Xerox 701P40211 manual Security and Network Setup System Guide

Page 30

Security and Network Setup

System Guide

•chargen (Sends revolving pattern of ASCII characters)

•time (Outdated time service)

•name (Obsolete IEN-116 name service)

•finger (Remote user information server)

•talk (server talk program)

•comsat (biff server - mail notification daemon)

•exec (remote execution server. Used by rexec command)

•dtspc (CDE Subprocess Control Service, for remote logins)

•rpc.rusersd (network username server)

•rpc.sprayd (records the packets sent by the spray command)

•rpc.rwalld (network rwall server)

•rquotad (Remote quota server. Used by the quota

•command to display user quotas for remote file systems)

•login (remote login server used by rlogin command)

•rstatd (used by performance meter)

•sadmind (Distributed system administration daemon)

•fs (Xfont server. Used by CDE to render fonts)

•amiserv (RPC Smart Card Interface)

•rpc.cmsd (Calendar manager service daemon)

•Tooltalk database server

•KCMS (Kodak Color Management System profile server)

•bwnfs ( Beame &Whiteside NFS, used by Hummingbird MaestroNFS)

The services previously listed are disabled by editing the /ect/ inetd.conf file. A complete example of the inetd.conf file setup with the high security setting can be found later in this chapter.

Other services are disabled by renaming its startup script in the appropriate /etc/rc#.d directory. These include:

/etc/rc2.d: • S40llc2 (Class II logical link control driver)

•S47asppp (Asynchronous PPP link manager, used for Xerox remote diagnostics)

•S70uucp (Unix to Unix copy server)

•S71ldap.client (LDAP daemon, caches server and client information for NIS lookups.)

4-6	Common Controller

Image 30

Contents Xerox Document Services Platform Series USA Table of Contents Table of Contents Printing FinishingFonts Troubleshooting Accounting and BillingHints and Tips Table of Contents Table of Contents System Guide Viii Contents IntroductionAbout this guide Conventions Customer SupportGateway Configuration Internet Services Http Gateway ConfigurationIPP Gateway Configuration Type cd /opt/XRXnps/XRXippGateway Simple Network Management Protocol Snmp Configuration Administrator must enable Snmp in License ManagerConfiguration variables SnmpdebuglogPrinter and job messages Snmp MIB SupportGateway Configuration System Guide NDS Setup Type cd /opt/XRXnps/XRXnwqsgw/binGateway Configuration System Guide Common Controller Backup and Restore BackupRestore Backing up a System Type restore Restoring a SystemSecurity and Network Setup Access and SecurityOverview of Security Changing the logon levelUser Password changes Roles and responsibilitiesXerox responsibility Security Setup DocuSP 3.7 security changesUsing the High security setting Security and Network Setup System Guide User and File-level changes User levelOS and host information hidden Multicast routing disabledSolaris file permissions secured Sendmail daemon securedDocuSP router capabilities disabled Network parameters secured Executable stacks disabledRemote CDE login disabled NFS port monitor restrictedXdss script components Configure-xdss scriptDigiPath and Decomposition Services Disabling LP Anonymous PrintingEnable-ftp and disable-ftp scripts Remote shell internet serviceDisable-security and enable-security scripts User Account ManagementPrint command line client from remote systems Configure for xrxusr Other security tipsDocument and backup Sample of inetd.conf fileOnline help for security # Syntax for TLI-based Internet services # only on machines acting as boot servers Orstream or dgram #rexd/1 tli rpc/tcp wait root /usr/sbin/ rpc.rexd rpc.rexd Quick reference How Do I? AnswerHow Do I? Answer Controller settings for limited Fifo scheduling/printing PrintingFirst In/First Out Fifo Printing Enable/Disable Fifo Job Scheduling ‘Enabling Fifo Job Scheduling’Enabled Disabled ‘No Change Made’Ascii and PCL Printing Utility Impact on DocuSP printersSetpclcontrol Utility Set lp/lprcopycount utility Socket Gateway Configuration Utility setVPSoption # ./setVPSoption -2NONVPSTiff files Tiff orientationPerformance considerations Compression Resolution UnitsSupported Tiff tags T4 OptionStrip Byte Counts and Strip Offsets Micr EnablementY Resolution Tile Width, Tile Length, Tile Offsets, Tile Byte CountsUsing Vipp Paper TraysPrinting hints Printing System Guide Common Controller Finishing Subset FinishingDocuTech Creating jobs to use subset finishing Subset Offset Page Level JogPCL Offset/Separator/Subset Finishing command PCL Paper Source Command Mixed StackingLarge Capacity ESC&15H Envelope Feed ESC&16H Additional finishing information Finishing System Guide Common Controller How to choose fonts FontsFonts Font download option Resident FontsPostScript Resident Fonts System GuideFonts FontsSystem Guide PCL resident fonts PCL 5e resident bitmap fonts Non Resident FontsDownloaded fonts Optional or soft fonts Font substitutionPostScript fonts PCL 5e fonts Auto exporting accounting log Accounting and BillingAccounting Accounting exported valuesAccounting file fields System Guide Accounting and Billing Bytes Processed SecondsRead SkippedAccounting and Billing System Guide Sheets Printed Pages PrintedAccounting and Billing System Guide Billing Billable EventsBilling Meters Market Region Billing Meters for RegionTroubleshooting Calling for serviceDeclared faults Undeclared faults Printer faultJob fault Client problems Windows problemsMacintosh problems DigiPath problems GUI problemsPrint Quality problems Font problemsInoperable system problems Job flow problemsAt the # prompt, typesync sync halt and press Enter System Guide Troubleshooting Job Integrity problems PDL problemsPostScript problems Tiff problems Restore password Restart DocuSP software without rebooting Productivity and performance problemsProblems when saving a job Systemlog Printing system logsAlljobslog StatuslogEpexceptionlog and epprimarylog Printing the system logsRebooting and restarting Printing the accounting logType sync sync halt Loading XJDC/Unix Opt/XRXnps/bin/XJDC -option,option... filenameConfiguring XJDC/Unix Xjdc Hints and TipsOutput files BASIC.JSLTroubleshooting System Guide Hints and Tips GeneralTime used to generate the PDL Color SystemsGeneral Comments Time used to transfer PDLEthernet Time required to print PDLJob submission hints Number of images GatewaysJob submission order Job RIP HintsVariable data Image Quality Job Printing Hints Skipped PitchesPCI Channel Interface PWB Trace Capture Procedure Perform a TraceExport the trace file to floppy Index NumericsIndex System Guide INDEX-3 Index INDEX-4 System Guide