Security and Stability

1. Number of concurrent users
2. Need for high availability and redundancy
3. Number of sites or locations
4. Number of users connecting from the road

2014-09-18 Security and Stability Discussion

• Introduction
• 0:01:45 Today's topics
• 0:03:45 Installation Script
• 0:08:30 Operating System
• 0:09:45 Database
  • 0:11:15 - backup strategies
  • 0:16:00 - hot-standby replication
  • ACTION: upgrading the Ubuntu OS should upgrade your PostgreSQL instance as well.
  • As a result of this discussion, I created a chuboe_ubuntu_upgrade.sh in the chuboe_utils directory.
  • I also updated the cronJobs.txt file to include an entry for running weekly upgrades.
• 0:18:00 Web Server (WebUI)
  • Note: I updated the chuboe_hg_bindir.sh to be able to run it daily to create a daily commit.
  • I also updated the cronJobs.txt to include an entry for this script.
• 0:24:00 AWS (Amazon Web Service) for cloud hosting
  • 0:27:30 Using Security Groups as cocoons
• 0:32:45 iDempiere Security (Role management)
  • ACTION: is there a log when someone exports: No
  • I created an experiment:
    • Set logs to "Finer"
    • Export all products
    • Look at log for key term "Export" - nothing
    • Looked at AD_ChangeLog - nothing
    • Looked through logs of any sign of an export - nothing that I could audit.
• 0:39:00 iDempiere Security (user security)

Crowd Sourced Security

• https://crowdsec.net/

Other topics not mentioned in the first video

1. SSL for all user transactions
2. Removing the version from the login
3. Changing permissions on the idempiereENV.properties file to where only the idempiere system user can access it
4. Preventing access to the database except for specific machines in the same subnet.
5. Server vulnerability scanning - options and techniques discussed here
6. iDempiere newer security features

Security Discussion by Carlos Ruiz