1

How would you update these in a consistent, reliable manner? I'm new enough to system administration, self taught and still learning but - I have this problem to solve in no specific time and under my own initiative as I work in a company where I'm the only sys admin.

I've noticed that our password policy isn't exactly foolproof in that if you have 1 wordpress password the ftp account for that user and the mysql account for that site, then you can quickly gain access to 90% of our portfolio.

I'd like to change this. I have 3 virtual servers with about 170/170/110 WordPress installations between the three. Each has it's own FTP user and MySQL database. What would you do?

1
  • Are all the users that log in working for your company? how many need to log in daily? I ask because although there are several possible ways of doing this technically, the main issue is the 'political' one regarding the users. For example you can create a script to reset every password with a random one and tell the users to contact you to get the new password. Mar 31, 2014 at 17:58

1 Answer 1

0

I would centralize that information in a directory.

The three services you mention support authentication using LDAP:

  • There are several plugins to integrate WordPress with LDAP.
  • The Enterprise version of MySQL can perform PAM authentication, indirectly providing LDAP integration.
  • You don't mention what FTP server are you using, but it is highly probable that there's a way to use LDAP/AD to authenticate your users, too. See, for example, ProFTPd.

With regards to password policies (quality, expiration, ...), they can be enforce directly in the directory. this is the case for OpenLDAP, Apache DS and 389.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .