Avaya Media Processing Server Series System (Software Release 2.1) Manual de usuario descargar pdf (Pagina 299)

Security

# P0602477 Ver: 3.1.11 Page 299

Secure Shell

Avaya NPopenSSH is a consolidated package of the Secure Shell openssh product and

its requirements, such as ssl and zlib. This package is certified by Avaya

Verification and Validation labs after tests on the sun4u architecture.

In case, your organization's security policy mandates use of your specialized

implementation of secure shell, use the pkgrm command to remove NPopenSSH.

Once it is removed, you can install your version implementation of the secure shell.

If your system was built by Avaya Manufacturing, then NPopenSSH will be installed

automatically. To turn on openssh, execute the following as the root user:

• cd /etc/rc2.d

• mv s98openssh S98opensshd

• ./S99openssh start

Securing the system:

After installing Secure Shell, perform the following actions to secure your system:

a) Disabling remote services

The rsh and ftp commands are replaced by ssh and sftp respectively.

Remote services like telnetd, rshd, and ftpd can be disabled to force the use of

secure shell. To disable them, edit /etc/inetd.conf and comment out the

services.

You can disable services not in use. However, DO NOT disable tftp, bootpd or

CCLP services in the etc/inetd.conf. as they are required to boot the tms and

mps processors.

The following services should remain enabled if you use features that require them.

• uucp - required for ppp remote Avaya support

• rstatd - required for the openwindows performance monitor, and PERIprpt

statistics reporting.

• daytime - required synchtime to synchronize the time on one machine from

with another.

b) Disabling X Windows (X11)

X Windows (X11) can be forced to operate over the secure shell, by disabling it from

listening to the tcp connections.

Follow the following steps to disable X Window from listening to tcp connections:

1 Locate the Xservers files residing in /etc/dt/config and

/usr/dt/config. Add the string "-nolisten tcp" to the uncommented

line that contains Xsun.

1 2 ... 294 295 296 297 298 299 300 301 302 303 304 305 306

Sin comentarios

Avaya Media Processing Server Series System (Software Release 2.1) Manual de usuario Pagina 299