Netscape DIRECTORY SERVER 6.02 - DEPLOYMENT Deployment Manual

Also see for NETSCAPE DIRECTORY SERVER 6.02: Configuration guide Installation guide Reference Administrator's guide Manual

Contents

Netscape DIRECTORY SERVER 6.02 - DEPLOYMENT Deployment Manual Manual pdf 123 page image

Analyzing Your Security NeedsChapter 7 Designing a Secure Directory 123For information about encryption methods provided in the Directory Server, referto “Password Storage Scheme,” on page 132. For information about signing data,refer to “Securing Connections With SSL,” on page 142.Conducting Regular AuditsAs an extra security measure, you should conduct regular audits to verify theefficiency of your overall security policy. You can do this by examining the log filesand the information recorded by the SNMP agents.For more information about SNMP, refer to Netscape Directory ServerAdministrator’s Guide.Example Security Needs AnalysisThe examples provided in this section illustrate how the imaginary ISP companyexample.com analyzes its security needs.example.com’s business is to offer web hosting and internet access. Part ofexample.com’s activity is to host the directories of client companies. It alsoprovides internet access to a number of individual subscribers.Therefore, example.com has three main categories of information in its directory:• example.com internal information• Information belonging to corporate customers• Information pertaining to individual subscribersexample.com needs the following access controls:• Provide access to the directory administrators of hosted companies (example_aand example_b) to their own directory information.• Implement access control policies for hosted companies directory information.• Implement a standard access control policy for all individual clients who useexample.com for internet access from their homes.• Deny access to example.com’s corporate directory to all outsiders.• Grant read access to example.com’s directory of subscribers to the world.