Blugsphere2011 admin

BLUGsphere 2011 Administration Sessions Overview

Who am I .... Scott Beattie [email_address] I've worked in the Domino Admin space since v4.5. Dyno Nobel / Incitec Pivot - We make fertiliser and industrial explosives . ~3500 users and 60+ servers across 5 continents

Why did I go to Lotusphere?
Sametime 8.5.1
Access the best resources in the industry
Strategy
Global team building
I built the business case and identified the value.

Lets talk about the Sessions SHOW102 – Statistics and Events Base Camp Andy Pedisich, Rob Axelrod JMP301 – Master Class: Defence Against The Dark Arts Andrew Pollack, Gabriella Davis

SHOW102 – Statistics and Events Base Camp
Andy Pedisich, Rob Axelrod
Driving your Domino servers
You can learn a lot about the importance of monitoring from driving your car
When you’re behind the wheel, your car tells you a lot about what’s going on
How fast you’re going
How much gas you have
Whether your lights are on
How hot your radiator is
You know about these things because your car told you about them
And you know they’re important because you pay attention to them
You fill the gas tank when it’s low
You (usually) pay attention to the speedometer so you won’t get a ticket
Or maybe you’re the kind of driver who thinks that red oil light on the dash is just for ambience while you’re driving at night

SHOW102 – Statistics and Events Base Camp Andy Pedisich, Rob Axelrod Ensure your events4.nsf is a replica throughout your environment Database Replica ID NAMES.NSF 852564AC: 00 4EBCCF CATALOG.NSF 852564AC: 01 4EBCCF EVENTS4.NSF 852564AC: 02 4EBCCF ADMIN4.NSF 852564AC: 03 4E BCCF Note that the first two numbers after the colon for the replica of NAMES.NSF in every domain are 00 Note that the first two numbers after the colon for the replica of the EVENTS4.NSF Monitoring Configuration database are 02

SHOW102 – Statistics and Events Base Camp Andy Pedisich, Rob Axelrod Where can we get this revised version of STATREP.NSF? This special version of the IBM/Lotus Monitoring Results database available at: http://www.andypedisich.com/blogs/andysblog.nsf/dx/resources.htm The filename is Statrep85Technotics.ntf Download this file to your Lotus Notes data folder Select the file and use the File...Replication...New Replica menus The session went on to explain the “correct” use of DDM and probes. The full presentation is available via http://www.andypedisich.com/ click the tag cloud LS11

JMP301 – Master Class: Defence Against The Dark Arts
Andrew Pollack, Gabriella Davis
Scenario based security review.
Cast of characters
The Nosy Co-Worker
The Paranoia Personified
The “Loser”
The Rogue Developer & His Junior Sidekick
The Engineering Genius
Helpful Helpdesk Support
Script Kiddies & Spammers
The Bitter Ex-Admin
The Super Villain

The Nosy Co-Worker
Scooby doesn’t mean any harm, he just wants to know what’s going on
He fancies himself as a bit of a techie
Or he just likes to know stuff others don’t
He won’t do anything deliberately illegal
He likes to know about the latest Lotus news and developments

The Nosy Co-Worker
Using Someone Else’s ID
He has been given someone else’s id by IT
Usually because no-one knew how to get him access in a hurry to an application he needed
He has been given someone else’s id by that person
To work on that person’s calendar
To access / work on an application he doesn’t have direct access to on their behalf
He found an id on a machine he was using and guessed the password

The Nosy Co-Worker
Using Someone Else’s ID
Turn on public key and password checking for ids to prevent old passwords / ids being used
Turn on password checking on Notes Ids
No we have ID Vault we can reset passwords for Notes IDs easily so this becomes a more viable option
Server Document - Security Page
Public Key Checking will verify if the public key in the user id matches the public key in their person document. If an ID is compromised, simply recertifying it will immediately invalidate the old id as the public key it has will no longer match
You can enable public key checking to simply log mismatches rather then block access, so you can monitor access with old ids
Password checking forces the server to retain a digest of the last known password used by the user’s Notes ID. When a user attempts to log with an old ID to which they may have known the password, the login will fail as the server can tell it is not using the most up to date password for that ID.
You can invalidate old copies of an ID simply by setting a new password for it

Key points that I took away
Protect yourself – As Domino Administrators we are exposed.
More threats are internal than external
I don't care what your policy is...
http://en.wikipedia.org/wiki/Stuxnet
You cannot beat a REAL hacker....
Full presentation at http://www.turtlepartnership.com

Other Sessions the YOU need to get
... google is your friend
BP101 - Adminblast 2011
ID508 - Sametime Audio/Video Conferencing
People YOU need to look up...
Chris Miller @idonotes
Paul Mooney @pmooneynet
Andrew Pollack @FirefighterGeek
Gabriella Davis @gabturtle
Carl Tyler @FlyBoyTyler

Questions ? Thanks....

http://www.auslug.org	304
http://auslug.org	36
http://jedi.iteam.com.au	1
http://translate.googleusercontent.com	1

Blugsphere2011 admin

by AusLUG on Mar 27, 2011

Accessibility

Upload Details

Usage Rights

4 Embeds 342

Statistics

Blugsphere2011 admin Presentation Transcript