Novell IFOLDER 3.8 - SECURITY ADMINISTRATION Manual 

2.10 Ensuring Privilege Separation for the iFolder Proxy User The iFolder Proxy user is a proxy user identity used to access the LDAP server to retrieve a list of authorized users. The proxy user is automatically created during the iFolder enterprise server configuration. The username is predetermined (hard-coded) on the system. For most deployments, this username should never change. Make sure that the user account assigned as the iFolder Proxy user is different than the one used for the iFolder Admin user and other system users. Separating ...

For information about configuring SSL features for these communications, see the following: � Section 2.3, “Enterprise Client/Server Communications,” on page 12 � Section 2.4, “Web Access Server Communications,” on page 12 4.4 Securing Wireless LAN Connections If SSL Is Disabled Protecting a wireless network requires forethought and planning, just as protecting a wired network does. Among the key protective measures to be undertaken are: � Enable WEP (Wired Equivalent Privacy) encryption, but do not rely on WEP alone to provide ...

2.10 Ensuring Privilege Separation for the iFolder Proxy User The iFolder Proxy user is a proxy user identity used to access the LDAP server to retrieve a list of authorized users. The proxy user is automatically created during the iFolder enterprise server configuration. The username is predetermined (hard-coded) on the system. For most deployments, this username should never change. Make sure that the user account assigned as the iFolder Proxy user is different than the one used for the iFolder Admin user and other system users. Separating ...

13 2.6 Configuring a Cipher Suite to Use for SSL/ TLS To ensure strong encryption, we strongly recommend the following configuration for the Apache server’s SSL cipher suite settings: � Use only High and Medium security cipher suites, such as RC4 and RSA. � Remove from consideration any ciphers that do not authenticate, such as Anonymous Diffie- Hellman (ADH) ciphers. � Disable the Low, Export, and Null cipher suites unless you need them for other applications. Do not disable the Low and Export cipher suites if they are ...

A.2 December 2007 Made editorial changes and revisions. The content is unchanged. A.3 October 2007 The following sections were added or changed: A.4 August 15, 2006 The following change was made to this section: Location Change Section 2.3, “Enterprise Client/Server Communications,” on page 12 All data are also sent to the server in the clear. For most deployments, this setting is maintained for performance. Currently, this setting cannot be changed. Section 2.12, “Controlling Access to the iFolder Data Store,” on page 14 Updated t ...