Computer Security "How To" Guides

sidemenu

Security Home Page

Policy Guidelines

Support and Services

Meetings and Events

Sysadmin Round Table

Restricted Access

Windows

Adding the Kerberos realm to the login window
Setting a password on your local Windows 2000, XP Professional & 2003 accounts
Becoming NT AUTHORITY\SYSTEM on Windows
Common Windows Trojan/Application Startup Locations
Setting up IIS for Certificate authentication

Linux/UNIX

LDAP searching using SASL + GSSAPI authentication to Active Directory
Restricting root access with .k5users
Configuring X to not listen to the network

Macintosh

iPhone/iTouch

Installing Kerberos, GSSAPI SSH Client and KCA client on a iPhone/iTouch

Certificates

Quick Start to Certificates
How to get a Personal DOEGrids Certificate for FNAL Staff and Users
How to get a KCA (Kerberized Certificate Authority) Certificate
How to use certificates to sign and/or encrypt email messages
Trusting Certificates and downloading the CA Certificates
How to get a Host/Service certificate from DOEGrids

Kerberos

Ports Needed by Kerberos (Open in Firewalls)
Rules and Procedures for Using Special Kerberos Principals
Strong Authentication (Kerberos) manual
Template file for krb5.conf Kerberos configuration file [[krb5.conf template without AFS]] Pick one and rename to be /etc/krb5.conf on your system.
Kerberos configuration templates files for Mac OS X 10.7 (Lion) krb5.conf and without afs. Pick one and rename to be /etc/krb5.conf on your system.
Notes on Changing Your Kerberos Passwords

Web Management

How to get a Host/Service certificate from DOEGrids
How to Configure an IIS Web Server to use SSL
How to Configure an Apache Web Server to use SSL
How to make your web pages run SSL and optionally user certificate authentication

Grid Management

Kerberos principals to KCA certficate Distinguished Names for (people and cron or special principals)

Miscellaneous

Using TIssue
Configuring Offsite Email Access
Using Fermilab Webmail
Temporary issue with OpenSSH on Mac OS X and Scientific Linux 4
How-To Access Baseline Documents In DocDB

(more to come)

For assistance contact servicedesk@fnal.gov. Last change by FJN on March 12, 2012.
(Address comments about page to the Computer Security Team.)