The password-management tag has no wiki summary.
0
votes
0answers
50 views
How to securely audit passwords using John the Ripper [migrated]
When my clients create a password, they are shown a strength meter and I have set the requirements fairly high. However, the strength meter is essentially only useful if being attacked by a very dumb ...
1
vote
2answers
49 views
tools for user account management for solaris and linux platforms
we have a setup consisting of 60+ hosts (solaris and linux).
we would like to develop/install a tool that helps us with passwd resets, account creation/deletion, and other common user account mgmt ...
0
votes
1answer
15 views
SSL Cert on a 2003 DC for password management
I am looking to implement a self help password management system, I have found this:
http://code.google.com/p/pwm/
I have a test server setup but constantly fail to get it to read AD with the test ...
2
votes
2answers
74 views
Developing a Password Sync Plugin for Active Directory
Recently i came across through password sync plug-ins provided by many identity management provider vendors (Tivoli, Oracle, CA) they provide a password sync plug-in which we will install on every ...
4
votes
1answer
80 views
Windows - dsmod enforcing password policies?
I am writing a self service password reset tool for users in my test domain. I would like them to be able to change passwords and not generate a random password.
I am using dsmod with a service ...
2
votes
1answer
136 views
Privileges for resetting password, changing password, unlocking account, and read profile
I have made a service that has the capability to reset, changes passwords, unlock a locked out account, and read AD profile values (e.g. sn, firstname etc) of some domain user after the user verifies ...
1
vote
3answers
50 views
Locating services running as an Active Directory user account
My organization's password policy requires that passworsds for two accounts in particular be updated/changed on a regular basis.
Is there a way to determine where a particular AD user account has ...
0
votes
1answer
128 views
Enterprise root password management strategies [closed]
I am interested in learning about root password management strategies for Solaris/Linux infrastructure that is spread out geographically across the globe. At my previous work place a while back, we ...
0
votes
0answers
56 views
A password manager that doesn't require a password database [closed]
I use a self-made password manager that generates strong passwords based on one strong key and easily rememberable strings for each website/account. The basic principle can be most easily conveyed by ...
1
vote
1answer
42 views
Masquerade as User in Enterprise Windows Environment
In a large Enterprise Windows Environment. What do IT people do to login as a user if needed? It seems impossible to me to keep user passwords in a large environment. In a Mac environment, you have ...
0
votes
0answers
90 views
Unable to change user password on Linux VM
I am user xyz on redhat linux VM abc.
I cannot change password.
abc:/home/xyz>passwd
Changing password for user xyz.
Changing password for xyz
(current) UNIX password:
Password changes on the ...
9
votes
5answers
680 views
In a large Linux only network how would you handle Authentication and User management?
After working with linux for years in small networks, I've started in a company that maintains large windows networks. I know you can cobble a linux host onto an Active Directory network but is there ...
5
votes
4answers
652 views
Is there a way to prevent password expiration when user has no password?
Okay, we all care about security so users should change their passwords on a regular basis (who said passwords are like underwear?).
On redhat and centos (5.x and 6.x), it's possible to make every ...
1
vote
1answer
154 views
Why is a linux account not accepting old password after changing password expiration to “never” using chage?
CentOS 5.x
I have an old user account that had a password policy in effect that expired.
[foo@foobox ~]# chage -l foouser
Minimum: 0
Maximum: 90
Warning: 5
Inactive: 5
...
0
votes
2answers
1k views
Group Policy for Setting Passwords: Server 2003 Domain
In my 2003 domain, I am being requested to set a password policy to require passwords to expire every 4 months, and also require users to change their password on their next login, due to a security ...
2
votes
3answers
138 views
Should I create a password for a user if they only will be using ssh key authentication?
I am adding a new user account (to a CentOS 6.2 box) which will only use ssh key authentication (with a strong key passphrase of course). I have disabled ssh password auth in sshd_config.
Should I ...
3
votes
6answers
240 views
Keeping and maintaing a password list [duplicate]
Possible Duplicate:
Company Password Management
How Do You Manage Your Passwords
Not sure if this question suits this site but here goes.
What recommendations can you give to ...
3
votes
2answers
248 views
Centralised Password Management Software
Currently, the company I work for has nothing in the way of password management - everything is in a big excel spreadsheet that everyone has access to. Obviously this has a whole rash of issues ...
1
vote
2answers
5k views
AD User Passwords expiring without any notifications?
We setup password Policies in Active Directory to Expire peoples passwords after so many days. Well it looks like the time has come for the Expiration of the Passwords and people are getting locked ...
1
vote
3answers
181 views
Your thoughts on managing passwords in a corporate server environment
Good evening,
I'm thinking about implementing some way to manage passwords for our Linux/Windows servers based solely on security concerns and an ever growing number of servers.
How do you do it? ...
1
vote
1answer
716 views
SharePoint 2010 Password Change?
Does anyone know of a way to allow password changes via SharePoint's web interface? Either a add on or settings?
5
votes
3answers
2k views
Managing service passwords with Puppet
I'm setting up my Bacula configuration in Puppet. One thing I want to do is ensure that each password field is different. My current thought is to hash the hostname with a secret value that would ...
2
votes
1answer
436 views
new user with authorized_keys: how to NOT ask for the old password when setting one?
when I create a user in the system with Chef, I always upload its public key to .ssh/authorized_keys. When user logs in for the first time, he is required to "change" his password. For that a stub ...
-1
votes
2answers
83 views
Client passwords manager [closed]
I've been looking around for a good password/domains manager. Something to keep track of my clients passwords, domains, DNS, database access, etc. Web based is a must.
I've heard about KeePass, ...
2
votes
2answers
108 views
Can I set up application specific passwords on Ubuntu?
I've got a Ubuntu virtual server that I use for webhosting and other stuff. I've been thinking about moving mail onto it, but I'd like to secure it more against the threat of losing my smartphone. ...
1
vote
1answer
237 views
D-Link DES-3550: can't change password
I have a D-Link DES-3550 switch, Firmware: Build 5.00-B28. I want to change admin password, but somehow I am unable to do this:
DES-3550 Fast Ethernet Switch Command Line Interface
...
2
votes
2answers
113 views
Is there a password agent for the mysql command-line client?
I use the mysql command line client frequently. Sometimes I wind up typing in my password dozens of times per day, and I'm getting really tired of it.
SSH has a neat utility called ssh-agent which ...
1
vote
1answer
76 views
Documentation and password storage for a web hosting company
I am in the process of designing and building a documentation and password storage point with the following ingredients:
Suffice from service outages
Automatic backups
Keeping security and ...
4
votes
2answers
3k views
how can i configure active directory to make passwords expire at midnight?
When a user changes his password, it's typically sometime during the day. This means that a password expiration date set to last change + n days will result in the password expiring during the day. ...
2
votes
1answer
670 views
Is Jenkins/Hudson ciphered password storage “safe”?
In setting up our Jenkins/Hudson server recently it became clear that it has to store passwords. It seems that it stores the passwords "ciphered" in config.xml I can't see how this would be safe as ...
9
votes
7answers
2k views
There's got to be a FOSS web-based LDAP password reset app out there, right? [closed]
It seems like every shop that uses LDAP at some point has to cobble together something to let users reset their passwords without bothering the IT staff. The workflow almost always looks like:
User ...
0
votes
1answer
220 views
SSMS 2008 not remembering connection login credentials
When connecting to a server on SQL Server Management Studio 2008, I'm entering the Server Name, and using SQL Server Authentication, entering Login & Password, and ticking Remember password.
...
1
vote
2answers
369 views
Is KeePass good for saving passwords for IT managers?
I am considering switching from passwords.rtf to a new system that is actually secure. I am a great fan of Dropbox and I am a great fan of efficient and quick working. If a passwords system requires 2 ...
7
votes
4answers
523 views
Reset user's password without root
Is there any way to allow non-root users to change other user's password. Specifically, is there a way to grant help desk employees the ability to do password resets. The help desk already can reset ...
3
votes
3answers
651 views
Why do some websites prevent you from using non-alphanumeric characters in your site password? [closed]
I logged in to a website today and found this message:
As a part of new security systems upgrades, we are requiring all existing customers to change their password to enhance the protection of ...
4
votes
3answers
736 views
Central password storage tool that multiple users can access with privilege levels
Working in web development I am in charge of a large array of passwords for various servers, CMSs, etc, etc. At the moment these are stored on paper in a safe, which is cumbersome and an enormous ...
3
votes
4answers
1k views
How can I logon to a user account on a domain without destroying user password?
I am the Domain Administrator. Is there a way I can log on to a workstation, as a User, without knowing their password?
I know I can reset the user password from Active Directory. But say I did this, ...
8
votes
5answers
1k views
When would you use the “password never expires” option?
I'm simply wondering when you should set a user account so that the password never expires. On what accounts is this a good idea?
2
votes
2answers
117 views
allow web designer to change password?
I have a Linux web server, and I've created a user (in/etc/passwd) for a web designer. I pre-set her password and she uses the sftp uploading capability of her web design software to upload content. ...
3
votes
2answers
219 views
Centrally managing logins to lots of linux machines
We have a growing collection of servers, both physical and virtual, which we need to login into. Login is usually with SSH, using an RSA key pair rather than a password (which is switched off in SSH ...
2
votes
2answers
3k views
Password policy vs password never expires question
I'm new to the Server administration game. I'm about to push out my first group policy concerning passwords.
I'm going to do something simple. Use MS's built in complexity requirements and an max ...
2
votes
5answers
2k views
Change domain password from non-domain computer (AD)
I have a domain controller on Windows Server 2008. When I set up my users, I gave them all a dummy password with the "must change on next login" checked.
Everyone's machine is all on the same ...
1
vote
1answer
778 views
How to change password schema for Dovecot user authentication for an already existing mail server
I have an email server setup on Debian Lenny with Postfix, Dovecot, SASL and MySQL.
Currently, the password scheme in my dovecot-sql.conf file is set to: CRYPT
default_pass_scheme = CRYPT
I would ...
1
vote
1answer
145 views
Software for asset or password management in a team
At the office we are looking for software to manage, share and store several of our digital assets like software licenses, registration codes, and most importantly passwords for our hundreds of ...
1
vote
2answers
212 views
Bulk change passwords
I am converting some scripts from an ancient SuSe install, after a swap to ubuntu. These scripts uses a tool called mkpasswd, which sets user passwords. I wonder if there is something similar for ...
0
votes
0answers
245 views
Configure password rule: white space is not allowed in password
I am configuring system (RHEL5), setting password rules.
One requirement is related to security:
local accounts with passwords containing characters from ISO/IEC 8859-1 with codes in the range of 2x ...
-1
votes
1answer
63 views
How google,yahoo and other mail services securing passwords?
How Google,yahoo and other top level mail services securing passwords ?
What technology they are using for securing and storing ?
How they managing mail passwords ?
0
votes
1answer
1k views
How to configure password maximum days before it expires?
I want to set Maximum days of a password can be used.
So I configure PASS_MAX_DAYS in /etc/login.defs, and PASS_WARN_AGE to warn user before the password expired. In my example, I set PASS_MAX_DAYS = ...
1
vote
3answers
221 views
Active Directory Account Creation
We are creating the AD account and password automatically. The Helpdesk will not know the password or use it in way. I'm looking for other companies that are maybe doing the same type of procedure. ...
2
votes
4answers
575 views
Password expiration notice for Active Directory
Are there any tools/apps/scripts out there that will do password expiry notification for Windows 2008 Active Directory credentials? This is needed for our web apps that use Active Directory for LDAP ...
