Procedures, policies and constraints on password entry, lifetime, change, strength, and storage. An essential part of access management, together with policies on other forms of authentication.

learn more… | top users | synonyms

2
votes
5answers
2k views

How can I use fetchmail (or another email grabber) with OSX keychain for authentication?

Many fetchmail tutorials I've read says putting your email account password clear-text in a config file is safe. However, I prefer security through layers [silly example: if my terminal is up and ...
2
votes
2answers
174 views

Is there a password agent for the mysql command-line client?

I use the mysql command line client frequently. Sometimes I wind up typing in my password dozens of times per day, and I'm getting really tired of it. SSH has a neat utility called ssh-agent which ...
2
votes
2answers
1k views

What is the purpose of openssl passwd

I'm reading "Reliably Deploying Rails Applications" Regarding defining users to be set up by Chef, it says: “Next we need to define users, inside data_bags/users copy the file deploy.json.example to ...
2
votes
2answers
193 views

Is it wise to use very secure password for sudo users when using SSH Keys for server login?

I am not asking how to do anything here, rather trying to understand best practices and the "right" way to handle server security. To prevent brute force password attacks, I have secured my server in ...
2
votes
1answer
828 views

Privileges for resetting password, changing password, unlocking account, and read profile

I have made a service that has the capability to reset, changes passwords, unlock a locked out account, and read AD profile values (e.g. sn, firstname etc) of some domain user after the user verifies ...
2
votes
3answers
273 views

Should I create a password for a user if they only will be using ssh key authentication?

I am adding a new user account (to a CentOS 6.2 box) which will only use ssh key authentication (with a strong key passphrase of course). I have disabled ssh password auth in sshd_config. Should I ...
2
votes
2answers
548 views

D-Link DES-3550: can't change password

I have a D-Link DES-3550 switch, Firmware: Build 5.00-B28. I want to change admin password, but somehow I am unable to do this: DES-3550 Fast Ethernet Switch Command Line Interface ...
2
votes
1answer
62 views

Best practice for assigning passwords in a company

I work in a small company and have been spending a lot of time optimizing our network. Our security system is, sadly, abysmal, seeing as no one ever really took care of it. So I'm looking for an ...
2
votes
2answers
391 views

Software for managing outside inventory, users and passwords

We are a small sized consulting and system integration company, and we install and partially manage (not always with remote access) different servers and workstations. We need a centralized, and ...
2
votes
2answers
132 views

allow web designer to change password?

I have a Linux web server, and I've created a user (in/etc/passwd) for a web designer. I pre-set her password and she uses the sftp uploading capability of her web design software to upload content. ...
1
vote
3answers
217 views

Your thoughts on managing passwords in a corporate server environment

Good evening, I'm thinking about implementing some way to manage passwords for our Linux/Windows servers based solely on security concerns and an ever growing number of servers. How do you do it? ...
1
vote
2answers
90 views

Adding new users [duplicate]

Possible Duplicate: Adding new users I'm trying to add a new user account to my ftp server. I used useradd -p password -d /home/newuser -s newuser now when he tries to log in it ...
1
vote
2answers
57 views

How to store admin passwords in a way that can be accessed by multiple admins? [closed]

How to store all the admin passwords for routers, servers, desktop computers in the network if they need to be accessible by multiple admins? There are so many that they can't be memorised and they ...
1
vote
3answers
124 views

How to manage credentials on multiserver environment

I have a some software that uses its own encrypted file for password storage ( such as ftp, web and other passwords to login to external systems, there is no way to use certificates ). On each server ...
1
vote
2answers
309 views

Bulk change passwords

I am converting some scripts from an ancient SuSe install, after a swap to ubuntu. These scripts uses a tool called mkpasswd, which sets user passwords. I wonder if there is something similar for ...
1
vote
1answer
1k views

Group Policy “Maximum password age” fails to apply

In my Windows network with all AD servers (still) running Windows 2003, I encounter the following problem: The "Maximum password age" policy apparently does not apply. Even though some of the users ...
1
vote
5answers
896 views

How do you keep track of machines, password, accounts etc? [duplicate]

Possible Duplicates: How do you manage your passwords? How do you manage service account credentials (passwords) ? I've long since passed the line where I can remember passwords and names ...
1
vote
2answers
496 views

tools for user account management for solaris and linux platforms

we have a setup consisting of 60+ hosts (solaris and linux). we would like to develop/install a tool that helps us with passwd resets, account creation/deletion, and other common user account mgmt ...
1
vote
3answers
451 views

Locating services running as an Active Directory user account

My organization's password policy requires that passworsds for two accounts in particular be updated/changed on a regular basis. Is there a way to determine where a particular AD user account has ...
1
vote
1answer
430 views

Why is a linux account not accepting old password after changing password expiration to “never” using chage?

CentOS 5.x I have an old user account that had a password policy in effect that expired. [foo@foobox ~]# chage -l foouser Minimum: 0 Maximum: 90 Warning: 5 Inactive: 5 ...
1
vote
2answers
21k views

AD User Passwords expiring without any notifications?

We setup password Policies in Active Directory to Expire peoples passwords after so many days. Well it looks like the time has come for the Expiration of the Passwords and people are getting locked ...
1
vote
2answers
631 views

Is KeePass good for saving passwords for IT managers?

I am considering switching from passwords.rtf to a new system that is actually secure. I am a great fan of Dropbox and I am a great fan of efficient and quick working. If a passwords system requires 2 ...
1
vote
3answers
911 views

How to make Plesk NOT block the browser password auto-complete feature? [closed]

All versions of the Plesk control panel software always had this "feature" where they disable the browser password auto-complete feature. Sure, they argue it's a security measure, but it's really not. ...
1
vote
1answer
720 views

Password lifetimes, length, complexity and history. Is there something to help?

I need to implement some better control for passwords on a our slackware servers. I have always manually done this but the need for some automation routines to handle a lifetime check, length, ...
1
vote
2answers
41 views

Unable to change domain password even if the password is complex

I have a problem with users not being able to change their passwords. When they try to change the password, they get this error: "Your new password does not meet the length, complexity, or history ...
1
vote
1answer
808 views

Token error when trying to change password through pam-mysql

I am currently preparing a machine for a web hosting service, and I decided to use MySQL to store all our users (since the rest of our services use it already). For that, I am using libnss-mysql and ...
1
vote
1answer
47 views

Remote Windows user's password will not update

One of our remote users had his domain account password expire, so he logged onto a terminal server in the same site as the RRAS server he uses for RA VPN to reset his password. He stays connected ...
1
vote
1answer
105 views

Masquerade as User in Enterprise Windows Environment

In a large Enterprise Windows Environment. What do IT people do to login as a user if needed? It seems impossible to me to keep user passwords in a large environment. In a Mac environment, you have ...
1
vote
1answer
969 views

SharePoint 2010 Password Change?

Does anyone know of a way to allow password changes via SharePoint's web interface? Either a add on or settings?
1
vote
1answer
2k views

How to change password schema for Dovecot user authentication for an already existing mail server

I have an email server setup on Debian Lenny with Postfix, Dovecot, SASL and MySQL. Currently, the password scheme in my dovecot-sql.conf file is set to: CRYPT default_pass_scheme = CRYPT I would ...
1
vote
1answer
198 views

Software for asset or password management in a team

At the office we are looking for software to manage, share and store several of our digital assets like software licenses, registration codes, and most importantly passwords for our hundreds of ...
1
vote
2answers
869 views

Setting password expiration settings on CentOS

How does one set the password expiration parameters on CentOS or Red Hat Linux using PAM? Specifically, I need to set the following: Maximum number of days that a password may be used. Minimum ...
1
vote
2answers
207 views

Password Vaults

The company I work for is looking to setup a web based application that will host the passwords. So it should use SSL and be able to have access controls implemented by user. It does not necessarily ...
1
vote
0answers
114 views

Deploy RDWeb on a non-default website

I have a public website and a private site set up like below: Public site: samplesite.com (http) Private site: my.samplesite.com (https) I'm trying to use RDWeb to enable users to change Active ...
1
vote
0answers
38 views

Where do you store shared secrets used in building VMs dynamically (phoenix servers)?

We use vagrant to spin up linux VMs for dev, testing, and evaluation servers for our software. Most often, devs are using linux from VMs inside an AD-connected windows7 box. The configuration of the ...
1
vote
3answers
234 views

Active Directory Account Creation

We are creating the AD account and password automatically. The Helpdesk will not know the password or use it in way. I'm looking for other companies that are maybe doing the same type of procedure. ...
1
vote
1answer
202 views

Mapped Network Drives Persistently Requesting Credentials

I run a small office network with one Windows 2008 R2 DC and eight Windows 8.1 clients connecting to it. All of the machines have computer accounts on the domain and each user has an old school logon ...
0
votes
2answers
3k views

Group Policy for Setting Passwords: Server 2003 Domain

In my 2003 domain, I am being requested to set a password policy to require passwords to expire every 4 months, and also require users to change their password on their next login, due to a security ...
0
votes
1answer
1k views

Password reset fails for end users when minimum password age set for more than 0 days

Our Help Desk has been resetting user passwords with "user must reset password at next logon" for years. Recently reset default domain policy for "minimum password age" from 0 days to 5 days. Now ...
0
votes
1answer
68 views

Password Manager Pro backend database MS SQL vs PostgreSQL [closed]

I'm looking to manage users passwords through the programme Password Manager Pro. Reading the documentation it explains that you can use ether your own MS SQL database or use their default PostgreSQL ...
0
votes
1answer
26 views

Unassigned password has expired

On a RHEL6.4 box, I have a user who hasn't been assigned a password. In the /etc/shadow file, the password is shown as !!. This is intentional; that user only logs in using public key authentication. ...
0
votes
1answer
3k views

How to configure password maximum days before it expires?

I want to set Maximum days of a password can be used. So I configure PASS_MAX_DAYS in /etc/login.defs, and PASS_WARN_AGE to warn user before the password expired. In my example, I set PASS_MAX_DAYS = ...
0
votes
1answer
223 views

Disable Admin password requirement on Domain user PC

So here is my situation: My company runs a "Windows 2003 Server Standard Edition" domain server, connected to a bunch of Dell Optiplex PC's (380's, and 9020's). The older Dells (380) are connected to ...
0
votes
1answer
621 views

SSMS 2008 not remembering connection login credentials

When connecting to a server on SQL Server Management Studio 2008, I'm entering the Server Name, and using SQL Server Authentication, entering Login & Password, and ticking Remember password. ...
0
votes
1answer
69 views

How google,yahoo and other mail services securing passwords?

How Google,yahoo and other top level mail services securing passwords ? What technology they are using for securing and storing ? How they managing mail passwords ?
0
votes
2answers
422 views

Does anyone know of a program that will synchronize Google Apps usernames & passwords with Active Directory usernames & passwords?

It would be so great if I could just avoid all the API junk, and install a program on one of my servers that would actively monitor AD and G-Apps and sync stuff between them. I could just create ...
0
votes
1answer
358 views

Where is my Users Account -> Advanced Tab?

I'm running XP Pro SP-3. I want to manage my user network passwords as in this tab: But for some reason when I go to my user accounts I get a different view and nowhere to get to this feature. ...
0
votes
1answer
28 views

How to change Account Lockout Threshold when the path cannot be found

I am trying to change the account lockout threshold for all the users on our domain. The threshold should be three, but there are users who get locked out after one mistyped password, and others who ...
0
votes
1answer
64 views

Cannot enforce password change in OpenLDAP with Password Policy Overlay

I've implemented Password Policy Overlay on OpenLDAP on Debian Stable. The server side and the policies are working as expected. However, after expiration I cannot force users to change their ...
0
votes
0answers
24 views

Access denied on service password change [duplicate]

This works if I change the password manually but I get an access denied message. I think it might be how I am trying to do it. #Service Credential Change -Multi #This script allows us to input a ...