31.3 Securing the Teaming Site

31.3.1 Configuring a Proxy Server

Your Novell Teaming system should be located behind your firewall. If Teaming users want to access the Teaming site from outside your firewall, you should set up a proxy server outside your firewall to provide access. You can use Novell Access Manager to protect your Teaming site, as described in Configuring Single Sign-On with Novell Access Manager in Advanced Installation and Reconfiguration in the Novell Teaming 2.1 Installation Guide.

31.3.2 Setting the Teaming Administrator Password

The Novell Teaming site is initially installed to allow administrator access by using the username admin and the password admin. The Teaming administrator password should be changed immediately after installation, as described in Accessing Your Basic Teaming Site as the Site Administrator in Basic Installation in the Novell Teaming 2.1 Installation Guide.

31.3.3 Setting Up SSL Connections

All communication with the Novell Teaming site should be configured to use SSL connections, as described in:

31.3.4 Shortening the Teaming Session Timeout

By default, if a user’s Novell Teaming session is idle for four hours (240 minutes), Teaming logs the idle user out. For increased security for your Teaming site, you can make the session timeout shorter, as described in Changing the Teaming Session Timeout in Advanced Installation and Reconfiguration in the Novell Teaming 2.1 Installation Guide.

31.3.5 Using Role-Based Access Control

Novell Teaming controls all access to folders and entries by using role-based access controls. Teaming is intended to be used primarily for the sharing of information, so many default access rights tend toward allowing at least universal read access. For information on setting access controls for your Teaming site, see:

31.3.6 Monitoring Inbound E-Mail

You can configure Novell Teaming to receive e-mail and post the messages as entries in a folder, as described in Enabling Inbound E-Mail in Basic Installation in the Novell Teaming 2.1 Installation Guide. Because e-mail is inherently unsecure, there is no way to be sure that the senders are who they claim to be. Entries posted by e-mail include the e-mail address of the sender to alert Teaming users about the origin of the postings.

31.3.7 Preventing Web Services Access

The default Novell Teaming installation allows authenticated access via Web services, as described in Configuring Web Services in Advanced Installation and Reconfiguration in the Novell Teaming 2.1 Installation Guide. If you are not using Web services, you can disable them.

31.3.8 Controlling RSS Feeds

Because RSS readers are outside of the authentication Teaming system, the URL provided by Novell Teaming for an RSS feed embeds some authentication information about the user. This means that the RSS URL must be protected and not shared between users. For this reason, RSS is not recommended for use on highly sensitive data. If necessary, you can disable RSS feeds for your Teaming site, as described in Managing RSS Feeds in Advanced Installation and Reconfiguration in the Novell Teaming 2.1 Installation Guide.

31.3.9 Securing Mirrored Folders

Mirrored folders make files that are stored on a file system available to users on the Novell Teaming site. Two levels of security are provided for mirrored folder access: