IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
S 2.99 Secure set-up of Novell Netware servers
Initiation responsibility: Head of IT Section, IT Security Management
Implementation responsibility: Administrators
The security features within Novell Netware 3.x are not automatically
activated after initial start of the SERVER.EXE file. They must be individually
installed and configured via the system administration.
By using the program SYS:PUBLIC\SETPASS.EXE, the supervisor should
allocate a password to this account immediately after the first login. A
password should also be provided for the Guest account available as standard.
If the guest account is not needed during later use, it should be deleted.
Unauthorised login attempts should be prevented during the set-up phase via
DISABLE LOGIN (server console).
With the help of Novell Utilities SYS:PUBLIC\SYSCON.EXE under the menu
Supervisor Options most of the Novell security mechanisms can be installed
and configured. It should be considered that the settings made in the Default
Time Restrictions menu are only valid for all Novell Netware accounts on the
server, if these settings are made before the setting up of users and groups.
Relevant security menu points are listed below:
Default Account Balance/Restrictions
With the help of this menu item the following security settings for the Novell
Netware server are activated.
- Account has Expiration Date: With this function the validity of an
account can be limited to a certain time. Since an account is normally setup
on a long-term basis this feature will generally be activated only for a
guest account.
- Limit Concurrent Connections: With this function it is possible to limit
the number of simultaneous connections from one account to the Novell
Netware server. Generally, the number "One" should be selected here.
- Create Home Directory for User: An option to create a personal
directory for every user. The option "Yes" should be selected here.
- Require Password: Require Password installs the password entry
requirement for every user and, upon activation, rules for password
entry can be set. The option "yes" should be selected here.
- Minimum Password Length: With this function the required
minimum length of a password can be set. The minimum length should
be set to six characters (see below S 2.11 Provisions governing the use
of passwords). If the minimum length is set to less than five characters,
this will be shown when activating SYS:\SYSTEM\SECURITY.EXE
(see S 2.101 Revision of Novell Netware servers).
- Force Periodic Password Changes: With the setting "Yes" users will
be forced to change their passwords regularly. As a rule, this option
should be left active.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000