2
votes
1answer
44 views

The ipmitool conundrum

We have been trying to migrate to a better password management system on our server. The problem was that all this days we were using a proprietary algorithm to create a hash (a decryptable hash). In ...
4
votes
1answer
41 views

Changing password expiration policy at next password change

We have a password policy with a maximum password age of 180 days. For various reasons we need to change it to 90 days, with a minimum impact for the users. Our users are normally warned about the ...
0
votes
0answers
12 views

auto-reset of cpanel passwords every month

I am wondering is there away to automatically every calendar month reset all the cpanel account passwords on a VPS server? I have WHM and cPanel, I am worried about our sites being attacked, and ...
1
vote
0answers
46 views

What are the mathematical implications of an overly-restrictive password policy? [closed]

I came across an interesting password policy online recently: "Please be sure to enter a password that meets the following criteria: must be 8 characters long must not be based on dictionary words ...
1
vote
2answers
178 views

What is the purpose of openssl passwd

I'm reading "Reliably Deploying Rails Applications" Regarding defining users to be set up by Chef, it says: “Next we need to define users, inside data_bags/users copy the file deploy.json.example to ...
-1
votes
2answers
35 views

How do I change a third party service password without stopping my service that depends on that service?

Here's my scenario: I have a service that has to run 24/7 and depends on a third party service that has a password. I need to have that password changed. If I blindly change the password my service ...
2
votes
2answers
361 views

Developing a Password Sync Plugin for Active Directory

Recently i came across through password sync plug-ins provided by many identity management provider vendors (Tivoli, Oracle, CA) they provide a password sync plug-in which we will install on every ...
1
vote
1answer
72 views

Masquerade as User in Enterprise Windows Environment

In a large Enterprise Windows Environment. What do IT people do to login as a user if needed? It seems impossible to me to keep user passwords in a large environment. In a Mac environment, you have ...
4
votes
6answers
309 views

Keeping and maintaing a password list [duplicate]

Possible Duplicate: Company Password Management How Do You Manage Your Passwords Not sure if this question suits this site but here goes. What recommendations can you give to ...
1
vote
2answers
11k views

AD User Passwords expiring without any notifications?

We setup password Policies in Active Directory to Expire peoples passwords after so many days. Well it looks like the time has come for the Expiration of the Passwords and people are getting locked ...
1
vote
3answers
203 views

Your thoughts on managing passwords in a corporate server environment

Good evening, I'm thinking about implementing some way to manage passwords for our Linux/Windows servers based solely on security concerns and an ever growing number of servers. How do you do it? ...
6
votes
3answers
2k views

Managing service passwords with Puppet

I'm setting up my Bacula configuration in Puppet. One thing I want to do is ensure that each password field is different. My current thought is to hash the hostname with a secret value that would ...
3
votes
1answer
1k views

Is Jenkins/Hudson ciphered password storage “safe”?

In setting up our Jenkins/Hudson server recently it became clear that it has to store passwords. It seems that it stores the passwords "ciphered" in config.xml I can't see how this would be safe as ...
1
vote
2answers
522 views

Is KeePass good for saving passwords for IT managers?

I am considering switching from passwords.rtf to a new system that is actually secure. I am a great fan of Dropbox and I am a great fan of efficient and quick working. If a passwords system requires 2 ...
5
votes
3answers
858 views

Why do some websites prevent you from using non-alphanumeric characters in your site password? [closed]

I logged in to a website today and found this message: As a part of new security systems upgrades, we are requiring all existing customers to change their password to enhance the protection of ...
4
votes
3answers
2k views

Central password storage tool that multiple users can access with privilege levels

Working in web development I am in charge of a large array of passwords for various servers, CMSs, etc, etc. At the moment these are stored on paper in a safe, which is cumbersome and an enormous ...
2
votes
5answers
4k views

Change domain password from non-domain computer (AD)

I have a domain controller on Windows Server 2008. When I set up my users, I gave them all a dummy password with the "must change on next login" checked. Everyone's machine is all on the same ...
2
votes
4answers
690 views

Password expiration notice for Active Directory

Are there any tools/apps/scripts out there that will do password expiry notification for Windows 2008 Active Directory credentials? This is needed for our web apps that use Active Directory for LDAP ...
4
votes
5answers
8k views

How to let users change linux password from web browser?

I'm not sure if this is a stackoverflow question or serverfault but here goes: I have an Ubuntu 10.04 file server (Samba/FTP/HTTP) and I would like to have the ability to give users the ability to ...
1
vote
5answers
2k views

How can I use fetchmail (or another email grabber) with OSX keychain for authentication?

Many fetchmail tutorials I've read says putting your email account password clear-text in a config file is safe. However, I prefer security through layers [silly example: if my terminal is up and ...
50
votes
9answers
12k views

Company Password Management [closed]

The topic of personal password management has been covered in great detail time after time. This question is aimed at the business or organization that needs to keep track of many unique passwords for ...
7
votes
6answers
822 views

How do you manage passwords for a large number of servers?

Given how important it is to have different passwords for different systems, how does a data centre with thousands of servers manage? I'm only managing a few dozen machines at the moment, but the ...
4
votes
3answers
599 views

How to test passwords against a word list with fuzzing

How can I test passwords against a dictionary / word list, where the entries have been fuzzed to some degree? By "fuzzed", I mean variants of words with "l33t" conversions and other character ...
3
votes
10answers
469 views

Steps to take to protect against the “unthinkable”

We have two sysadmins who know the passwords to all our systems. If the "unthinkable" happened (AKA "they both went under a bus") there is currently no way for the remaining team members to obtain ...
1
vote
1answer
653 views

Password lifetimes, length, complexity and history. Is there something to help?

I need to implement some better control for passwords on a our slackware servers. I have always manually done this but the need for some automation routines to handle a lifetime check, length, ...
1
vote
5answers
812 views

How do you keep track of machines, password, accounts etc? [duplicate]

Possible Duplicates: How do you manage your passwords? How do you manage service account credentials (passwords) ? I've long since passed the line where I can remember passwords and names ...
11
votes
15answers
2k views

What's the safest online password system?

It's so difficult to track dozens of passwords in different locations. Syncing fails from time to time and you end up with collision correction avoidance syndrome. Is there a single source of safe, ...