40.2 Securing the Vibe Software

40.2.1 Protecting the Vibe Configuration Files

The Novell Vibe configuration file (installer.xml) for the Vibe software should be protected from tampering. It contains username and password information for Vibe features that interact with other programs.

The initial installer.xml is created in the same directory where the Vibe Installation program is run. Backup copies are stored in:

Linux:

/opt/novell/teaming/teaming-config

Windows:

c:\Program Files\Novell\Teaming\teaming-config

40.2.2 Protecting the Vibe Properties File

The Vibe properties file (ssf.properties) should be protected from tampering. Like the Vibe configuration file, it contains username and password information, as well as many other details about your Vibe site configuration. The Vibe properties file (ssf.properties) is located in the following directory:

Linux:

 
/opt/novell/teaming/apache-tomcat/
                                webapps/ssf/WEB-INF/classes/config

Windows:

 
c:\Program Files\Novell\Teaming\apache-tomcat\
                                webapps\ssf\WEB-INF\classes/config

40.2.3 Protecting Log Files

The log files for Vibe and Tomcat should be protected against access by unauthorized persons. Log files contain very detailed information about your Vibe system and Vibe users.

The Vibe log file is available in the following directory of your Vibe installation:

Linux:

 
/opt/novell/teaming/apache-tomcat/webapps/ssf/WEB-INF/logs

Windows:

 
c:\Program Files\Novell\Teaming\apache-tomcat\
                                         webapps\ssf\WEB-INF\logs

The Tomcat log file is available in the following directory of your Vibe installation:

Linux:

/opt/novell/teaming/apache-tomcat/logs

Windows:

c:\Program Files\Novell\Teaming\apache-tomcat\logs

40.2.4 Protecting the Vibe Process on Linux

On Linux, Vibe is installed to run as a user other than the Linux root user. See Linux User ID for Vibe in Basic Installation in the Novell Vibe 3.4 Installation Guide.