compression.enabled">true</property>
<!--
Set the following properties to connect through an HTTP proxy.
Set the proxy password (encrypted) using the adv_change_password script
(make a
copy of the script and add "-x" to the java cmd line to set the proxy
password
instead of the advisor password.
-->
<!--
<property name="proxy_host"></property>
<property name="proxy_port"></property>
<property name="proxy_username"></property>
<property name="proxy_password"></property>
-->
</obj-component>