Using Password.conf - Netscape ENTREPRISE SERVER 6.1 - 04-2002 ADMINISTRATOR Administrator's Manual

Creating a Trust Database
For the Server Manager, click Apply, and then Restart for changes to take
6.
effect.
After creating a certificate trust database for your server, you can request a
certificate and submit it to a Certificate Authority (CA). If your company has its
own internal CA, request your certificate from them. If you plan to purchase your
certificate from a commercial CA, choose a CA and ask for the specific format of
the information they require. A list of available certificate authorities including
links to their sites, is available on the Request a Certificate page. For more
information on what CAs may require, a list of Certificate Authorities is available
through both Server Administrator, and Server Manager Security Pages under
Request a Certificate.
The Administration Server can have only one server certificate. Each server
instance can have its own server certificate. You can select a server instance
certificate for each virtual server.

Using password.conf

Normally, you cannot start an UNIX SSL-enabled server with the
or the /
By default, the web server prompts the administrator for the key database
password before starting up. If you must be able to start/restart an unattended
web server, you can save the password in a
recommended. Only do this if your system is adequately protected so that this file
and the key databases are not compromised. The server's
should be owned by
should have read or write access.
On UNIX, leaving the SSL-enabled server's password in the
a security risk. Anyone who can access the file has access to the SSL-enabled
server's password. Consider the security risks before keeping the SSL-enabled
server's password in the
On Windows NT/Windows 2000, if you have an NTFS file system, you should
protect the directory that contains the
even if you do not use the file. The directory should have read/write permissions
for the administration server user and the web server user. Protecting the directory
prevents others from creating a false
directories or files on FAT file systems by restricting access to them.
90 Netscape Enterprise Server Administrator's Guide • April 2002 (Draft)
files, because the server requires a password before starting.
etc/inittab
or the user who installed the server, and only the owner
root
password.conf
password.conf
file.
file by restricting its access,
password.conf
file. You cannot protect
password.conf
/etc/rc.local
file, but this is not
file
password.conf
file is
password.conf