Procedures, policies and constraints on password entry, lifetime, change, strength, and storage. An essential part of access management, together with policies on other forms of authentication.

learn more… | top users | synonyms

0
votes
1answer
32 views

Password reset fails for end users when minimum password age set for more than 0 days

Our Help Desk has been resetting user passwords with "user must reset password at next logon" for years. Recently reset default domain policy for "minimum password age" from 0 days to 5 days. Now ...
0
votes
0answers
8 views

auto-reset of cpanel passwords every month

I am wondering is there away to automatically every calendar month reset all the cpanel account passwords on a VPS server? I have WHM and cPanel, I am worried about our sites being attacked, and ...
0
votes
1answer
20 views

Unassigned password has expired

On a RHEL6.4 box, I have a user who hasn't been assigned a password. In the /etc/shadow file, the password is shown as !!. This is intentional; that user only logs in using public key authentication. ...
0
votes
0answers
24 views

Users cannot change their passwords in Active Directory

We have created a new domain. The DCs are server 2012 and 2012r2 and the functional level of both forest and domain is 2008. Password policy is only set on the default domain policy and is set to ...
1
vote
1answer
69 views

Token error when trying to change password through pam-mysql

I am currently preparing a machine for a web hosting service, and I decided to use MySQL to store all our users (since the rest of our services use it already). For that, I am using libnss-mysql and ...
3
votes
1answer
113 views

How is the “change password at next logon” requirement supposed to work with RDP using Network Level Authentication?

We have a Windows server (2008 R2) with the "Remote Desktop Services" feature installed and no Active Directory domain. Remote desktop is set up to "Allow connections only from computers running ...
0
votes
0answers
17 views

FTP automated user password maintenance

We have a need to automate a FTPS transfer using named accounts which require periodic password resets. Due to another party having control over the accounts, we cannot change them to service accounts ...
1
vote
0answers
39 views

Deploy RDWeb on a non-default website

I have a public website and a private site set up like below: Public site: samplesite.com (http) Private site: my.samplesite.com (https) I'm trying to use RDWeb to enable users to change Active ...
1
vote
0answers
46 views

What are the mathematical implications of an overly-restrictive password policy? [closed]

I came across an interesting password policy online recently: "Please be sure to enter a password that meets the following criteria: must be 8 characters long must not be based on dictionary words ...
1
vote
1answer
130 views

Group Policy “Maximum password age” fails to apply

In my Windows network with all AD servers (still) running Windows 2003, I encounter the following problem: The "Maximum password age" policy apparently does not apply. Even though some of the users ...
0
votes
0answers
25 views

AD LDS changing password events

We've implemented AD LDS and we want to monitor password changes on it. However, the events I see doesn't provide much information. The only thing I see is this 4793 event (Security logs) The ...
-1
votes
1answer
47 views

establish passwordless login without asking the user [duplicate]

On Linux when using dsa keys I establish passwordless login with the command ssh-copy-id -i .ssh/id_dsa.pub user@target.host This prompts the user for user's password on target.host. My script ...
2
votes
1answer
42 views

Best practice for assigning passwords in a company

I work in a small company and have been spending a lot of time optimizing our network. Our security system is, sadly, abysmal, seeing as no one ever really took care of it. So I'm looking for an ...
3
votes
1answer
169 views

smbk5pwd overlay on OpenLDAP 2.4

I have an OpenLDAP server and I want to configure the smbk5pwd overlay to make OpenLDAP update the sambaNTPassword and sambaLMPassword attributes automatically when a change occurs on userPassword. ...
0
votes
2answers
108 views

What is the purpose of openssl passwd

I'm reading "Reliably Deploying Rails Applications" Regarding defining users to be set up by Chef, it says: “Next we need to define users, inside data_bags/users copy the file deploy.json.example to ...
1
vote
0answers
22 views

Where do you store shared secrets used in building VMs dynamically (phoenix servers)?

We use vagrant to spin up linux VMs for dev, testing, and evaluation servers for our software. Most often, devs are using linux from VMs inside an AD-connected windows7 box. The configuration of the ...
0
votes
0answers
16 views

How to suppress request string logging in App Engine to secure passwords

I am designing an app for Google App Engine. In my initial set up, I have the user submit their username and password to my app via AJAX. I then hash it and compare that to a stored hash without ...
1
vote
1answer
27 views

Remote Windows user's password will not update

One of our remote users had his domain account password expire, so he logged onto a terminal server in the same site as the RRAS server he uses for RA VPN to reset his password. He stays connected ...
2
votes
2answers
108 views

Is it wise to use very secure password for sudo users when using SSH Keys for server login?

I am not asking how to do anything here, rather trying to understand best practices and the "right" way to handle server security. To prevent brute force password attacks, I have secured my server in ...
3
votes
0answers
81 views

Outlook Change Password Prompt - What enables this, and what do I put for Exchange Server?

One of my end users sent me this screen, which is obviously indicative of an expired user password I'm unable to replicate this in my lab, nor do I know what value to put in for Exchange. (is it ...
7
votes
2answers
694 views

How do i change Active Directory Password in Windows 2012 Terminal Server without Using CTRL ALT

How do i change Active Directory Password in Windows 2012 Terminal Server without Using CTRL + ALT I cant use CTRL + ALT + END And CTRL + ALT + DEL Is there any other Method invoking the Security ...
-1
votes
2answers
32 views

How do I change a third party service password without stopping my service that depends on that service?

Here's my scenario: I have a service that has to run 24/7 and depends on a third party service that has a password. I need to have that password changed. If I blindly change the password my service ...
1
vote
2answers
1k views

Cannot disable password expiry on Server 2012

I have an internal only Windows Server 2012 which I want to disable the password policy on. (The server is also a domain controller, if that makes any difference.) I've tried following the ...
0
votes
1answer
109 views

windows 2008 R2 add another local administrator account without knowing administrator password

I have physical access to a windows 2008 R2 server, I am trying to add a second local administrator account without knowing the original administrator password. It's important that the original ...
12
votes
2answers
270 views

What is the industry standard method for administering the change of the local administrator password for all machines on a domain?

Although there appears to be three available options, one of which is actually secure, there seems to be only two available choices that will be able to impact machines that are not powered on at the ...
1
vote
3answers
107 views

How to manage credentials on multiserver environment

I have a some software that uses its own encrypted file for password storage ( such as ftp, web and other passwords to login to external systems, there is no way to use certificates ). On each server ...
1
vote
2answers
215 views

tools for user account management for solaris and linux platforms

we have a setup consisting of 60+ hosts (solaris and linux). we would like to develop/install a tool that helps us with passwd resets, account creation/deletion, and other common user account mgmt ...
0
votes
1answer
22 views

SSL Cert on a 2003 DC for password management

I am looking to implement a self help password management system, I have found this: http://code.google.com/p/pwm/ I have a test server setup but constantly fail to get it to read AD with the test ...
2
votes
2answers
324 views

Developing a Password Sync Plugin for Active Directory

Recently i came across through password sync plug-ins provided by many identity management provider vendors (Tivoli, Oracle, CA) they provide a password sync plug-in which we will install on every ...
4
votes
1answer
138 views

Windows - dsmod enforcing password policies?

I am writing a self service password reset tool for users in my test domain. I would like them to be able to change passwords and not generate a random password. I am using dsmod with a service ...
2
votes
1answer
320 views

Privileges for resetting password, changing password, unlocking account, and read profile

I have made a service that has the capability to reset, changes passwords, unlock a locked out account, and read AD profile values (e.g. sn, firstname etc) of some domain user after the user verifies ...
1
vote
3answers
90 views

Locating services running as an Active Directory user account

My organization's password policy requires that passworsds for two accounts in particular be updated/changed on a regular basis. Is there a way to determine where a particular AD user account has ...
1
vote
1answer
65 views

Masquerade as User in Enterprise Windows Environment

In a large Enterprise Windows Environment. What do IT people do to login as a user if needed? It seems impossible to me to keep user passwords in a large environment. In a Mac environment, you have ...
9
votes
5answers
2k views

In a large Linux only network how would you handle Authentication and User management?

After working with linux for years in small networks, I've started in a company that maintains large windows networks. I know you can cobble a linux host onto an Active Directory network but is there ...
5
votes
4answers
2k views

Is there a way to prevent password expiration when user has no password?

Okay, we all care about security so users should change their passwords on a regular basis (who said passwords are like underwear?). On redhat and centos (5.x and 6.x), it's possible to make every ...
1
vote
1answer
317 views

Why is a linux account not accepting old password after changing password expiration to “never” using chage?

CentOS 5.x I have an old user account that had a password policy in effect that expired. [foo@foobox ~]# chage -l foouser Minimum: 0 Maximum: 90 Warning: 5 Inactive: 5 ...
0
votes
2answers
2k views

Group Policy for Setting Passwords: Server 2003 Domain

In my 2003 domain, I am being requested to set a password policy to require passwords to expire every 4 months, and also require users to change their password on their next login, due to a security ...
2
votes
3answers
222 views

Should I create a password for a user if they only will be using ssh key authentication?

I am adding a new user account (to a CentOS 6.2 box) which will only use ssh key authentication (with a strong key passphrase of course). I have disabled ssh password auth in sshd_config. Should I ...
3
votes
6answers
299 views

Keeping and maintaing a password list [duplicate]

Possible Duplicate: Company Password Management How Do You Manage Your Passwords Not sure if this question suits this site but here goes. What recommendations can you give to ...
3
votes
2answers
542 views

Centralised Password Management Software

Currently, the company I work for has nothing in the way of password management - everything is in a big excel spreadsheet that everyone has access to. Obviously this has a whole rash of issues ...
1
vote
2answers
10k views

AD User Passwords expiring without any notifications?

We setup password Policies in Active Directory to Expire peoples passwords after so many days. Well it looks like the time has come for the Expiration of the Passwords and people are getting locked ...
1
vote
3answers
201 views

Your thoughts on managing passwords in a corporate server environment

Good evening, I'm thinking about implementing some way to manage passwords for our Linux/Windows servers based solely on security concerns and an ever growing number of servers. How do you do it? ...
1
vote
1answer
856 views

SharePoint 2010 Password Change?

Does anyone know of a way to allow password changes via SharePoint's web interface? Either a add on or settings?
6
votes
3answers
2k views

Managing service passwords with Puppet

I'm setting up my Bacula configuration in Puppet. One thing I want to do is ensure that each password field is different. My current thought is to hash the hostname with a secret value that would ...
2
votes
1answer
858 views

new user with authorized_keys: how to NOT ask for the old password when setting one?

when I create a user in the system with Chef, I always upload its public key to .ssh/authorized_keys. When user logs in for the first time, he is required to "change" his password. For that a stub ...
-1
votes
2answers
87 views

Client passwords manager [closed]

I've been looking around for a good password/domains manager. Something to keep track of my clients passwords, domains, DNS, database access, etc. Web based is a must. I've heard about KeePass, ...
2
votes
2answers
160 views

Can I set up application specific passwords on Ubuntu?

I've got a Ubuntu virtual server that I use for webhosting and other stuff. I've been thinking about moving mail onto it, but I'd like to secure it more against the threat of losing my smartphone. ...
2
votes
1answer
381 views

D-Link DES-3550: can't change password

I have a D-Link DES-3550 switch, Firmware: Build 5.00-B28. I want to change admin password, but somehow I am unable to do this: DES-3550 Fast Ethernet Switch Command Line Interface ...
2
votes
2answers
146 views

Is there a password agent for the mysql command-line client?

I use the mysql command line client frequently. Sometimes I wind up typing in my password dozens of times per day, and I'm getting really tired of it. SSH has a neat utility called ssh-agent which ...
1
vote
1answer
78 views

Documentation and password storage for a web hosting company

I am in the process of designing and building a documentation and password storage point with the following ingredients: Suffice from service outages Automatic backups Keeping security and ...