Install Tcp Isn Patch; Additional Post-Installation System Configuration; Restrict Network Services - Netscape DIRECTORY SERVER 6.0 Installation Manual

Operating System Requirements

Install TCP ISN Patch

If you will be authenticating users to the directory, then TCP connection hijacking
is a vulnerability. Microsoft has released a patch to improve the serial numbers,
. For more information please see
q243835i.exe
http://www.microsoft.com/security/bulletins/ms99-046.asp

Additional Post-Installation System Configuration

The Windows environment will require tuning to provide optimum performance
for Directory Server in an operational environment. Consult the Windows system
administrator's documentation or support channel for information on NT tuning
for multi-threaded internet services. The sections that follow provide some
guidelines.

Restrict Network Services

Network file sharing is not required by Directory Server and should be disabled.
Go to the Control Panel and open the Network icon. Remove the Workstation,
Computer Browser, NetBIOS Interface, Remote Access Service and Server Services
from Network Services tab. Leave RPC Configuration.
The SNMP service may be left if SNMP monitoring will be used.
From then on, each time the Network Control Panel is used, Windows NT will
prompt to install Windows NT Networking. Always answer No to the prompt.
Chapter 2 Computer System Requirements 31