Procedures, policies and constraints on password entry, lifetime, change, strength, and storage. An essential part of access management, together with policies on other forms of authentication.

learn more… | top users | synonyms

52
votes
10answers
19k views

How does a team of Systems Administrators share passwords securely?

What are best practices for sharing hundreds of passwords among a few people? These passwords protect mission critical data, and cannot ever be visible beyond a small team.
4
votes
1answer
192 views

Windows - dsmod enforcing password policies?

I am writing a self service password reset tool for users in my test domain. I would like them to be able to change passwords and not generate a random password. I am using dsmod with a service ...
3
votes
2answers
9k views

keepass web interface [closed]

I'm just getting started with Keepass http://keepass.info/ as a password database. It works great as an standalone application. The problem I'm having is when I am with out MY computer or USB key ...
4
votes
5answers
5k views

Change domain password from non-domain computer (AD)

I have a domain controller on Windows Server 2008. When I set up my users, I gave them all a dummy password with the "must change on next login" checked. Everyone's machine is all on the same ...
2
votes
1answer
675 views

Privileges for resetting password, changing password, unlocking account, and read profile

I have made a service that has the capability to reset, changes passwords, unlock a locked out account, and read AD profile values (e.g. sn, firstname etc) of some domain user after the user verifies ...
1
vote
3answers
258 views

Locating services running as an Active Directory user account

My organization's password policy requires that passworsds for two accounts in particular be updated/changed on a regular basis. Is there a way to determine where a particular AD user account has ...
1
vote
3answers
855 views

How to make Plesk NOT block the browser password auto-complete feature? [closed]

All versions of the Plesk control panel software always had this "feature" where they disable the browser password auto-complete feature. Sure, they argue it's a security measure, but it's really not. ...
1
vote
1answer
93 views

Masquerade as User in Enterprise Windows Environment

In a large Enterprise Windows Environment. What do IT people do to login as a user if needed? It seems impossible to me to keep user passwords in a large environment. In a Mac environment, you have ...
10
votes
5answers
3k views

In a large Linux only network how would you handle Authentication and User management?

After working with linux for years in small networks, I've started in a company that maintains large windows networks. I know you can cobble a linux host onto an Active Directory network but is there ...
5
votes
4answers
2k views

Is there a way to prevent password expiration when user has no password?

Okay, we all care about security so users should change their passwords on a regular basis (who said passwords are like underwear?). On redhat and centos (5.x and 6.x), it's possible to make every ...
4
votes
2answers
5k views

how can i configure active directory to make passwords expire at midnight?

When a user changes his password, it's typically sometime during the day. This means that a password expiration date set to last change + n days will result in the password expiring during the day. ...
1
vote
1answer
402 views

Why is a linux account not accepting old password after changing password expiration to “never” using chage?

CentOS 5.x I have an old user account that had a password policy in effect that expired. [foo@foobox ~]# chage -l foouser Minimum: 0 Maximum: 90 Warning: 5 Inactive: 5 ...
0
votes
2answers
2k views

Group Policy for Setting Passwords: Server 2003 Domain

In my 2003 domain, I am being requested to set a password policy to require passwords to expire every 4 months, and also require users to change their password on their next login, due to a security ...
2
votes
3answers
267 views

Should I create a password for a user if they only will be using ssh key authentication?

I am adding a new user account (to a CentOS 6.2 box) which will only use ssh key authentication (with a strong key passphrase of course). I have disabled ssh password auth in sshd_config. Should I ...
4
votes
6answers
334 views

Keeping and maintaing a password list [duplicate]

Possible Duplicate: Company Password Management How Do You Manage Your Passwords Not sure if this question suits this site but here goes. What recommendations can you give to ...
3
votes
2answers
1k views

Centralised Password Management Software

Currently, the company I work for has nothing in the way of password management - everything is in a big excel spreadsheet that everyone has access to. Obviously this has a whole rash of issues ...
4
votes
2answers
3k views

web (server) based password manager

I know there have been a few topics here about password managers but I read them all and did not really find what I'm looking for. What I'd need is a free or cheap (most password mgr software is $500 ...
6
votes
3answers
3k views

Managing service passwords with Puppet

I'm setting up my Bacula configuration in Puppet. One thing I want to do is ensure that each password field is different. My current thought is to hash the hostname with a secret value that would ...
2
votes
4answers
425 views

Is there an app/script I can deploy to enable my users to change their own LDAP passwords?

I've recently enabled LDAP based authentication on my domain. This has allowed us to use a single set of credentials to administer the blog, the forum and the wiki. Unfortunately, this has come at ...
10
votes
7answers
4k views

There's got to be a FOSS web-based LDAP password reset app out there, right? [closed]

It seems like every shop that uses LDAP at some point has to cobble together something to let users reset their passwords without bothering the IT staff. The workflow almost always looks like: User ...
3
votes
4answers
3k views

How can I logon to a user account on a domain without destroying user password?

I am the Domain Administrator. Is there a way I can log on to a workstation, as a User, without knowing their password? I know I can reset the user password from Active Directory. But say I did this, ...
1
vote
3answers
215 views

Your thoughts on managing passwords in a corporate server environment

Good evening, I'm thinking about implementing some way to manage passwords for our Linux/Windows servers based solely on security concerns and an ever growing number of servers. How do you do it? ...
1
vote
1answer
948 views

SharePoint 2010 Password Change?

Does anyone know of a way to allow password changes via SharePoint's web interface? Either a add on or settings?
6
votes
4answers
1k views

Best way to securely communicate passwords and credentials to clients?

Often I end up doing server administration for clients as part of developing web applications, I always set up access for myself using an SSH Key pair. I usually end up choosing a random password for ...
3
votes
1answer
1k views

new user with authorized_keys: how to NOT ask for the old password when setting one?

when I create a user in the system with Chef, I always upload its public key to .ssh/authorized_keys. When user logs in for the first time, he is required to "change" his password. For that a stub ...
6
votes
2answers
1k views

Can a password change in Active Directory be reverted?

I often need to log in with a user's domain account to make sure that I've set up their profile correctly, but there's no easy way to do this other than to call them and give them a temp pass and ...
-1
votes
2answers
92 views

Client passwords manager [closed]

I've been looking around for a good password/domains manager. Something to keep track of my clients passwords, domains, DNS, database access, etc. Web based is a must. I've heard about KeePass, ...
3
votes
2answers
189 views

Can I set up application specific passwords on Ubuntu?

I've got a Ubuntu virtual server that I use for webhosting and other stuff. I've been thinking about moving mail onto it, but I'd like to secure it more against the threat of losing my smartphone. ...
2
votes
2answers
172 views

Is there a password agent for the mysql command-line client?

I use the mysql command line client frequently. Sometimes I wind up typing in my password dozens of times per day, and I'm getting really tired of it. SSH has a neat utility called ssh-agent which ...
4
votes
1answer
2k views

Is Jenkins/Hudson ciphered password storage “safe”?

In setting up our Jenkins/Hudson server recently it became clear that it has to store passwords. It seems that it stores the passwords "ciphered" in config.xml I can't see how this would be safe as ...
1
vote
2answers
614 views

Is KeePass good for saving passwords for IT managers?

I am considering switching from passwords.rtf to a new system that is actually secure. I am a great fan of Dropbox and I am a great fan of efficient and quick working. If a passwords system requires 2 ...
7
votes
4answers
1k views

Reset user's password without root

Is there any way to allow non-root users to change other user's password. Specifically, is there a way to grant help desk employees the ability to do password resets. The help desk already can reset ...
5
votes
3answers
919 views

Why do some websites prevent you from using non-alphanumeric characters in your site password? [closed]

I logged in to a website today and found this message: As a part of new security systems upgrades, we are requiring all existing customers to change their password to enhance the protection of ...
8
votes
5answers
2k views

When would you use the “password never expires” option?

I'm simply wondering when you should set a user account so that the password never expires. On what accounts is this a good idea?
2
votes
2answers
131 views

allow web designer to change password?

I have a Linux web server, and I've created a user (in/etc/passwd) for a web designer. I pre-set her password and she uses the sftp uploading capability of her web design software to upload content. ...
3
votes
2answers
7k views

Password policy vs password never expires question

I'm new to the Server administration game. I'm about to push out my first group policy concerning passwords. I'm going to do something simple. Use MS's built in complexity requirements and an max ...
3
votes
4answers
717 views

Password expiration notice for Active Directory

Are there any tools/apps/scripts out there that will do password expiry notification for Windows 2008 Active Directory credentials? This is needed for our web apps that use Active Directory for LDAP ...
1
vote
1answer
1k views

How to change password schema for Dovecot user authentication for an already existing mail server

I have an email server setup on Debian Lenny with Postfix, Dovecot, SASL and MySQL. Currently, the password scheme in my dovecot-sql.conf file is set to: CRYPT default_pass_scheme = CRYPT I would ...
1
vote
1answer
195 views

Software for asset or password management in a team

At the office we are looking for software to manage, share and store several of our digital assets like software licenses, registration codes, and most importantly passwords for our hundreds of ...
1
vote
2answers
815 views

Setting password expiration settings on CentOS

How does one set the password expiration parameters on CentOS or Red Hat Linux using PAM? Specifically, I need to set the following: Maximum number of days that a password may be used. Minimum ...
1
vote
2answers
295 views

Bulk change passwords

I am converting some scripts from an ancient SuSe install, after a swap to ubuntu. These scripts uses a tool called mkpasswd, which sets user passwords. I wonder if there is something similar for ...
1
vote
3answers
233 views

Active Directory Account Creation

We are creating the AD account and password automatically. The Helpdesk will not know the password or use it in way. I'm looking for other companies that are maybe doing the same type of procedure. ...
0
votes
1answer
3k views

How to configure password maximum days before it expires?

I want to set Maximum days of a password can be used. So I configure PASS_MAX_DAYS in /etc/login.defs, and PASS_WARN_AGE to warn user before the password expired. In my example, I set PASS_MAX_DAYS = ...
0
votes
2answers
421 views

Does anyone know of a program that will synchronize Google Apps usernames & passwords with Active Directory usernames & passwords?

It would be so great if I could just avoid all the API junk, and install a program on one of my servers that would actively monitor AD and G-Apps and sync stuff between them. I could just create ...
3
votes
3answers
195 views

Good ways to disseminate login information, especially when new users are created?

When you create user logins in bulk, with set passwords as many users are unlikely to change their passwords, how do you disseminate the information? Students in our school division are automatically ...
2
votes
2answers
380 views

Software for managing outside inventory, users and passwords

We are a small sized consulting and system integration company, and we install and partially manage (not always with remote access) different servers and workstations. We need a centralized, and ...
1
vote
5answers
2k views

How can I use fetchmail (or another email grabber) with OSX keychain for authentication?

Many fetchmail tutorials I've read says putting your email account password clear-text in a config file is safe. However, I prefer security through layers [silly example: if my terminal is up and ...
11
votes
15answers
2k views

What's the safest online password system?

It's so difficult to track dozens of passwords in different locations. Syncing fails from time to time and you end up with collision correction avoidance syndrome. Is there a single source of safe, ...
1
vote
2answers
90 views

Adding new users [duplicate]

Possible Duplicate: Adding new users I'm trying to add a new user account to my ftp server. I used useradd -p password -d /home/newuser -s newuser now when he tries to log in it ...
4
votes
3answers
668 views

How to test passwords against a word list with fuzzing

How can I test passwords against a dictionary / word list, where the entries have been fuzzed to some degree? By "fuzzed", I mean variants of words with "l33t" conversions and other character ...