Yubico Forum

We'd like very much to harden our YubiRADIUS server and at the very least, turn off all the services that are not required.

Using Webadmin:
"System" - "Boot and Shutdown"



Then, I can go through and switch to "Start at boot time" - "No" for the rest of the services.

There seems to be a large number of services that are not required which are running, e.g.
* bluetooth
* cpufrequtil
* cups
* fancontrol
* kerneloops
* loadcpufreq
* nfs-common
* nfs-kernel-server
* rsync
* samba
* slapd (if your not going to use the built-in LDAP server)
* smartmontools

Hardening Internet-facing servers is always critical, and one part to that is always to minimize the number of services running, especially those that are unnecessary for what you are doing. Check out what Green Rocket Security, a Yubico partner, is doing with GreenRADIUS to harden the server to solve this problem.

GreenRADIUS is also currently maintained (whereas YubiRADIUS is no longer supported) and has patches and updates for the latest vulnerabilities such as Heartbleed, Shellshock and POODLE.