Xerox 701P40211 manual Security and Network Setup, Access and Security

Page 25

4.Security and Network Setup

This section provides you with information on security regarding the DocuSP controller and the Solaris Operating System including access, changing logon levels, and enhancements of the Solaris OS. Also included are general guidelines to security related procedures that can be implemented to improve security of the DocuSP controller and the Solaris OS.

Access and Security

UNIX accounts are defined during the installation process:

•root: has super user access to the workstation. The initial password for this account is set during installation of the operating system and should be obtained from the Xerox service personnel.

NOTE: For security reasons, the root account password should be changed as soon as the Xerox service personnel have completed the installation.

•The Xerox user name is the account from which the Xerox software runs. Use the Xerox user password for this account. Contact your Customer Service Representative if this is unknown.

•ftp: an account to permit some clients to retrieve their software from the DocuSP controller using the TCP/IP communication protocol. This account will be set to Read Only access to the /export/home/ftp directory

•Pxrxsvc: the account for remote diagnostics by Xerox service personnel. The DocuSP controller is accessed using PPP communications via a modem.

NOTE: The user and group identifications, uid and gid, for the Xerox accounts that are listed above cannot be arbitrarily changed in the password and group files to new values because the software is based on the proper access to the Xerox supplied files.

Common Controller

4-1

Image 25

Contents Xerox Document Services Platform Series USA Table of Contents Table of Contents Finishing PrintingFonts Accounting and Billing TroubleshootingHints and Tips Table of Contents Table of Contents System Guide Viii Introduction ContentsAbout this guide Customer Support ConventionsInternet Services Http Gateway Configuration Gateway ConfigurationType cd /opt/XRXnps/XRXipp IPP Gateway ConfigurationGateway Administrator must enable Snmp in License Manager Simple Network Management Protocol Snmp ConfigurationSnmpdebuglog Configuration variablesSnmp MIB Support Printer and job messagesGateway Configuration System Guide Type cd /opt/XRXnps/XRXnwqsgw/bin NDS SetupGateway Configuration System Guide Common Controller Backup Backup and RestoreRestore Backing up a System Restoring a System Type restoreAccess and Security Security and Network SetupChanging the logon level Overview of SecurityRoles and responsibilities User Password changesXerox responsibility DocuSP 3.7 security changes Security SetupUsing the High security setting Security and Network Setup System Guide User level User and File-level changesSolaris file permissions secured Multicast routing disabledOS and host information hidden Sendmail daemon securedRemote CDE login disabled Network parameters secured Executable stacks disabledDocuSP router capabilities disabled NFS port monitor restrictedDigiPath and Decomposition Services Configure-xdss scriptXdss script components Disabling LP Anonymous PrintingDisable-security and enable-security scripts Remote shell internet serviceEnable-ftp and disable-ftp scripts User Account ManagementPrint command line client from remote systems Other security tips Configure for xrxusrSample of inetd.conf file Document and backupOnline help for security # Syntax for TLI-based Internet services # only on machines acting as boot servers Orstream or dgram #rexd/1 tli rpc/tcp wait root /usr/sbin/ rpc.rexd rpc.rexd How Do I? Answer Quick referenceHow Do I? Answer Printing Controller settings for limited Fifo scheduling/printingFirst In/First Out Fifo Printing ‘Enabling Fifo Job Scheduling’ Enable/Disable Fifo Job Scheduling‘No Change Made’ Enabled DisabledImpact on DocuSP printers Ascii and PCL Printing UtilitySetpclcontrol Utility Set lp/lprcopycount utility # ./setVPSoption -2NONVPS Socket Gateway Configuration Utility setVPSoptionTiff orientation Tiff filesPerformance considerations Supported Tiff tags Resolution UnitsCompression T4 OptionY Resolution Micr EnablementStrip Byte Counts and Strip Offsets Tile Width, Tile Length, Tile Offsets, Tile Byte CountsPaper Trays Using VippPrinting hints Printing System Guide Common Controller Subset Finishing FinishingDocuTech Subset Offset Page Level Jog Creating jobs to use subset finishingPCL Offset/Separator/Subset Finishing command Mixed Stacking PCL Paper Source CommandLarge Capacity ESC&15H Envelope Feed ESC&16H Additional finishing information Finishing System Guide Common Controller Fonts How to choose fontsFonts Resident Fonts Font download optionPostScript Resident Fonts System GuideFonts FontsSystem Guide PCL resident fonts Non Resident Fonts PCL 5e resident bitmap fontsDownloaded fonts Font substitution Optional or soft fontsPostScript fonts PCL 5e fonts Accounting Accounting and BillingAuto exporting accounting log Accounting exported valuesAccounting file fields System Guide Accounting and Billing Bytes Read SecondsProcessed SkippedAccounting and Billing System Guide Pages Printed Sheets PrintedAccounting and Billing System Guide Billable Events BillingMarket Region Billing Meters for Region Billing MetersCalling for service TroubleshootingDeclared faults Printer fault Undeclared faultsJob fault Windows problems Client problemsMacintosh problems GUI problems DigiPath problemsFont problems Print Quality problemsJob flow problems Inoperable system problemsAt the # prompt, typesync sync halt and press Enter System Guide Troubleshooting PDL problems Job Integrity problemsPostScript problems Tiff problems Restore password Productivity and performance problems Restart DocuSP software without rebootingProblems when saving a job Alljobslog Printing system logsSystemlog StatuslogPrinting the system logs Epexceptionlog and epprimarylogPrinting the accounting log Rebooting and restartingType sync sync halt Opt/XRXnps/bin/XJDC -option,option... filename Loading XJDC/UnixXjdc Hints and Tips Configuring XJDC/UnixBASIC.JSL Output filesTroubleshooting System Guide General Hints and TipsGeneral Comments Color SystemsTime used to generate the PDL Time used to transfer PDLJob submission hints Number of images Time required to print PDLEthernet GatewaysJob RIP Hints Job submission orderVariable data Image Quality Skipped Pitches Job Printing HintsPerform a Trace PCI Channel Interface PWB Trace Capture ProcedureExport the trace file to floppy Numerics IndexIndex System Guide INDEX-3 Index INDEX-4 System Guide