User Tools

Site Tools


Security Enhancements

In view of the recent security related events we have implemented enhanced security to our web services to make sure we are well guarded against future malicious attacks. This page describes the measures taken and the consequences it has for your work.

Measures taken

In order to separate public web access facilities from internal databases, the new local.strw website has been fully recoded and is now showing static pages only. This means there is no connection between the web server scripts and any database. The pages on this web site are now generated on another well-shielded server. Each night that server builds all pages for the local.strw site using the content of our administrative databases and places those pages in the area where local.strw can display them.

Also two potentially less secure applications, one displaying room allocations and the other displaying an integrated calendar of events, have been take off this site.

This does mean that the pages on local.strw are not immediately showing changes made to our administrative environment, but show those changes one day later.

All administrative services have been moved to a new server: intranet.strw.

Consequences for you

Some of you manage information, or perform resource allocation requests. through the 'Organizational Forms'. These forms have been taken away from the public local.strw web site and are moved to our secure web site. This web site, however, is not accessible from the outside world, only from the Observatory Computing environment. This means that you need to run a web browser as an Observatory intern. There are several ways to do so:

Once you are inside the Observatory, logically or physical, you can access the website and among other pages (room allocations and the Web Calendar) you can go to the 'Organizational Form' section. These forms are exactly the same as you were used to from the time when they were located on the old local.strw web site. This way you can continue to perform, in a much more secure fashion, the necessary administrative tasks, such as COVID registration.

The intranet site is still under active development, so if you miss functionality, please contact the helpdesk.

strw/security_enhancements.txt · Last modified: 2021/08/30 07:54 by deul