7
votes
2answers
136 views

Storing AWS credentials securely on a personal machine

How can I securely store AWS credentials on personal machines? In detail: Everybody in our team requires AWS security credentials for doing administrative tasks (credentials are separated by role). ...
2
votes
1answer
41 views

Executing WMI methods by proxy - how can I keep credentials out of the hands of users?

Management wants me to create a script/application/ancient magical artifact that allows field technicians to perform a task on our Configuration Manager server (updating collection memberships - very ...
3
votes
1answer
162 views

How to deal with passwords during automated deployment? [closed]

As responsible admins we know of common weaknesses like CWE-260: Password in Configuration File http://cwe.mitre.org/data/definitions/260.html CWE-522: Insufficiently Protected Credentials ...
0
votes
1answer
66 views

a safe way to provide multiple ftp credentials?

We have a web development company and have ftp credentials for over 300 customers. Is there a method to provide access to employees without giving them username and password? Kind of how credit card ...
1
vote
2answers
119 views

Securely Store Credentials for a Web Application

We are running a web application in python using wsgi with apache2, and must submit to a penetration test. The testers will be exploring the potential for damage if the attackers gain shell access as ...
0
votes
2answers
69 views

Moving database to new server

I'm restoring a backup of a production database to a new server. The new server also hosts the application which makes use of the database. As such I'd like to use the same user/pass combination to ...
0
votes
2answers
61 views

mysql and unix users control

Let's say I have two users on my UNIX machine - user1 and user2. I also have two MySQL databases - db1(mysql_user1) and db2(mysql_user2). I want to prevent user1 from connecting to db2 even if it ...