Community Tech Tip: Building a Secure FTP Server

A community tech tip on our wiki shows how to create a secure FTP server with the FTP daemon running as a non-root user, listening on chosen user-defined ports, in a chroot jail environment. See also the Appendix with a complete file list for the FTP jail environment.

Posted at 09:00AM Oct 15, 2008 by CM and KP in BigAdmin  | 

Monitoring superuser Access (Tip in English and Portuguese)

New on the BigAdmin wiki: Security Tech Tip by Nuno Rocha on monitoring superuser access. Want to monitor who is using the su command? This tip shows how to ensure the Solaris 10 OS records all superuser attempts in the /var/adm/sulog file.

Posted at 09:00AM Sep 25, 2008 by CM and KP in BigAdmin  | 

Adaptive Security Weblog: The Future of IT Security

Read this blog from Sun's Global System Engineering (GSE) Security Team, aka Glenn Brunette, Joel Weise, Rafat Alvi, and Bart Blanquart. Adaptive security offers a long-term vision for how IT systems will be designed, implemented and managed in the future.

Posted at 09:00AM Sep 12, 2008 by CM and KP in BigAdmin  | 

Anonymous Access and Solaris native-ldap Clients

Since anonymous access to an entire directory tree can be a security risk, this blog posting clarifies what anonymous access is required by Solaris native-ldap clients. When Solaris native-ldap clients are
initialized they require anonymous access to the Sun Java System Directory Server's baseDN and ou=profile container. The acis here 
configure the appropriate access.

Posted at 09:00AM Aug 28, 2008 by CM and KP in BigAdmin  | 

Updated Security Deep Dive for the Solaris 10 OS

Glenn Brunette has updated his 93-page presentation covering Solaris security goals, Solaris 9 security review, and Solaris 10 security.

Posted at 09:00AM Aug 26, 2008 by CM and KP in BigAdmin  |  Comments[2]

Using OCSP With Apache mod_nss and Solaris 9 OS

Here's an article explaining how to use mod_nss with Apache to support Online Certificate Status Protocol (OCSP), which can be important when using single sign-on (SSO).

Posted at 09:00AM Aug 19, 2008 by CM and KP in BigAdmin  | 

Solaris Trusted Extensions for Corporate Deployments

Want to put a security framework around your local and global zones? This aticle explains how to deploy Solaris Trusted Extensions and describes the interactions between systems that have this technology and systems that do not.

Posted at 09:00AM Jul 04, 2008 by CM and KP in BigAdmin  |  Comments[2]

Slide Presentations From 2008 JavaOne Conference Now Available

PDF slides from the 2008 JavaOne Conference technical sessions are now available. Multimedia files for 150 of the technical sessions will be available in late June. Take a look.

Posted at 01:32PM Jun 03, 2008 by GD in JavaOne  | 

Interview: Managing the Top Five Security Threats on the Web

Read Inner Circle newsletter's interview with two security experts at Sun: Glenn Brunette, Distinguished Engineer, and Rafat Alvi, Principal Engineer.

Posted at 09:00AM May 19, 2008 by CM and KP in BigAdmin  | 

Access Control and Auditing Features in the Solaris 10 OS

Role-based access control (RBAC), privileges, auditing, and the Basic Audit Reporting Tool (BART) are security features of the Solaris OS. This article links to tutorials about these features that were created by OpenSolaris community members.

Posted at 09:00AM Mar 27, 2008 by CM and KP in BigAdmin  | 

Updates to Java SE 6 Platform and Earlier Versions

Sun released updates today for the following:

• JDK and JRE 6 Update 5


• JDK and JRE 5.0 Update 15


• SDK and JRE 1.4.2_17


• SDK and JRE 1.3.1_22

Get details from the Sun security blog, and check the Java SE download page for updates.

Posted at 02:58PM Mar 04, 2008 by GD in Core Java  | 

Updates: Sun Java System Directory Server 6.0 as an LDAP Naming Service

"Part 1 -- Installation and Configuration" has a lot of new info on configuring SSL using CA-signed certificates. See the section on "Configuring SSL and the idsconfig Script".

Posted at 07:04AM Feb 12, 2008 by CM and KP in BigAdmin  | 

Tech Tip on BigAdmin Wiki: Remote Updating With sudo

Here's a new community submission on remote updates using rdist and rsync with sudo. You can use rdist and rsync over ssh from a master machine and use sudo on the client machines from a non-privileged account.

Posted at 09:00AM Jan 14, 2008 by CM and KP in BigAdmin  | 

Tips on Using SSH With Sun Cluster Software

A long-time BigAdmin contributor sent in these two tech tips: Using ssh to Access Logical Nodes in a Cluster Environment and Setting Up crlogin to Work via SSH Using Sun Cluster 3.0/3.1 Software. The first tip shows how to avoid problems when using SSH on a logical node, or when using automatic authentication. The second offers steps for using SSH with crlogin, which makes it easier to administer multiple servers or clusters.

Posted at 09:00AM Jan 08, 2008 by CM and KP in BigAdmin  | 

Solaris Trusted Extensions Technical FAQ

This FAQ answers technical questions about Solaris Trusted Extensions. Topics span NFS protocols, remote login to a labeled zone, and much more.

Posted at 09:00AM Dec 05, 2007 by CM and KP in BigAdmin  |