How does TeamForge manage security?

TeamForge is a secure, centralized, enterprise-grade solution for optimizing distributed development.

A number of factors go into ensuring security, for detailed information about TeamForge security management see How does CollabNet SourceForge Enterprise 5.0 manage security?

• What are the minimum ports to keep open for a TeamForge site?
  The components of a CollabNet TeamForge installation listen on a number of operating system ports. A small subset must be exposed externally to enable users to access TeamForge services. Any port that is not absolutely needed must be closed.
• How does CollabNet TeamForge help protect data access?
  Access to data must be strictly controlled to meet the security requirements of the enterprise. Strict data access control is achieved through a combination of firewalls, authentication, and authorization.
• What user activities are tracked?
  In case of a data security compromise, a record of who is performing what activities will help resolve some of the security issues.
• How does CollabNet TeamForge help protect my data?
  Sensitive data must be protected from illegal access at various points in the system. Key areas where security is typically compromised include data transmission and data storage.
• J2EE Architecture and security
  CollabNet TeamForge is a J2EE application that employs three-tier architecture to provide a secure environment for mission-critical data.
• What security tools come with CollabNet TeamForge ?
  In addition to employing industry standard security protocols, CollabNet TeamForge provides an extensive access control model for fine-grained control and powerful tools to audit and track changes.
• What is a CERT advisory?
  CollabNet Product Support monitors the CERT coordination center (http://www.cert.org/) for notification of vulnerabilities or exploits against applications that CollabNet TeamForge provides.
• How does TeamForge authenticate CVS users?
  CVS is treated as a special case when managed by a TeamForge site. It is not authenticated in the same way as SOAP API clients.
• How do I configure Subversion to authenticate against multiple LDAP domains?
  For some configurations, a Subversion server may need to be authenticated against multiple LDAP domains. This is possible by modifying the Apache configuration.
• How do I authenticate multiple LDAP via Apache?
  If you need to add multiple OU= values in the LDAP url you must have separate LDAP urls and utilize AuthnProviderAlias to check both LDAP searches.
• After switching to ADS authentification, why did the Create button disappear from the user admin section?
  When using external authentication such as LDAP, creating users from within the application is disabled. All users must be created via LDAP.
• Does TeamForge work with LDAP?
  Yes, you can have your TeamForge installation authenticate against an LDAP server. This is handy when users want to use a variety of different resources without having to maintain credentials for each one separately.
• Why do I get the "Invalid command 'AuthLDAPAuthoritative'" error when I try to set LDAP for SVN users?
  The invalid command AuthLDAPAuthoritative error may occur if you need to upgrade Apache from version 2.0 to 2.2.
• How does TeamForge handle multiple redundant LDAP servers?
  When configuring LDAP authentication for a TeamForge instance, there may be a business need for using multiple LDAP servers. Follow the guidelines below for configuring.
• Can the users be forced to change their passwords at first login?
  Yes, as a site administrator you can configure the CollabNet TeamForge site options to force the users to change their passwords at first login.