Secure System Password Guidelines

No default passwords are used in the system, and the system ensures that permissions for generated files (such as temp files, configuration files, and log files) are as restrictive as possible so that they cannot be read or edited. During the system run time, all the passwords obtained, generated, stored, or transmitted are encrypted using password-based encryption (PBE).

Use the following guidelines to create user accounts during the Oracle Communications Session Delivery Manager installation:

  1. Use default database accounts that are restricted for access to the local (Oracle) server only. This includes creating an nncentral group and nncentral user account to set permissions and lock file systems.
  2. Create a sudo user account with limited privileges for running the SNMP Trap Relay port (162) for Fault Manager.

    Note:

    The main Oracle Communications Session Delivery Manager process has to run as a sudo user to access port 162.
  3. Configure passwords for the admin and LIadmin user groups before starting Oracle Communications Session Delivery Manager.