Manage security

Questions about managing security.

Concept definition.

Can I block project data from public search engines?
Yes, edit the robots.txt file to specify the pages or directories that should not be indexed by search engines.
How can I enforce strong passwords?
You can configure the application to reject passwords that do not meet your security criteria.
How do I configure Subversion to authenticate against multiple LDAP domains?
For some configurations, a Subversion server may need to be authenticated against multiple LDAP domains. This is possible by modifying the Apache configuration.
How do I authenticate multiple LDAP via Apache?
If you need to add multiple OU= values in the LDAP url you must have separate LDAP urls and utilize AuthnProviderAlias to check both LDAP searches.
After switching to ADS authentication, why did the Create button disappear from the user admin section?
When using external authentication such as LDAP, creating users from within the application is disabled. All users must be created via LDAP.
How does TeamForge authenticate CVS users?
CVS is treated as a special case when managed by a TeamForge site. It is not authenticated in the same way as SOAP API clients.
Can the users be forced to change their passwords at first login?
Yes, as a site administrator you can configure the CollabNet TeamForge site options to force the users to change their passwords at first login.
Does TeamForge work with LDAP?
Yes, you can have your TeamForge installation authenticate against an LDAP server.
Why do I get the "Invalid command 'AuthLDAPAuthoritative'" error when I try to set LDAP for SVN users?
The invalid command AuthLDAPAuthoritative error may occur if you need to upgrade Apache from version 2.0 to 2.2.
How does TeamForge handle multiple redundant LDAP servers?
When configuring LDAP authentication for a TeamForge instance, there may be a business need for using multiple LDAP servers.
What user activities are tracked?
In case of a data security compromise, a record of who is performing what activities will help resolve some of the security issues.
What is a CERT advisory?
CollabNet Product Support monitors the CERT coordination center (http://www.cert.org/) for notification of vulnerabilities or exploits against applications that CollabNet TeamForge provides.
J2EE Architecture and security
CollabNet TeamForge is a J2EE application that employs three-tier architecture to provide a secure environment for mission-critical data.
Which ports are required to be open for a TeamForge site?
The components of a CollabNet TeamForge installation listen on a number of operating system ports.

Parent topic: Frequently asked questions about CollabNet TeamForge 16.7