User Tools

Site Tools


strw:security_enhancements

This is an old revision of the document!


Security Enhancements

In view of the recent security related events we have implemented enhanced security to our web services to make sure we are well guarded against future malicious attacks. This page describes the measures taken and the consequences it has for your work.

Measures taken

In order to separate public web access facilities from internal databases, the new local.strw website is now showing static pages only. This means there is no connection between the web server scripts and any database. The pages on this web site are now generated on another well-shielded server. Each night that server builds all pages for the local.strw site using the content of our administrative databases and places those pages in the area where local.strw can display them.

Also two potentially less secure applications, one displaying room allocations and the other displaying an integrated calendar of events, have been take off this site.

This does mean that the pages on local.strw are not immediately showing changes made to our administrative environment, but show those changes one day later.

Consequences for you

Some of you manage information through the 'Organizational Forms'. These forms have been taken away from the local.strw web site and are moved to our secure intranet.strw.leidenuniv.nl web site. This web site, however, is not accessible from the outside world, only from the Observatory Computing environment. This means that you need to run a web browser as an Observatory intern. There are several ways to do so:

Once inside the Observatory, logically or physical, you can access the website https://intranet.strw.leidenuniv.nl and among other pages (room allocations and the Web Calendar) you can go to the 'Organizational Form' section. These forms are exactly the same as you were used to in the situation where they were located on the old local.strw web site.

strw/security_enhancements.1626025890.txt.gz · Last modified: 2021/07/11 17:51 by deul