Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 144 / 532

Additional Server Security Considerations
144 Netscape Enterprise Server Administrator’s Guide
Limit Administration Access
If you use remote configuration, be sure to use access control to allow
administration from only a few users and computers. If you want your
Enterprise Administration Server to provide end-user access to the LDAP server
or local directory information, consider maintaining two Enterprise
Administration Servers and using cluster management so that the SSL-enabled
Enterprise Administration Server acts as the master server and the other
Enterprise Administration Server is available for end-users’ access. For more
information regarding clusters, see “About Clusters,” on page 149 in Chapter 6,
“Managing Server Clusters.”
You should also turn on encryption for the Enterprise Administration Server. If
you don’t use an SSL connection for administration, then you should be
cautious when performing remote server administration over an unsecure
network. Anyone could intercept your administrative password and reconfigure
your servers.
Choose Good Passwords
You use a number of passwords with your server—the administrative
password, the private key password, database passwords, and so on. Your
administrative password is the most important password of all, since anyone
with that password can configure any and all servers on your computer. Most
important after that is your private key password. If someone gets your private
key and your private key password, they can create a fake server that appears
to be yours, or intercept and change communications to and from your server.
A good password is one you’ll remember but others won’t guess. For example,
you could remember
MCi12!mo
as “My Child is 12 months old!” A bad
password is your child’s name or birthdate.
Guidelines for Creating Hard-to-Crack Passwords
There are some simple guidelines that will help you create a stronger password.
It is not necessary to incorporate all of the following rules in one password, but
the more of the rules you use, the better your chances of making your
password hard to crack: