C Security Considerations; Security Features; Security Configuration; C.1 Security Features - Novell BUSINESS CONTINUITY CLUSTERING FOR NETWARE 1.1 - ADMINISTRATION Manual

Security Considerations
C
This section contains specific instructions on how to configure and maintain a Business Continuity
Cluster in the most secure way possible. It contains the following subsections:
Section C.1, "Security Features," on page 91
Section C.2, "Security Configuration," on page 91
Section C.3, "Other Security Considerations," on page 96

C.1 Security Features

The following table contains a summary of the security features of BCC 1.1:
BCC 1.1 Security Features
Table C-1
Feature
Users are authenticated
Users are authorized
Access to configuration information is
controlled
Roles are used to control access
Logging and/or security auditing is done
Data on the wire is encrypted by default
Data stored is encrypted
Passwords, keys, and any other
authentication materials are stored
encrypted
Security is on by default

C.2 Security Configuration

The following subsections provide a summary of security-related configuration settings for BCC
1.1:
Section C.2.1, "BCC Configuration Settings," on page 92
Section C.2.2, "Security Information for Other Products," on page 95
Yes/No Details
Yes Administrative users are authenticated via
eDirectory™.
Yes Users are authorized via eDirectory trustees.
Yes Access to the administrative interface is
restricted to valid users that have write rights
to the configuration files.
Yes Configurable through iManager
Yes Syslog on Linux. Fake syslog on NetWare.
Yes The following data is encrypted on the wire:
Intercluster communications
IDM data can be encrypted
No
Yes Intercluster communications for usernames
and passwords are encrypted. Cluster
credentials are stored encrypted in eDirectory.
Yes
C
Security Considerations 91