IT Baseline Protection Manual - The Information Warfare Site

Threats Catalogue Deliberate Acts Remarks
____________________________________________________________________ .........................................
T 3.25 Negligent deletion of objects
Novell Netware 4.x makes it possible, for the first time, to delete the Admin
object which will be created automatically during installation. This object,
which replaces the Supervisor familiar from Netware 3.x, is created during the
very first installation of a Netware 4 network and initially possesses all
administration rights. Its ability to delete this object creates the following
potential threats:
- If no replication of the administrator ("repl.-admin") is created as an
object inside NDS, it could become impossible to administer the NDS or
individual containers. This would make it necessary to re-install the NDS
and to re-create all the contained objects, which could lead to a complete
breakdown of the Netware 4 network.
- In a decentrally administered Netware 4 network, administrators are
usually configured at the organisational level (container level). The IRF
(inherited rights filter) makes it possible to restrict or disable the
inheritance of rights by other administrators to subordinate organisations,
so that only the decentral administrator possesses all rights. If this
administrator isdeleted from the NDS, an entire organisational unit can no
longer be managed, because the other administrators do not have access to
this container. Because of the decentral administration (distribution of
administrative tasks) it is no longer possible to manage the container from
other administrators.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000