Xerox 701P40211 manual Security Setup, DocuSP 3.7 security changes

Page 28

Security and Network Setup

System Guide

Xerox is constantly evaluating the security of the DocuSP controller and the Sun Solaris operating system. Xerox is committed to providing the latest Solaris security patches provided by Sun Microsystems in each major DocuSP release. The DocuSP development team will also add Solaris security patches in between major release cycles. All OS security patches for applications that are added during a standard DocuSP install will be included, even if the application code is not normally used by DocuSP users. Security patches for applications that are not loaded by a standard DocuSP install will not be evaluated or included. Only the version of a patch impacting security will be included. If a security patch has a newer version that is not security related, then this patch will not be updated to the newer version. Any security patch that is determined to have a negative impact to DocuSP operation will not be added.

Security Setup

System Security can be selected from the DocuSP. Select [Medium] security to disable everything in the list of secure features. Select [High] to enable security and to turn security on for everything in the list of secure features.

If you have upgraded your DocuSP software from 3.6 to 3.7 and you are having difficulty with application software that communicated with the controller, set security to Medium to resolve the problem.

DocuSP 3.7 security changes

To assist DocuSP customers, XDSS (Xerox DocuSP Security Script) was added in the 3.12 software release to help secure the operating system from unauthorized access and modification. The DocuSP install routine prompted Xerox service personnel to determine whether XDSS should be run. In addition, the XDSS scripts were made resident on the controller so that they could also be run by the customer at any time.

4-4	Common Controller

Image 28

Contents Xerox Document Services Platform Series USA Table of Contents Table of Contents Finishing PrintingFonts Troubleshooting Accounting and BillingHints and Tips Table of Contents Table of Contents System Guide Viii Introduction ContentsAbout this guide Conventions Customer SupportGateway Configuration Internet Services Http Gateway ConfigurationType cd /opt/XRXnps/XRXipp IPP Gateway ConfigurationGateway Simple Network Management Protocol Snmp Configuration Administrator must enable Snmp in License ManagerConfiguration variables SnmpdebuglogPrinter and job messages Snmp MIB SupportGateway Configuration System Guide NDS Setup Type cd /opt/XRXnps/XRXnwqsgw/binGateway Configuration System Guide Common Controller Backup and Restore BackupRestore Backing up a System Type restore Restoring a SystemSecurity and Network Setup Access and SecurityOverview of Security Changing the logon levelRoles and responsibilities User Password changesXerox responsibility Security Setup DocuSP 3.7 security changesUsing the High security setting Security and Network Setup System Guide User and File-level changes User levelMulticast routing disabled Solaris file permissions securedOS and host information hidden Sendmail daemon securedNetwork parameters secured Executable stacks disabled Remote CDE login disabledDocuSP router capabilities disabled NFS port monitor restrictedConfigure-xdss script DigiPath and Decomposition ServicesXdss script components Disabling LP Anonymous PrintingRemote shell internet service Disable-security and enable-security scriptsEnable-ftp and disable-ftp scripts User Account ManagementPrint command line client from remote systems Configure for xrxusr Other security tipsSample of inetd.conf file Document and backupOnline help for security # Syntax for TLI-based Internet services # only on machines acting as boot servers Orstream or dgram #rexd/1 tli rpc/tcp wait root /usr/sbin/ rpc.rexd rpc.rexd Quick reference How Do I? AnswerHow Do I? Answer Printing Controller settings for limited Fifo scheduling/printingFirst In/First Out Fifo Printing Enable/Disable Fifo Job Scheduling ‘Enabling Fifo Job Scheduling’Enabled Disabled ‘No Change Made’Impact on DocuSP printers Ascii and PCL Printing UtilitySetpclcontrol Utility Set lp/lprcopycount utility Socket Gateway Configuration Utility setVPSoption # ./setVPSoption -2NONVPSTiff orientation Tiff filesPerformance considerations Resolution Units Supported Tiff tagsCompression T4 OptionMicr Enablement Y ResolutionStrip Byte Counts and Strip Offsets Tile Width, Tile Length, Tile Offsets, Tile Byte CountsUsing Vipp Paper TraysPrinting hints Printing System Guide Common Controller Subset Finishing FinishingDocuTech Creating jobs to use subset finishing Subset Offset Page Level JogPCL Offset/Separator/Subset Finishing command Mixed Stacking PCL Paper Source CommandLarge Capacity ESC&15H Envelope Feed ESC&16H Additional finishing information Finishing System Guide Common Controller Fonts How to choose fontsFonts Resident Fonts Font download optionPostScript Resident Fonts System GuideFonts FontsSystem Guide PCL resident fonts Non Resident Fonts PCL 5e resident bitmap fontsDownloaded fonts Font substitution Optional or soft fontsPostScript fonts PCL 5e fonts Accounting and Billing AccountingAuto exporting accounting log Accounting exported valuesAccounting file fields System Guide Accounting and Billing Bytes Seconds ReadProcessed SkippedAccounting and Billing System Guide Sheets Printed Pages PrintedAccounting and Billing System Guide Billing Billable EventsBilling Meters Market Region Billing Meters for RegionCalling for service TroubleshootingDeclared faults Printer fault Undeclared faultsJob fault Windows problems Client problemsMacintosh problems DigiPath problems GUI problemsPrint Quality problems Font problemsJob flow problems Inoperable system problemsAt the # prompt, typesync sync halt and press Enter System Guide Troubleshooting PDL problems Job Integrity problemsPostScript problems Tiff problems Restore password Productivity and performance problems Restart DocuSP software without rebootingProblems when saving a job Printing system logs AlljobslogSystemlog StatuslogEpexceptionlog and epprimarylog Printing the system logsPrinting the accounting log Rebooting and restartingType sync sync halt Loading XJDC/Unix Opt/XRXnps/bin/XJDC -option,option... filenameConfiguring XJDC/Unix Xjdc Hints and TipsOutput files BASIC.JSLTroubleshooting System Guide Hints and Tips GeneralColor Systems General CommentsTime used to generate the PDL Time used to transfer PDLTime required to print PDL Job submission hints Number of imagesEthernet GatewaysJob RIP Hints Job submission orderVariable data Image Quality Job Printing Hints Skipped PitchesPCI Channel Interface PWB Trace Capture Procedure Perform a TraceExport the trace file to floppy Index NumericsIndex System Guide INDEX-3 Index INDEX-4 System Guide