The password-management tag has no wiki summary.
1
vote
1answer
28 views
SharePoint 2010 Password Change?
Does anyone know of a way to allow password changes via SharePoint's web interface? Either a add on or settings?
4
votes
1answer
122 views
Managing service passwords with Puppet
I'm setting up my Bacula configuration in Puppet. One thing I want to do is ensure that each password field is different. My current thought is to hash the hostname with a secret value that would ...
2
votes
1answer
49 views
new user with authorized_keys: how to NOT ask for the old password when setting one?
when I create a user in the system with Chef, I always upload its public key to .ssh/authorized_keys. When user logs in for the first time, he is required to "change" his password. For that a stub ...
0
votes
2answers
61 views
Client passwords manager
I've been looking around for a good password/domains manager. Something to keep track of my clients passwords, domains, DNS, database access, etc. Web based is a must.
I've heard about KeePass, ...
2
votes
2answers
41 views
Can I set up application specific passwords on Ubuntu?
I've got a Ubuntu virtual server that I use for webhosting and other stuff. I've been thinking about moving mail onto it, but I'd like to secure it more against the threat of losing my smartphone. ...
1
vote
1answer
65 views
D-Link DES-3550: can't change password
I have a D-Link DES-3550 switch, Firmware: Build 5.00-B28. I want to change admin password, but somehow I am unable to do this:
DES-3550 Fast Ethernet Switch Command Line Interface
...
2
votes
2answers
57 views
Is there a password agent for the mysql command-line client?
I use the mysql command line client frequently. Sometimes I wind up typing in my password dozens of times per day, and I'm getting really tired of it.
SSH has a neat utility called ssh-agent which ...
1
vote
1answer
40 views
Documentation and password storage for a web hosting company
I am in the process of designing and building a documentation and password storage point with the following ingredients:
Suffice from service outages
Automatic backups
Keeping security and ...
4
votes
1answer
268 views
how can i configure active directory to make passwords expire at midnight?
When a user changes his password, it's typically sometime during the day. This means that a password expiration date set to last change + n days will result in the password expiring during the day. ...
1
vote
1answer
157 views
Is Jenkins/Hudson ciphered password storage “safe”?
In setting up our Jenkins/Hudson server recently it became clear that it has to store passwords. It seems that it stores the passwords "ciphered" in config.xml I can't see how this would be safe as ...
6
votes
7answers
462 views
There's got to be a FOSS web-based LDAP password reset app out there, right?
It seems like every shop that uses LDAP at some point has to cobble together something to let users reset their passwords without bothering the IT staff. The workflow almost always looks like:
User ...
0
votes
1answer
84 views
SSMS 2008 not remembering connection login credentials
When connecting to a server on SQL Server Management Studio 2008, I'm entering the Server Name, and using SQL Server Authentication, entering Login & Password, and ticking Remember password.
...
1
vote
2answers
173 views
Is KeePass good for saving passwords for IT managers?
I am considering switching from passwords.rtf to a new system that is actually secure. I am a great fan of Dropbox and I am a great fan of efficient and quick working. If a passwords system requires 2 ...
7
votes
4answers
195 views
Reset user's password without root
Is there any way to allow non-root users to change other user's password. Specifically, is there a way to grant help desk employees the ability to do password resets. The help desk already can reset ...
2
votes
3answers
277 views
Why do some websites prevent you from using non-alphanumeric characters in your site password? [closed]
I logged in to a website today and found this message:
As a part of new security systems upgrades, we are requiring all existing customers to change their password to enhance the protection of ...
3
votes
3answers
262 views
Central password storage tool that multiple users can access with privilege levels
Working in web development I am in charge of a large array of passwords for various servers, CMSs, etc, etc. At the moment these are stored on paper in a safe, which is cumbersome and an enormous ...
2
votes
3answers
259 views
How can I logon to a user account on a domain without destroying user password?
I am the Domain Administrator. Is there a way I can log on to a workstation, as a User, without knowing their password?
I know I can reset the user password from Active Directory. But say I did this, ...
8
votes
5answers
860 views
When would you use the “password never expires” option?
I'm simply wondering when you should set a user account so that the password never expires. On what accounts is this a good idea?
2
votes
2answers
95 views
allow web designer to change password?
I have a Linux web server, and I've created a user (in/etc/passwd) for a web designer. I pre-set her password and she uses the sftp uploading capability of her web design software to upload content. ...
3
votes
2answers
152 views
Centrally managing logins to lots of linux machines
We have a growing collection of servers, both physical and virtual, which we need to login into. Login is usually with SSH, using an RSA key pair rather than a password (which is switched off in SSH ...
2
votes
2answers
844 views
Password policy vs password never expires question
I'm new to the Server administration game. I'm about to push out my first group policy concerning passwords.
I'm going to do something simple. Use MS's built in complexity requirements and an max ...
0
votes
4answers
448 views
Change domain password from non-domain computer (AD)
I have a domain controller on Windows Server 2008. When I set up my users, I gave them all a dummy password with the "must change on next login" checked.
Everyone's machine is all on the same ...
1
vote
1answer
460 views
How to change password schema for Dovecot user authentication for an already existing mail server
I have an email server setup on Debian Lenny with Postfix, Dovecot, SASL and MySQL.
Currently, the password scheme in my dovecot-sql.conf file is set to: CRYPT
default_pass_scheme = CRYPT
I would ...
1
vote
1answer
90 views
Software for asset or password management in a team
At the office we are looking for software to manage, share and store several of our digital assets like software licenses, registration codes, and most importantly passwords for our hundreds of ...
1
vote
2answers
138 views
Bulk change passwords
I am converting some scripts from an ancient SuSe install, after a swap to ubuntu. These scripts uses a tool called mkpasswd, which sets user passwords. I wonder if there is something similar for ...
0
votes
0answers
143 views
Configure password rule: white space is not allowed in password
I am configuring system (RHEL5), setting password rules.
One requirement is related to security:
local accounts with passwords containing characters from ISO/IEC 8859-1 with codes in the range of 2x ...
-1
votes
1answer
57 views
How google,yahoo and other mail services securing passwords?
How Google,yahoo and other top level mail services securing passwords ?
What technology they are using for securing and storing ?
How they managing mail passwords ?
0
votes
1answer
294 views
How to configure password maximum days before it expires?
I want to set Maximum days of a password can be used.
So I configure PASS_MAX_DAYS in /etc/login.defs, and PASS_WARN_AGE to warn user before the password expired. In my example, I set PASS_MAX_DAYS = ...
1
vote
3answers
177 views
Active Directory Account Creation
We are creating the AD account and password automatically. The Helpdesk will not know the password or use it in way. I'm looking for other companies that are maybe doing the same type of procedure. ...
2
votes
4answers
392 views
Password expiration notice for Active Directory
Are there any tools/apps/scripts out there that will do password expiry notification for Windows 2008 Active Directory credentials? This is needed for our web apps that use Active Directory for LDAP ...
3
votes
3answers
381 views
Password Manager, integrated with Active Directory
We have several passwords and key phrases that we need to store in a central place. However, we need to protect this information so others cannot access it.
Our thoughts are to have a password ...
2
votes
3answers
227 views
Is there an app/script I can deploy to enable my users to change their own LDAP passwords?
I've recently enabled LDAP based authentication on my domain. This has allowed us to use a single set of credentials to administer the blog, the forum and the wiki.
Unfortunately, this has come at ...
3
votes
3answers
127 views
Good ways to disseminate login information, especially when new users are created?
When you create user logins in bulk, with set passwords as many users are unlikely to change their passwords, how do you disseminate the information?
Students in our school division are automatically ...
2
votes
2answers
195 views
Software for managing outside inventory, users and passwords
We are a small sized consulting and system integration company, and we install and partially manage (not always with remote access) different servers and workstations.
We need a centralized, and ...
4
votes
4answers
311 views
Best way to securely communicate passwords and credentials to clients?
Often I end up doing server administration for clients as part of developing web applications, I always set up access for myself using an SSH Key pair. I usually end up choosing a random password for ...
2
votes
4answers
2k views
How to let users change linux password from web browser?
I'm not sure if this is a stackoverflow question or serverfault but here goes:
I have an Ubuntu 10.04 file server (Samba/FTP/HTTP) and I would like to have the ability to give users the ability to ...
1
vote
5answers
960 views
How can I use fetchmail (or another email grabber) with OSX keychain for authentication?
Many fetchmail tutorials I've read says putting your email account password clear-text in a config file is safe. However, I prefer security through layers [silly example: if my terminal is up and ...
16
votes
9answers
2k views
How does a team of Systems Administrators share passwords securely?
What are best practices for sharing hundreds of passwords among a few people? These passwords protect mission critical data, and cannot ever be visible beyond a small team.
6
votes
2answers
458 views
Can a password change in Active Directory be reverted?
I often need to log in with a user's domain account to make sure that I've set up their profile correctly, but there's no easy way to do this other than to call them and give them a temp pass and ...
1
vote
2answers
329 views
How to make Plesk NOT block the browser password auto-complete feature?
All versions of the Plesk control panel software always had this "feature" where they disable the browser password auto-complete feature. Sure, they argue it's a security measure, but it's really not. ...
30
votes
9answers
3k views
Company Password Management
The topic of personal password management has been covered in great detail time after time. This question is aimed at the business or organization that needs to keep track of many unique passwords for ...
1
vote
2answers
70 views
Adding new users
I'm trying to add a new user account to my ftp server.
I used
useradd -p password -d /home/newuser -s newuser
now when he tries to log in it accepts the UID and asks for a password, when i try ...
7
votes
6answers
499 views
How do you manage passwords for a large number of servers?
Given how important it is to have different passwords for different systems, how does a data centre with thousands of servers manage? I'm only managing a few dozen machines at the moment, but the ...
4
votes
3answers
331 views
How to test passwords against a word list with fuzzing
How can I test passwords against a dictionary / word list, where the entries have been fuzzed to some degree?
By "fuzzed", I mean variants of words with "l33t" conversions and other character ...
2
votes
1answer
3k views
keepass web interface
I'm just getting started with Keepass http://keepass.info/ as a password database. It works great as an standalone application.
The problem I'm having is when I am with out MY computer or USB key ...
1
vote
2answers
265 views
Setting password expiration settings on CentOS
How does one set the password expiration parameters on CentOS or Red Hat Linux using PAM? Specifically, I need to set the following:
Maximum number of days that a password may be used.
Minimum ...
3
votes
2answers
2k views
Enforcing that passwords contain a certain mixture of characters on Red Hat Linux or CentOS
On Red Hat Linux or CentOS, how can one enforce that passwords consist of a mixture of alphabetical and numerical or special characters?
3
votes
2answers
1k views
web (server) based password manager
I know there have been a few topics here about password managers but I read them all and did not really find what I'm looking for.
What I'd need is a free or cheap (most password mgr software is $500 ...
1
vote
2answers
162 views
Password Vaults
The company I work for is looking to setup a web based application that will host the passwords. So it should use SSL and be able to have access controls implemented by user. It does not necessarily ...
2
votes
11answers
368 views
Steps to take to protect against the “unthinkable”
We have two sysadmins who know the passwords to all our systems. If the "unthinkable" happened (AKA "they both went under a bus") there is currently no way for the remaining team members to obtain ...
