基于Novell目录系统的密码安全传输及审计功能分析

Analysis on Audit Function and Password Security Transport Based on Novell Directory System

针对国网河北省电力公司目录服务系统存在的问题,提出对该系统密码传输及审计功能模块的改造开发方案,从系统用户帐号密码安全性、用户帐号使用安全审计管理等方面,对目录服务系统用户帐号的安全审计监控能力进行分析,通过使用MD5加密存储、传输,增加目录前端审计代理,优化负载均衡F5配置等关键技术,实现了用户源地址追溯、访问行为记录等功能,进一步提升了目录系统运维管理水平。

Aiming at the problems of directory service system of State Grid Hebei Electric Power Corporation,this paper proposes reformation project of code transmission and audit module,analyses security audit monitoring ability of user account of Directory System aimed at the problems of password security and security audit management,realizes user source address traced and access behavior recorded by using technologies of MD5 encrypted storage and transmission,increasing Directory front-end audit agency,optimizing configuration of F5 load balance,promotes operation and maintenance management level of Directory System.