User Guide

76 Server Operating System Administration Guide
Server Operating System Administration Guide
103-000148-001
August 30, 2001
Novell Confidential
Manual 99a38 July 17, 2001
Changing the Signature Level for an NLM
NLM programs that use the Novell Runtime Libraries are assigned a default
NCP Packet Signature level that corresponds to the current signature level of
the server.
To change the packet signature level for a single NLM, use the following
command syntax when you load the NLM:
[LOAD] NLM [CLIB_OPT]/L number
Replace number with 0, 1, 2, or 3.
Setting Packet Signature for Job Servers
A job server is a server that performs a task and then returns the completed
task. Most job servers are third-party products.
You should be aware that some job servers do not support NCP Packet
Signature. A job server might produce unsigned sessions if one of the
following occurs:
 It does not operate on top of DOS
 It does not use standard Novell clients
 It is not an NLM
 It uses its own implementation of the NCP engine (such as embedded
print servers in printers)
Minimizing Risks
To minimize security risks associated with job servers, do the following:
 Install queues only on servers with signature level 3.
 Do not allow privileged users to put jobs in queues on servers with
signature levels below 3.
 Make sure the job server’s account is unprivileged.
 Disable the job server’s ability to change to client rights.
Disabling Change to Client Rights
To prevent a job server from assuming the rights of a client, add the following
SET command to the server’s STARTUP.NCF file:
SET Allow Change to Client Rights = OFF