Security Considerations; Security Features - Novell BUSINESS CONTINUITY CLUSTERING 1.2 - ADMINISTRATION Administration Manual

Security Considerations

1 3
Security administrators can use information in this section to understand how to configure and
maintain a business continuity cluster in the most secure way possible.
Section 13.1, "Security Features," on page 121
Section 13.2, "Security Configuration," on page 122
Section 13.3, "General Security Guidelines," on page 126
Section 13.4, "Security Information for Dependent Products," on page 126

13.1 Security Features

The following table contains a summary of the security features of Novell
Clustering 1.2:
Business Continuity Clustering 1.2 Security Features
Table 13-1
Feature
Users are authenticated
Users are authorized
Access to configuration information is
controlled
Roles are used to control access
Logging and/or security auditing is done
Data on the wire is encrypted by default
Data stored is encrypted
Passwords, keys, and any other
authentication materials are stored
encrypted
Security is on by default
Yes/No Details
Yes Administrative users are authenticated via
Novell eDirectory
configuring rights needed by BCC
administrators, see
eDirectory 8.8," on page
Yes Users are authorized via eDirectory trustees.
Yes Access to the administrative interface is
restricted to valid users who have write rights
to the configuration files.
Yes Configurable through iManager.
Yes Syslog on Linux.
Yes The following data is encrypted on the wire:
Inter-cluster communications
Identity Manager data can be encrypted
No
Yes Inter-cluster communications for usernames
and passwords are encrypted. Cluster
credentials are stored encrypted in eDirectory.
Yes
®
Business Continuity
TM . For information about
Section 4.1.5, "Novell
40.
Security Considerations
13
121