5.10 Planning Site Security

When you first log in to the Kablink Vibe site, you use admin as the Vibe administrator user name and admin as the password. You should immediately change the password to one of your own choosing when you are prompted to do so. If you do not immediately change the password, you can change the Vibe adminsitrator user name and password at any time, as described in Changing the Vibe Administrator User ID or Password in the Kablink Vibe 4.0.1 Administration Guide.

For optimum security, Vibe should not run as the Linux root user. For example, if an intruder manages to assume the identity of the Vibe program, the intruder gains all the privileges of the commandeered process. If the process is running with root user privileges, the intruder has root access to your system. If the process is running as a user with minimal privileges, the intruder has only restricted access to your system. Therefore, your system is more secure if the Vibe program does not run as root. For example, you might want to create a user named vibeadmin for the Vibe program to run as. Linux users require a full name and a password.

In addition to creating a Linux user for the Vibe program to run as, you can also create a Linux group for that user to belong to. This enables the Vibe program to create directories and files with consistent ownership and permissions. For example, you might want to create a group named vibeadmin for the vibeadmin user to belong to. Groups do not require passwords.

As an alternative to creating a custom Linux user name and group for Vibe, you can use the existing wwwrun user name and the www group. This account is typically used to start web server processes.

This is the administrator user ID that is used when logging in to the Vibe system. For enhanced security, you might want to change the user ID.

In the Default Administrator Name field, specify a new user ID for the vibe administrator.