Xerox FREEFLOW 701P46740 User manual

Xerox FreeFlow® Print Server
Security Guide
Version 6.0, January 2007
701P46740

Prepared by:
Xerox Corporation
Global Knowledge and Language Services
800 Philips Road Bldg. 845-17S
Webster, New York 14580
USA
©2007 by Xerox Corporation. All rights reserved.
Copyright protection claimed includes all forms and matters of copyrightable material and information
now allowed by statutory judicial law or hereinafter granted, including without limitation, material generated
from the software programs displayed on the screen such as icons, screen displays, or looks.
Printed in the United States of America.
XEROX® and all Xerox product names mentioned in this publication are trademarks of XEROX CORPORATION.
Other company trademarks are also acknowledged.
Changes are periodically made to this document. Changes, technical inaccuracies, and typographic errors will be corrected in
subsequent editions.

Xerox FreeFlow Print Server Security Guide i
Table of contents
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1
About this guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1
Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1
Customer support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2
System supplied security profiles . . . . . . . . . . . . . . . . . . . . . . . 2-3
Enable and disable services. . . . . . . . . . . . . . . . . . . . . . . . 2-5
User level changes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-10
Solaris file permissions. . . . . . . . . . . . . . . . . . . . . . . . . . . 2-11
Disabling secure name service databases . . . . . . . . . . . . 2-11
Multicast routing disabled . . . . . . . . . . . . . . . . . . . . . . . . . 2-11
OS and host information hidden . . . . . . . . . . . . . . . . . . . . 2-11
Sendmail daemon secured. . . . . . . . . . . . . . . . . . . . . . . . 2-12
Network parameters secured . . . . . . . . . . . . . . . . . . . . . . 2-12
Executable stacks disabled. . . . . . . . . . . . . . . . . . . . . . . . 2-12
NFS port monitor restricted. . . . . . . . . . . . . . . . . . . . . . . . 2-12
Remote CDE login disabled . . . . . . . . . . . . . . . . . . . . . . . 2-12
Xerox FreeFlow Print Server router capabilities disabled. 2-12
Security warning banners. . . . . . . . . . . . . . . . . . . . . . . . . 2-13
Disabling LP anonymous printing . . . . . . . . . . . . . . . . . . . 2-13
Remote shell internet service . . . . . . . . . . . . . . . . . . . . . . 2-13
enable-ftp and disable-ftp . . . . . . . . . . . . . . . . . . . . . . . . . 2-13
Creating user-defined profiles. . . . . . . . . . . . . . . . . . . . . . 2-14
Setting the current and default profiles. . . . . . . . . . . . . . . 2-14
Account management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-14
Local users and groups. . . . . . . . . . . . . . . . . . . . . . . . . . . 2-14
Default user groups and user accounts . . . . . . . . . . . . . . 2-15
Creating user accounts. . . . . . . . . . . . . . . . . . . . . . . . . . . 2-16
Group authorization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-16
Auto-Logon. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-18
Default Screen/Auto-Logoff (Nuvera Only). . . . . . . . . . . . . . . 2-19
Password security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-19
Strong Passwords. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-20

Xerox FreeFlow Print Server Security Guide ii
Table of contents
Audit Logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-21
GUI Logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-21
User Activity on the System . . . . . . . . . . . . . . . . . . . . . . . 2-22
Date/Time User Login/Logout. . . . . . . . . . . . . . . . . . . . . . 2-22
Changing individual passwords . . . . . . . . . . . . . . . . . . . . 2-22
Accessing the Xerox FreeFlow Print Server through ADS . . . 2-22
Limiting access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-23
IP Filtering. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-23
Remote Workflow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-24
Secure Socket Layer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-24
Using the Print Server SSL/TLS Security Feature . . . . . . 2-24
Creating and Using a Self-Signed Certificate . . . . . . . . . . 2-25
Using an Existing Signed Certificate from a Certificate Author-
ity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-26
Digital Certificates. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-27
Network Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-27
Secure Print . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-29
MICR mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-29
Prevent Unauthorized Queue Changes . . . . . . . . . . . . . . . . . 2-30
Queue Lock . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-30
Roles and responsibilities. . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-30
Xerox responsibilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-30
Customer Responsibilities . . . . . . . . . . . . . . . . . . . . . . . . 2-31
Security tips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-31
Virus Scan. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-32
Online Help for security. . . . . . . . . . . . . . . . . . . . . . . . . . . 2-32

Security Guide 1
Introduction
The Security Guide provides the information needed to perform
system administration tasks for maintaining the Xerox FreeFlow®
Print Server.
About this guide
This guide is intended for network and system administrators
responsible for setting up and maintaining Xerox printers with
Xerox FreeFlow Print Server software. System administrators
should have an understanding of the Sun workstation, a familiarity
with Solaris, and with basic UNIX commands. This includes the
use of text editors such as vi or textedit and the ability to
maneuver within the Solaris environment. To enable them to
setup a customer site, system administrators are expected to have
a working knowledge of Local Area Networks (LANs),
communication protocols, and the applicable client platforms.
Contents
In general, this document covers information about the Xerox
FreeFlow Print Server that is not covered in the Online Help or
other available guides.
Conventions
This guide includes the following conventions:
•Angle brackets - Variable information that is displayed on your
screen is enclosed within angle brackets; for example, “Unable to
copy <filename>.”
•Square brackets - Names of options you select are shown in square
brackets; for example, [OK] and [Cancel].
•Notes are hints that help you perform a task or understand the text.
Notes are found in the following format:
NOTE: This is an example of a note.

2SecurityGuide
Customer support
To place a customer service call, dial the direct TTY number for
assistance. The number is 1-800-735-2988.
For additional assistance, dial the following numbers:
•Service and software support: 1-800-821-2797
•Xerox documentation and software services: 1-800-327-9753

Security Guide 3
Security
This section describes the Xerox FreeFlow®Print Server system-
supplied security profiles. It outlines the characteristics of each
profile and indicates how each can be customized to create user-
defined profiles. The enhanced security features in the Xerox
FreeFlow Print Server protect the system against unauthorized
access and modification.
This section also addresses the options available to the
administrator in setting up and managing user accounts.
Finally this section offers general guidelines to security-related
procedures that can be implemented to improve the security of the
Xerox FreeFlow Print Server controller and the Solaris OS.
System supplied security profiles
The four system-supplied profiles are: default operating system
only, low, medium, and high. The following table describes the
characteristics of each security level and the configurable settings
that restrict access to various devices and operating system
services.
NOTE: Customers have the option to setup and use custom
profiles. Custom profiles are copied from one of the system-
supplied profiles and provides the ability to enable/disable any of
the default settings. Multiple custom profiles can be saved on the
system.
Table 2-1 Security Profiles
Profile Characteristics User Compatibility Comments
Default
Operati
ng
System
Only
All ports are open.
Walkup users can reprint
anything.
Full workspace menu is
available.
Auto logon is enabled.
Physically
closed
environments.
Close to
DocuSP 2.1
and 3.1.
Similar to
DocuSP 3.X
“Medium”.
Anonymous FTP is
read-only and
restricted.
The Solaris
desktopis removed
from all settings
except none.

4SecurityGuide
NOTE: Regardless of the security profile, anonymous FTP is
Read-only with restricted access to /export/home/ftphome only.
Low FTP is enabled.
Telnet, rsh is disabled.
NFS client is enabled.
AutoFS is enabled.
Walkup users can reprint
from “Saved Jobs” and
CD-ROM.
Terminal window is
password protected.
Auto-login is enabled.
First choice
setting for
most
environments.
Similar to
DocuSP 3.x
“High”.
Supports
FreeFlow®
workflow.
Anonymous FTP is
ready-only and
restricted.
To enabletelnet,go
to [Setup], [FTP/
Remote
Diagnostics].
Medium FTP is disabled.
telnet, rsh is disabled.
NFS client is disabled.
AutoFS is disabled, e.g.; /
net/<hostname>and
home/<username> are
not automatically
mounted).
NFS server is filtered via
RPC tab.
Walkup user can reprint
from CD_ROM.
Terminal window is
password protected.
Auto-login is enabled.
Environments
requiring high
security but
with a need to
integrate
FreeFlow/
Digipath.
Supports
FreeFlow
workflow and
legacy
DigiPath
workflow.
Anonymous FTP is
ready-only and
restricted.
To enabletelnet,go
to [Setup], [FTP/
Remote
Diagnostics].
High FTP is disabled.
telnet, rsh is disabled.
NFS client is disabled.
AutoFS is disabled, e.g.; /
net/<hostname>and
home/<username> are
not automatically
mounted.
NFSserver isdisabledon
customer network.
Walkup users cannot
reprint anything.
Terminal window is
password protected.
Auto login is disabled
(login is always required
from GUI).
For
government
market.
Does not
support legacy
DigiPath
workflow.
Supports
FreeFlow
workflow.
File FTP is
disabled.
File transfer can be
done via Secure
FTP.
For CFA support,
that is FTP upload
of outload, go to
[Setup], [FTP/
Remote
Diagnostics] menu,
select enable FTP.
Custom Any profile can be edited
to adjust to user needs
Profile Characteristics User Compatibility Comments

Security Guide 5
Enable and disable services
The following tables provide a list of the services that can be
enabled and disabled from the Xerox FreeFlow Print Server
“Setup > Security Profiles” menu options.
NOTE: Services list may vary, depending on the product.
Table 2-2 “System” tab
System Service Description
Allow_host.equiv_plus Background: The /etc/hosts.equiv and /.rhosts files provide the remote
authentication database for rlogin, rsh, rcp, and rexec. The files
specify remote hosts and users that are considered to be trusted.
Trusted users are allowed to access the local system without
supplying a password. These files can be removed or modified to
enhance security. The Xerox FreeFlow Print Server is provided with
both of these files deleted entirely. The setting All_host.equiv_plus is
set to disabled, then anytime that security settings are applied, the +
will be removed from host.equiv. IMPORTANT NOTE: Removing the +
from the hosts.equiv file will prevent the use of the Xerox command
line client print from remote clients. An alternative would be to remove
the + and add the name of each trusted host that requires this
functionality. Leaving the + will allow a user from any remote host to
access the system with the same username
Anonymous FTP
BSM Enable or disable the Basic Security Module (BSM) on Solaris
Executable Stacks Some security exploits take advantage of the Solaris OE kernel
executable system stack to attack the system. Some of these exploits
can be avoided by making the system stack non-executable. The
following lines are added to /etc/system/fP file:set
noexec_user_stack=1set noexec_user_stack_log=1
Hide Info Banners
Multicast Routing
Remote CDE Logins Deny all remote access (direct/broadcast) to the X server running on
the Xerox FreeFlow Print Server by installing an appropriate /etc/dt/
config/Xaccess file.
Restrict DFS tab
Restrict NFS Portmon
Router Disable router mode by creating an empty the empty file: /etc/
notrouter.
Secure File
Permissions

6SecurityGuide
Table 2-3 “INIT” tab RC2 section
Secure Network
Settings
Secure Sendmail Force sendmail to only handle outgoing mail. No incoming mail will be
handled by sendmail.
Security Warning
Banners Enable security warning banners to be displayed when a user logins or telnets into the Xerox FreeFlow Print Server. The warning message
explains that only authorized users should be using the system and
that any others face the possibility of being monitored by law
enforcement officials.
System Service Description
RC2 Service Description
S40LLC2 Class II logical link control driver
S47ASPPP Asynchronous PPP link manager. This service is re-enabled via
enable-remote-diagnostics command.
S70UUCP UUCP server
S71LDAP.CLIENT LDAP daemon to cache server and client information for NIS lookups.
S72AUTOINSTALL Script executed during stub JumpStart or AUTOINSTALL JumpStart
S72SLPD Service Location Protocol daemon
S73cachefs.daemon Starts cachefs file systems
S73NFS.CLIENT NFS client service. Disables the statd service which is only required if
your system is an NFS server or a client.
S74XNTPD
S74AUTOFS The automountd service is only required if your system uses NFS to
automatically mount file systems. Stopping the autofs subsystem will
kill the running automountd daemon and unmount any autofs file
systems currently mounted.
S80SPC SunSoft Print Client daemon
S88SENDMAIL The sendmail daemon is used to send mail over the internet. If
sendmail is not required, it can be disabled.
S89bdconfig Solaris serial device.
S90WBEM CIM Boot Manager. Disables WBEM clients from accessing the Xerox
FreeFlow Print Server.
S93cacheos.finish Starts cachefs file systems.
S94ncalogd
S95ncad Solaris network cache and accelerator.

Security Guide 7
Table 2-4 “INIT” tab RC3 section
Table 2-5 “INETD” tab
slp
uucp
RC2 Service Description
RC3 Service Description
S15NFS.SERVER NFS Server. Disable ability to export Xerox FreeFlow Print Server file
systems. This service is enabled if legacy DigiPath/FreeFlow® and
Decomposition Services (NetAgent) are enabled.
S17HCLNFS.DAEMON
S25openssh.server OpenSSH server.
S17BWNFS.DAEMON Secure mounted file systems. There are two shared file systems that
are exported by the Xerox FreeFlow Print Server. The two directories
are only required for anyone with XDOD version 3.0 or below. With the
release of DigiPath Version 1.0, it is not necessary to export these file
systems.
S76SNMPDX Sun Solstice Enterprise Master Agent. Solaris SNMP services are
disabled. This does not prevent Xerox FreeFlow Print Server SNMP
services from operating.
S77DMI Sun Solstice Enterprise DMI Service Provider
S80MIPAGENT Mobile IP agent
S82initsma
S92VOLMGT Solaris volume management daemon.
INETD Service Description
amiserv RPC Smart Card
Interface Not used by the Xerox FreeFlow Print Server.
cachefs Cached File System
server Not used by the Xerox FreeFlow Print Server.
chargen Character Generator
Protocol server Sends revolving pattern of ASCII characters. Sometimes used in packet debugging and can
be used for denial of service attacks. Not used
by the Xerox FreeFlow Print Server.
comsat Biff server comsat is the server process which listens for
reports of incoming mail and notifies users who
have requested to be told when mail arrives. Not
used by the Xerox FreeFlow Print Server.

8SecurityGuide
daytime Daytime Protocol
server Displays the date and time. Used primarily for testing. Not used by the Xerox FreeFlow Print
Server.
discard Discard Protocol server Discards everything sent to it.Used primarily for
testing. Not used by the Xerox FreeFlow Print
Server.
dtspc CDE sub-process
Control Service CDE sub-process Control Service (dtspcd) is a network daemon that accepts requests from
clients to execute commands and launch
applications remotely. Not used by the Xerox
FreeFlow Print Server.
echo Echo Protocol server Echoes back any character sent to it. Sometimes
used in packet debugging and can be used for
denial of service attacks. Not used by the Xerox
FreeFlow Print Server.
exec Remote execution
server Used by rexec(1) command. Potentially dangerous— passwords and subsequent
session is clear text (not encrypted). Not used by
the Xerox FreeFlow Print Server.
finger Remote user
information server Display information about local and remote users. Gives away user information.Not used by
the Xerox FreeFlow Print Server.
fs X font server Used by CDE to dynamically render fonts. The
Xerox FreeFlow Print Server uses bit-map fonts.
ktkt_warnd Kerberos warning
daemon ktkt_warnd is a daemon on Kerberos clients that can warn users when their Kerberos tickets are
about to expire. It is invoked by inetd when a
ticket-granting ticket (TGT) is obtained for the
first time, such as after using the kinit command.
ftp File transfer protocol
server This can be used to enable/disable the ftp server. This does not affect using the ftp client
from the Xerox FreeFlow Print Server to another
host running an FTP server. Note that
FreeFlow® requires this service to be enabled.
gssd RPC program
authentication Generates and validates GSS-API tokens for kernel RPC.
kcms_server KCMS library service
daemon Allows the KCMS library to access profiles on remote machines. Not used by the Xerox
FreeFlow Print Server.
login Remote login server Used by the rlogin(1) command. Potentially
dangerous— uses ~/.rhosts file for
authentication; passwords and subsequent
session is clear text (not encrypted).
INETD Service Description

Security Guide 9
name DARPA trivial name
server in.tnamed is a server that supports the DARPA Name Server Protoco. Seldom used anymore.
Not used by Xerox FreeFlow Print Server.
ocfserv OCF server The OCF server, ocfserv, is a per-host daemon
that acts as the central point of communications
with all smartcards connected to the host.
Applicationsthat need to use a smartcard can do
so by using the APIs in libsmartcard.so or
smartcard.jar. The internal implementation of
these APIs communicates with ocfserv to
perform the requested function. inetd(1M)
automatically starts the ocfserv command when
it is needed. Once started, ocfserv runs forever.
If ocfserv is killed or crashes, it restarts
automatically, there is not a reason to run it
manually. Must have root privileges to execute
this utility.
rpc.cmsd Calendar manager
service daemon rpc.cmsd is a small database manager for appointment and resource-scheduling data. Its
primary client is Calendar Manager. Not used by
Xerox FreeFlow Print Server.
rpc.rusersd network username
server Gives intruder information about accounts. Not used by Xerox FreeFlow Print Server.
rpc.rwalld Network rwall server Server that handles rwall(1M) command
requests. Can be used for spoofing attacks. Not
used by Xerox FreeFlow Print Server.
rpc.sprayd Spray server Records the packets sent by the spray(1M)
command. Can be used in denial of service
attacks. Not used by Xerox FreeFlow Print
Server.
rcp.ttdbserverd RPC-based ToolTalk
database server The RPC-based tooltalk database server is required for CDE action commands. In particular,
the CDE front panel has various menu items that
rely on CDE actions. Late in the CP3.1 release,
the Server UI team disabled the front panel. With
the panel disabled, the need for the tooltalk
database server no longer exists
rpc.rstatd rstatd-kernel statistics
server rpc.rstatd is a server which returns performance statistics obtained from the kernel. rup(1) uses
rpc.rstatd to collect the uptime information that it
displays. rpc.rstatd is an RPC service.
rquotad Remote quota server Used by the quota (1M) command to display
user quotas for remote file systems. Not used by
the Xerox FreeFlow Print Server.
INETD Service Description

10 SecurityGuide
User level changes
The following user-level changes are made:
• all users for at, cron, and batch are disallowed
• nuucp account is disabled
• listen account is disabled
• password entry locked for bin, sys, adm, uucp, nobody,
noaccess, nobody4, and anonymous
sadmind Distributed system
administration daemon Used by Solstice AdminSuite applications to perform distributed system administration. Not
used by the Xerox FreeFlow Print Server.
shell Remote execution
server Used by rsh(1) and rcp(1) commands. The Xerox print command line client relies on the
remote shell internet service being enabled
since it uses the rcp(1) command to transfer files
onto the Xerox FreeFlow Print Server. However,
this service represents a security risk. Not used
by the Xerox FreeFlow Print Server.
Sun-dr (DCS) Domain configuration
server The Domain Configuration Server (DCS) is a daemon process that runs on Sun servers that
support remote Dynamic Reconfiguration (DR)
clients. It is started by the Service Management
Facility when the first DR request is received
from a client connecting to the network service
sun-dr.
talk Server for talk program The talk utility is a two-way, screen oriented
communication program. Not used by the Xerox
FreeFlow Print Server.
telnet TELNET protocol
server This can be used to enable/disable the telnet server. This does not affect using the telnet client
from the Xerox FreeFlow Print Server to another
host running on TELNET server.
time Time Protocol server Outdated time service. Seldom used anymore.
Not used by the Xerox FreeFlow Print Server.
uucp UUCP server UNIX to UNIX system copy over networks.
UUCP is not securely set up and can be
exploited in many ways. Not used by the Xerox
FreeFlow Print Server.
INETD Service Description

Security Guide 11
Solaris file permissions
Secure File Permission options can be enabled or disabled
through the Xerox FreeFlow Print Server interface. Fix-modes
include:
• fixmodes-xerox: fix file permissions for all packages to
make them more secure. Available under the System tab
under the “Secure File Permissions” drop-down menu.
• fixmodes-solaris: fix file permissions only for Solaris
packages to make them more secure. Available under the
System tab under the “Secure File Permissions” drop-
down menu.
The fix-modes utility (from the Solaris Security Toolkit) adjusts
group and world write permissions. It is run with the '-s' option to
secure file permissions for Solaris files that were created at install
time only. Customer-generated files are not affected.
NOTE: When this command is run, a file called /var/sadm/install/
content.mods is left. Do not delete this file. It contains valuable
information needed by fix modes to revert the changes to the
system file permissions if the security setting is changed back to
medium.
Disabling secure name service databases
The following databases are disabled when security is invoked:
• passwd(4)
• group(4)
• exec_attr(4)
• prof_attr(4)
• ser_attr(4)
Multicast routing disabled
Multicast is used to send data to many systems at the same time
while using one address.
OS and host information hidden
The ftp, telnet and sendmail banners are set to null so that users
in cannot see the hostname and OS level.

12 SecurityGuide
NOTE: All of these services are prohibited with a 'high' security
setting, but if they are re-enabled manually the hostname
information will remain hidden.
Sendmail daemon secured
Sendmail is forced to perform only outgoing mail. No incoming
mail will be accepted.
Network parameters secured
Sun's nddconfig security tool is run. For additional information,
view Sun's document, Solaris Operating Environment Network
Settings for Security, at
http://www.sun.com/solutions/ blueprints/1200/network-updt1.pdf.
Executable stacks disabled
The system stack is made non-executable. This is done so
security exploitation programs cannot take advantage of the
Solaris OE kernel executable system stack and thereby attack the
system.
NFS port monitor restricted
The NFS server normally accepts requests from any port number.
The NFS Server is altered to process only those requests from
privileged ports. Note that with the high security setting, NFS is
disabled; however if the service is re-enabled manually, the port
restriction will still apply.
Remote CDE login disabled
The Remote CDE login is disabled.
Xerox FreeFlow Print Server router capabilities disabled
The Xerox FreeFlow Print Server router capabilities is disabled
(empty/etc/notrouter file created).

Security Guide 13
Security warning banners
Security warning banners are displayed when a user logs in or
telnets into the Xerox FreeFlow Print Server. This message
explains that only authorized users should be using the system
and that any others face the possibility of being monitored by law
enforcement officials.
NOTE: DRW (Xerox FreeFlow Print Server Remote Workflow) is
not impacted by security settings.
Disabling LP anonymous printing
You can choose to disable anonymous printing on all existing LP
printer queues that are associated with the Xerox FreeFlow Print
Server virtual printers. When anonymous LP is disabled, only
systems that have their IP address in the Xerox FreeFlow Print
Server controller /etc/hosts table are authorized to submit LP
requests. Answer “y” for yes to disable this printing option.
Remote shell internet service
If you are using the legacy Xerox print command line client (the
software is not distributed with this release), you will need to use
the remote shell internet service to transfer files to the Xerox
FreeFlow Print Server controller. However, if you are not using the
Xerox print command line client, it is strongly recommended that
the remote shell internet service is disabled. When these three
questions are answered, all remaining aspects of the "High"
security setting are implemented.
enable-ftp and disable-ftp
These options allow for temporary enabling and disabling FTP
alone. Will not persist through reboots. You must have FTP
enabled when using a Continuous Feed system, or FreeFlow®
Production Print and NetAgent.
FTP is also required for the Call for Assistance (CFA) feature. This
uses FTP to push IOT logs and a Xerox FreeFlow Print Server
outload back to the Print Server controller.
NOTE: Temporarily enable FTP through the Xerox FreeFlow Print
Server Setup > FTP/Remote Diagnostics menu option.

14 SecurityGuide
Creating user-defined profiles
To create a customized profile, the administrator can copy and edit
any security profile according to the needs of the customer
environment. This new user profile can be selected, edited, set as
current, set as default, or deleted.
Setting the current and default profiles
The administrator can select any profile and set it as the Current
Profile. This Current Profile persists throughout Xerox FreeFlow
Print Server restarts and system reboot until it is changed by the
administrator. Similarly, the administrator can specify a security
profile as a Default Profile.
Specifying a profile as default does not enable the profile, but
indicates that it will be the profile setting across Xerox FreeFlow
Print Server upgrades. By clicking the Restore Default Profile, the
Default profile can be selected as the Current profile (this
operation will take several minutes to complete).
Account management
Any interaction between a user and the Xerox FreeFlow Print
Server is associated with a user account and is done via a logon
session, which is the basis for granting access.
Xerox FreeFlow Print Server user accounts are defined either
locally at the device or remotely at a trusted network location like
ADS. The local user account is composed of a logon user name
and an assigned user group. A user account can be a member of
only one user group. It is the user group that is associated with a
security profile that defines the privileges of the group.
Default user accounts are provided to allow easy transition from
legacy Xerox FreeFlow Print Server versions. For customers that
do not require authentication, the Xerox FreeFlow Print Server can
be configured to have the system automatically log on using a
default user account.
Local users and groups
Local user accounts are constructed based on the Solaris
operating system model, with its limitations and restrictions, using
the [Users & Groups] selection on the Xerox FreeFlow Print
Server interface.
• Each local user account has an associated user name

Security Guide 15
between 2-8 characters in length and is case sensitive.
• The user name is a string of characters from the set of
alphabetic characters (a-z, A-Z), numeric characters (0-9),
period (.), underscore (_), and hyphen (-); the first character
must be alphabetic and the string must contain at least one
lower case alphabetic character.
• Each account has the following attributes: user name,
password, user group, account disabled/enabled, and
comments.
• The maximum number of user accounts is 25,000.
• Each local user account has an associated user password that
is a sequence of characters that is case sensitive and between
0 - 8 characters in length.
• User accounts are organized into groups. Each user account
is a member of only one group.
Default user groups and user accounts
The Xerox FreeFlow Print Server provides three default user
groups: Users, Operators, and System Administrators. It also
supplies four default user accounts: User, Operator, SA and
CSE. User and Operator accounts correspond to User and
Operator User Groups while SA and CSE both correspond to the
System Administrators group.
The User, Operator and SA user accounts cannot be edited,
deleted, disabled, or removed from the assigned group. The CSE
account can be removed from the System Administrator group
and assigned to another group or disabled.
NOTE: It is the group that a user is associated with that defines
the privileges of the user, not the current security profile.
Users
Operators
System Administrator
CSEs
Users
Operators
System Administrators
User Groups
User Accounts
Figure 1: Assignment to Groups
Users
Operators
System Administrator
CSEs
Users
Operators
System Administrators
User Groups
User Accounts
Figure 1: Assignment to Groups

16 SecurityGuide
Creating user accounts
The Xerox FreeFlow Print Server user interface enables the
Administrator to manage accounts easily by selecting [Setup],
[Users & Groups], and the [Users] tab.
When the administrator selects the Users tab, a pop-up window
appears that enables the administrator to create, edit, or delete an
account and indicate whether the account should be enabled or
disabled.
Group authorization
Job Management and Customer Diagnostics are two functions of
the Xerox FreeFlow Print Server that the administrator may
choose to restrict. From the Setup > Users & Groups menu option,
select the “Group Authorizations” tab in the interface. The
administrator can choose to enable or disable the service for a
particular user group.
NOTE: The following table describes the functions allowed for the
three built-in groups. The column labeled as Changeable via
Graphical User Interface (GUI) implies that the function/service
can be enabled/disabled from the Users & Groups / Group
Authorization tab.
Table 2-6 Enable/disable from the “Group Authorizations” tab
Function Users Operators Administrat ors (sa and
cse) Changeable
via GUI Comment
Job
Management
(release, hold,
proof, promote,
move, delete,
… etc)
-Enabled Enabled Yes
Queue
Management
(New, Delete,
Properties)
-Enabled Enabled No
Queue Job
Operations(Acc
ept Jobs,
Release Jobs,
…etc)
-Enabled Enabled No