nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Security of TS

ProfessorX

My manager wants our TS server locked down big time. And I mean locked down.

We are using TS 5.5.2 and are behind a firewall but...
He is afraid that someone inside could...

Map to the IWserver drive...put something bad (a virus or something else) on it. Then run OD which is on the same server. Either buy running a script or by OD itself. Maybe even kicking off a wf that does file list deployments. We are using Symmetric Key Encryption for OD but...

He wants to run something like RSA or RSA "Clear Trust" using secure ID. This would not only be for IWserver drive but as well as for http to IW and http to OD.

Is he worrying too much or does he have a legitimate concern?
What R your thoughts?

Thanks in advanced.

The Professor-

Find more posts tagged with

Comments

Migrateduser

Is he worried about TS users or random people at the company? Random folks shouldn't be able to acess TS/TS filesystem, due to the OS level permissions...

TS users? That's another story, OS level security, roles, and workflow approvals work together to limit this risk.

8636.pdf

ProfessorX

I guess he is worried more about TS users... in a sense that currently only a few key people can move content to the production servers. but now potently any of our 25 teamsite users could

The Professor-

Adam Stoller

That sounds more like an issue for good workflow processes with decent review steps, than a security issue ...

--fish
(Interwoven Senior Technical Consultant)

ProfessorX

This issue has been rasied again. My manager now wants to be able to have users securly log on to teamsite

We are talking some sort of secure toekn when loggin into teamsite.....anyone try this?

Thanks in advance!
WIN2K TS/TST 5.5.2 sp5; OD 5.6.0.1; DD 5.5.2
The Professor-

bturns

What about having users log in through https?

ProfessorX

Not so much concerned about site security as opposed to 2 factor authentication. Like siteminder. Anyone try this?

Thanks in advance!
WIN2K TS/TST 5.5.2 sp5; OD 5.6.0.1; DD 5.5.2
The Professor-

skip11

Hi,

We're using Entrust to securely validate users logging into Teamsite. Server certs were ordered and installed
and perl script was written to present the user with a login splash page which has the various products
available (Webdesk, Webdesk Pro, OD and TS Admin). Only users with productive Entrust certs, correct GID, and
roles may access the system. Users without shell access to the systems (which are many - that's an important
security tool in and of itself) do NOT know thier teamsite password, users with shell access have a drop down
which allows them to change thier password from the originally encrypted one (kept in a secure location on the
server) to a new encrypted one they know. The update of the password syncs the secure TS password with their
shell password (/etc/shadow). It's working well, though we did have one hiccup when a system was patched and
the prompts for password changing coming from Solaris changed. The developer used the Expect module in
Perl to match the script prompts with the OS generated prompts, and since they no longer matched, the script
failed silently.

This type of secure validation is fully doable in a short period of time, IMO.

Ralph Barger
CSFS TOP
Zurich