Best Practices Domino Security - Nash!

More documents

Recommendations

Info

Report Security Concerns/Bugs Don't discuss security issues/ potential vulnerabilities you find in public forums It is always best to send those concerns directly to vendors Normally thru support channels But there are also special addresses for some vendors security-alert@lotus.com security-alert@ibm.com security-alert@sun.com That way normally security risks are reported in public after a software vendor already published a fix
User Accounts/System Restrictions Domino on Windows uses the system account Domino on UNIX/Linux does not use the root account UNIX is designed as a Multi-Tasking and Multi-User Environment You can and should use different users for each Domino partition! e.g. notes1 , notes2 Resources like allocated local & shared memory, files are protected on user level Amount of resources used by a partition can be limited on OS level (e.g. security limits on AIX and Linux)
Page 2 and 3: Best Practices Domino Security BP11
Page 4 and 5: Agenda General Considerations Hardw
Page 6 and 7: An holistic approach to Domino Secu
Page 10 and 11: Network Security Network infrastruc
Page 12 and 13: Secure Shell (SSH) Linux Normally i
Page 14 and 15: Notes.ID Password Security Sadly th
Page 16 and 17: Password Quality Checking Use passw
Page 18 and 19: Security by Obscurity Hiding inform
Page 20 and 21: Sample ECL Settings
Page 22 and 23: Centralized ECL in Domino Directory
Page 24 and 25: ACL & Security Disable -Default- ac
Page 26 and 27: Security for Paranoid Admins Only a
Page 28 and 29: Know Issue with Reader&Author/Field
Page 30 and 31: UserNames List The user names list
Page 32 and 33: Internal Views ($ServerAccess) Is u
Page 34 and 35: Encryption of Local Databases Encry
Page 36 and 37: Caveats for Encryption Encrypted fi
Page 38 and 39: Web-Security "Anonymous"" matches b
Page 40 and 41: Stored Forms Stored Forms can be us
Page 42 and 43: Client Security Settings
Page 44 and 45: Check Effective access Check access
Page 46 and 47: Domino 6 Directory Assistance Suppo
Page 48 and 49: Full Access Administrators Addition
Page 50 and 51: Disable the Full Access Administrat
Page 52 and 53: New Agent-Restriction Settings Unre
Page 54 and 55: D6 Agent Manager Security Changes I
Page 56 and 57: Notes 6 User Client Access Security
Page 58 and 59:
Interesting Articles http://www.ibm
show all

Best Practices Domino Security - Nash!

Create successful ePaper yourself

Delete template?

Save as template?