Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I work at a small business that needs a new password management software solution.

Our needs are:

Multiple Databases (one for IT passwords, one for Accounting passwords, etc...)

Multiple Users-about 8-10-(these users should also be under access control under one admin) -I'll need to be able to grant access to only certain DBs per user.

Easy access to the database only within our Intranet. -users should not be able to access these files outside of the company (other than through VPN)

The price should be either free or under $100 (for about 8-10 users)

Other features that would be nice:

User Logging (what gets added/when/and by who)

Active Directory

I've searched everywhere for something to meet these needs and it's always in the thousands of dollars. Any suggestions would be appreciated. Thanks.

share|improve this question
    
I'm curious why do u need it :) –  kolypto Oct 6 '09 at 20:49
1  
Very interested to see the answers to this one - we desperately need a solution for this but none of us have the time to research it. –  Izzy Oct 6 '09 at 20:54
1  
@Tync - in our case, we have dozens of DMZ servers. Being DMZ, they are not accessible using Domain Admin credentials, and each server has a unique local Administrator password. Add into that hundreds of Cisco, wireless, etc devices and it's a headache trying to manage the collective Crapton of passwords –  Izzy Oct 6 '09 at 20:56
    
There is a similar question: serverfault.com/questions/61402/… –  sleske Oct 19 '09 at 11:04
    
There is a similar question pertaining to corporate password safes here: serverfault.com/questions/119892 –  Nathan Hartley Aug 4 '10 at 20:46

8 Answers 8

Check out KeePass it should handle your requirements, except for 'Active Directory, although I'm not sure what you mean by that.

KeePass has:

  • Strong Security
  • Multiple User Keys
  • Portable and No Installation Required
  • Export To TXT, HTML, XML and CSV Files
  • Import From Many File Formats
  • Easy Database Transfer
  • Support of Password Groups
  • Time Fields and Entry Attachments
  • Auto-Type, Global Auto-Type Hot Key and Drag&Drop
  • Intuitive and Secure Clipboard Handling
  • Searching and Sorting
  • Multi-Language Support
  • Strong Random Password Generator
  • Plugin Architecture
  • Open Source!
share|improve this answer
    
+2 - I've been using this for many years and it's FREE! –  Saif Khan Oct 19 '09 at 13:36
1  
Where do you see multiple user keys? keepass.info/help/base/multiuser.html says "All users use the same master password and/or key file to open the database." –  Eli Mar 16 '12 at 20:36

@Tync - Like Izzy said, password storage amongst a company is hell. For IT we have multiple wifi/server accounts/old employee passwords/web site credentials/etc...

On top of that, Accounting also has dozens of passwords to websites that they'll never remember (And for security reasons shouldn't all be the same).

We may be going to go with Secret Server http://www.thycotic.com/products%5Fsecretserver%5Fbuynow.html

It's past our price range...but we really havent found anything else.

BTW...these needs are for a company of a whopping 18 employees, haha.

share|improve this answer

There are a java based web solution named webkeepass for more information please see: http://ossfree.net/webkeepass/

share|improve this answer

I would check out Passwordstate from Click Studios. It seems to meet your requirements and is free for less than 10 users.

share|improve this answer

Check out PasswordSafe, which is free. The multiple databases is no problem and you can use normal file/folder permissions to restrict access to each. It won't do the logging or integrate with AD though. One big plus, at least for me, is that there are Linux and Mac versions (the Mac version is unfortunately JAVA based), all of which happily work with the same database files.

It's also Open Source, so if it's close to what you want but not quite there you have the possibility of customizing it to suit.

share|improve this answer
    
While PasswordSafe is a good software, it is not "multi-user" by any stretch. –  sleske Oct 7 '09 at 1:17

We are the developers of Passwordstate and as DLux mentioned, we believe our product should meet your needs, and possibly at no cost.

If you have any questions at all, please visit our support page at our web site, where you'll be able to PM me - I'd be only to glad to help.

Web: Click Studios

Regards Mark

share|improve this answer

Password Manager XP despite its old school name is very capable and inexpensive. It handles multiple databases, access by different users and groups of users including AD authentication. The pro version has the user logging you are looking for.

We have been using it for a couple of years and have different access for our server team, applications and desktop support teams. It has been great and saved us from insecure excel spreadsheets and other dodgy ways of recording and sharing passwords.

As it also allows you to store files as attachments we use it to store SSL private keys, licence keys which are as important as passwords and often overlooked or neglected.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.