Novell SENTINEL LOG MANAGER 1.0.0.5 - 03-31-2010, Руководство администратора

Страница: 16 / 168

16 Sentinel Log Manager 1.0.0.4 Administration Guide
no
vd
ocx
(e
n)
19
Fe
bru
a
ry
20
10
host all all 0.0.0.0/0 md5
If you want to limit the client connections that are allowed to run and connect to the database
through pgAdmin, specify the IP address of the host in the above line.
The following line in the
pg_hba.conf
file is an indicator to PostgreSQL to accept connections
from the local machine so that pgAdmin is allowed to run only on the server.
host all all 127.0.0.1/32 md5
To allow connections from other client machines, you can add additional
host
entries in the
pg_hba.conf
file.
To provide maximum security, by default, PostgreSQL only allows connections from the local
machine.
2.1.7 Communication between Sentinel Log Manager and NFS/
CIFS Archive Servers
Sentinel Log Manager can be configured to archive event and raw data to a remote CIFS or NFS*
server. These protocols do not offer data encryption, so consider security implications before
deciding the type of archive location to use. An alternative is to use direct attached storage (local or
SAN), which does not suffer from the same security vulnerabilities. If you choose to use CIFS or
NFS, it is important to configure the CIFS or NFS server properly to maximize the security of your
data.
For more information about configuring the archive server settings, see “ Configuring Archive
Server Settings ” in the Sentinel Log Manager 1.0.0.4 Installation Guide .
2.2 Securing Users and Passwords
Š
Section 2.2.1, “Operating System Users,” on page 16
Š
Section 2.2.2, “Sentinel Application and Database Users,” on page 17
2.2.1 Operating System Users
Š
“Server Installation” on page 16
Š
“Collector Manager Installation” on page 16
Server Installation
The Sentinel Log Manager server installation creates a
novell
system user and novell group that
owns the installed files within the
install_directory
. The user’s home directory is set to
/home/
novell
. By default, if a new user is created, the password for the user is not set in order to maximize
security. If you want to log in to the system as the novell user, you must set a password for the user
after installation.
Collector Manager Installation
Linux: The installer prompts you to specify the name of the system user who owns the installed
files, as well as the location to create its home directory. By default, the system user is
esecadm
;
however, you can change this system username. If the user does not exist, it is created along with its