Securing Webaccess Application Sessions - Novell GROUPWISE 8 - ADMINISTRATION Administration Manual

Add: Click Add to add an entry to the list.
Edit: Select an entry from the list, then click Edit to edit the entry's information.
Delete: Select an entry from the list, then click Delete to remove the entry.
5 Click OK to save your changes and return to the WebAccess Application object's Templates
page.
Using Your Own Customized Templates
Under certain very specific circumstances, it was possible for a user to view WebAccess template
files from a Web browser without logging in to WebAccess. Although there is no confidential
information located in any of the template files that are accessible in this manner, a line was added to
the file to prevent such access:
webacc.cfg
Templates.requireAuthentication=true
With this setting, unauthenticated users have no access to any WebAccess template files except for
the Login page. If you have customized WebAccess templates for your own specialized use, this
setting causes your templates to be inaccessible, even if GroupWise authentication was not
previously required. You can turn off the authentication requirement by changing the line in the
file to:
webacc.cfg
Templates.requireAuthentication=false

54.2.4 Securing WebAccess Application Sessions

The WebAccess Application includes several settings to help you ensure that user information is
secure. You can:
Specify a period of time after which inactive sessions are closed. The default is 20 minutes.
Secure sessions through the use of client IP binding or browser session cookies.
Disable information caching by proxy servers and Web browsers.
Enable GroupWise authentication through a trusted server.
To modify the security settings:
1 In ConsoleOne, right-click the WebAccess Application object, then click Properties.
2 Click Application > Security to display the Security page.
Configuring WebAccess Components 909