Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 145 / 532

Chapter 5, Working with Server Security 145
Additional Server Security Considerations
• Passwords should be 6-14 characters long.
• Mac passwords cannot be longer than 8 characters.
• Do not use the “illegal” characters: *, ", or spaces.
• Do not use dictionary words (any language).
• Do not make common letter substitutions (like replacing 3’s for E’s and 1’s
for L’s) within dictionary words.
• Include characters from as many of these classes as possible:
• Uppercase letters
• Lowercase letters
• Numbers
• Symbols
Secure Your Key-Pair File
Make sure your key-pair file is protected. The Enterprise Administration Server
stores key-pair files in the directory
server_root /alias
. Consider making
the files and directory readable only to Netscape servers installed on your
computer. It’s also important to know if the file is stored on backup tapes or is
otherwise available for someone to intercept. If so, you must protect your
backups as completely as your server.
Limit Other Applications on the Server
Carefully consider all applications that run on the same machine as the server.
It’s possible to circumvent your server’s security by exploiting holes in other
programs running on your server. Disable all unnecessary programs and
services. For example, the Unix sendmail daemon is difficult to configure
securely and it can be programmed to run other possibly detrimental programs
on the server machine.