IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Hardware & Software Remarks
____________________________________________________________________ .........................................
The SECURE.NCF file and its options
To enable a Novell Netware 4.11 server to utilise the extended security
mechanisms, attention should be paid to the following points:
- The SECURE.NCF file must be stored on the server in SYS:SYSTEM.
- The SECURE.NCF file is an executable file similar to a batch file under
DOS, and should therefore only be edited with an ASCII editor (e.g.
EDIT.NLM).
- The line "SET ENABLE SECURE.NCF=ON" must be inserted into
AUTOEXEC.NCF to call the SECURE.NCF file. Alternatively, the
command "SECURE" can also be inserted into AUTOEXEC.NCF or this
command can be issued on the server console.
The extract from the SECURE.NCF file given below shows only the
commands contained in the file. The original file contains a brief explanation
of each command.
SET ALLOW UNENCRYPTED PASSWORDS = OFF
SET ALLOW AUDIT PASSWORDS = OFF
SET AUTOMATICALLY REPAIR BAD VOLUMES = ON
SET REJECT NCP PACKETS WITH BAD LENGTHS = ON
SET REJECT NCP PACKETS WITH BAD COMPONENTS = ON
SET IPX NETBIOS REPLICATION OPTION = 0
SET ADDITIONAL SECURITY CHECKS = ON
# SET CHECK EQUIVALENT TO ME = ON
# SET NCP PACKET SIGNATURE = 3
# SECURE CONSOLE
## DISPLAY NCP BAD COMPONENT WARNINGS
## DISPLAY NCP BAD LENGTH WARNINGS
All command lines that are commented out with "#" are additional security
parameters and are not necessary for observance of the C2 or F-C2/E2
provisions. Command lines that are identified by "##" do not form part of the
standard scope of the SECURE.NCF file, but they represent a meaningful
benefit in everyday use.
The commands in detail
All commands and SET statements can also be issued at the console or be set
using the SERVMAN.NLM or MONITOR.NLM program.
All SET parameters in the SECURE.NCF file are described below, and the
default values are also specified.
SET ALLOW UNENCRYPTED PASSWORDS = OFF (Default=OFF)
The purpose of this parameter is to ensure the compatibility of Netware 2.x
clients and print servers. The consequence of setting the parameter to ON is
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000