Overview Of Security Methods - Netscape DIRECTORY SERVER 7.0 - DEPLOYMENT Deployment Manual

Overview of Security Methods

• Information belonging to corporate customers.
• Information pertaining to individual subscribers.
example.com
• Provide access to the directory administrators of hosted companies
(
• Implement access control policies for hosted companies directory
information.
• Implement a standard access control policy for all individual clients who use
example.com
• Deny access to
• Grant read access to
Overview of Security Methods
Directory Server offers a number of methods that you can use to design an overall
security policy that is adapted to your needs. Your security policy should be
strong enough to prevent sensitive information from being modified or retrieved
by unauthorized users while simple enough to administer easily. A complex
security policy can lead to mistakes that either prevent people from accessing
information that you want them to access or, worse, allow people to modify or
retrieve directory information that you do not want them to access.
Directory Server provides the following security methods:
• Authentication — A means for one party to verify another's identity. For
example, a client gives a password to Directory Server during an LDAP bind
operation.
• Password policies — Defines the criteria that a password must satisfy to be
considered valid, for example, age, length, and syntax.
• Encryption — Protects the privacy of information. When data is encrypted, it
is scrambled in a way that only the recipient can understand.
• Access control — Tailors the access rights granted to different directory users
and provides a means of specifying required credentials or bind attributes.
• Account inactivation — Disables a user account, group of accounts, or an
entire domain so that all authentication attempts are automatically rejected.
138 Netscape Directory Server Deployment Guide • October 2004
needs the following access controls:
and
example_a example_b
for internet access from their homes.
example.com
example.com
) to their own directory information.
's corporate directory to all outsiders.
's directory of subscribers to the world.