Procedures, policies and constraints on password entry, lifetime, change, strength, and storage. An essential part of access management, together with policies on other forms of authentication.

learn more… | top users | synonyms

3
votes
1answer
844 views

smbk5pwd overlay on OpenLDAP 2.4

I have an OpenLDAP server and I want to configure the smbk5pwd overlay to make OpenLDAP update the sambaNTPassword and sambaLMPassword attributes automatically when a change occurs on userPassword. ...
2
votes
4answers
436 views

Is there an app/script I can deploy to enable my users to change their own LDAP passwords?

I've recently enabled LDAP based authentication on my domain. This has allowed us to use a single set of credentials to administer the blog, the forum and the wiki. Unfortunately, this has come at ...
2
votes
5answers
2k views

How can I use fetchmail (or another email grabber) with OSX keychain for authentication?

Many fetchmail tutorials I've read says putting your email account password clear-text in a config file is safe. However, I prefer security through layers [silly example: if my terminal is up and ...
2
votes
2answers
183 views

Is there a password agent for the mysql command-line client?

I use the mysql command line client frequently. Sometimes I wind up typing in my password dozens of times per day, and I'm getting really tired of it. SSH has a neat utility called ssh-agent which ...
2
votes
2answers
2k views

What is the purpose of openssl passwd

I'm reading "Reliably Deploying Rails Applications" Regarding defining users to be set up by Chef, it says: “Next we need to define users, inside data_bags/users copy the file deploy.json.example to ...
2
votes
2answers
209 views

Is it wise to use very secure password for sudo users when using SSH Keys for server login?

I am not asking how to do anything here, rather trying to understand best practices and the "right" way to handle server security. To prevent brute force password attacks, I have secured my server in ...
2
votes
1answer
1k views

Privileges for resetting password, changing password, unlocking account, and read profile

I have made a service that has the capability to reset, changes passwords, unlock a locked out account, and read AD profile values (e.g. sn, firstname etc) of some domain user after the user verifies ...
2
votes
3answers
276 views

Should I create a password for a user if they only will be using ssh key authentication?

I am adding a new user account (to a CentOS 6.2 box) which will only use ssh key authentication (with a strong key passphrase of course). I have disabled ssh password auth in sshd_config. Should I ...
2
votes
2answers
603 views

D-Link DES-3550: can't change password

I have a D-Link DES-3550 switch, Firmware: Build 5.00-B28. I want to change admin password, but somehow I am unable to do this: DES-3550 Fast Ethernet Switch Command Line Interface ...
2
votes
1answer
68 views

Best practice for assigning passwords in a company

I work in a small company and have been spending a lot of time optimizing our network. Our security system is, sadly, abysmal, seeing as no one ever really took care of it. So I'm looking for an ...
2
votes
2answers
404 views

Software for managing outside inventory, users and passwords

We are a small sized consulting and system integration company, and we install and partially manage (not always with remote access) different servers and workstations. We need a centralized, and ...
2
votes
2answers
132 views

allow web designer to change password?

I have a Linux web server, and I've created a user (in/etc/passwd) for a web designer. I pre-set her password and she uses the sftp uploading capability of her web design software to upload content. ...
2
votes
0answers
152 views

Deploy RDWeb on a non-default website

I have a public website and a private site set up like below: Public site: samplesite.com (http) Private site: my.samplesite.com (https) I'm trying to use RDWeb to enable users to change Active ...
2
votes
0answers
46 views

Where do you store shared secrets used in building VMs dynamically (phoenix servers)?

We use vagrant to spin up linux VMs for dev, testing, and evaluation servers for our software. Most often, devs are using linux from VMs inside an AD-connected windows7 box. The configuration of the ...
1
vote
3answers
217 views

Your thoughts on managing passwords in a corporate server environment

Good evening, I'm thinking about implementing some way to manage passwords for our Linux/Windows servers based solely on security concerns and an ever growing number of servers. How do you do it? ...
1
vote
2answers
90 views

Adding new users [duplicate]

Possible Duplicate: Adding new users I'm trying to add a new user account to my ftp server. I used useradd -p password -d /home/newuser -s newuser now when he tries to log in it ...
1
vote
2answers
90 views

How to store admin passwords in a way that can be accessed by multiple admins? [closed]

How to store all the admin passwords for routers, servers, desktop computers in the network if they need to be accessible by multiple admins? There are so many that they can't be memorised and they ...
1
vote
3answers
131 views

How to manage credentials on multiserver environment

I have a some software that uses its own encrypted file for password storage ( such as ftp, web and other passwords to login to external systems, there is no way to use certificates ). On each server ...
1
vote
2answers
316 views

Bulk change passwords

I am converting some scripts from an ancient SuSe install, after a swap to ubuntu. These scripts uses a tool called mkpasswd, which sets user passwords. I wonder if there is something similar for ...
1
vote
1answer
2k views

Group Policy “Maximum password age” fails to apply

In my Windows network with all AD servers (still) running Windows 2003, I encounter the following problem: The "Maximum password age" policy apparently does not apply. Even though some of the users ...
1
vote
2answers
24k views

AD User Passwords expiring without any notifications?

We setup password Policies in Active Directory to Expire peoples passwords after so many days. Well it looks like the time has come for the Expiration of the Passwords and people are getting locked ...
1
vote
5answers
911 views

How do you keep track of machines, password, accounts etc? [duplicate]

Possible Duplicates: How do you manage your passwords? How do you manage service account credentials (passwords) ? I've long since passed the line where I can remember passwords and names ...
1
vote
1answer
75 views

Postfix + Dovecot with MySQL backend: md5-hashed passwords and CRAM-MD5 auth

My question What are the risks of switching from MD5 to CRAM-MD5 passwords in the database, especially considering the following, and how to approach that for an existing installation (provided I ...
1
vote
2answers
567 views

tools for user account management for solaris and linux platforms

we have a setup consisting of 60+ hosts (solaris and linux). we would like to develop/install a tool that helps us with passwd resets, account creation/deletion, and other common user account mgmt ...
1
vote
3answers
662 views

Locating services running as an Active Directory user account

My organization's password policy requires that passworsds for two accounts in particular be updated/changed on a regular basis. Is there a way to determine where a particular AD user account has ...
1
vote
1answer
465 views

Why is a linux account not accepting old password after changing password expiration to “never” using chage?

CentOS 5.x I have an old user account that had a password policy in effect that expired. [foo@foobox ~]# chage -l foouser Minimum: 0 Maximum: 90 Warning: 5 Inactive: 5 ...
1
vote
2answers
641 views

Is KeePass good for saving passwords for IT managers?

I am considering switching from passwords.rtf to a new system that is actually secure. I am a great fan of Dropbox and I am a great fan of efficient and quick working. If a passwords system requires 2 ...
1
vote
3answers
975 views

How to make Plesk NOT block the browser password auto-complete feature? [closed]

All versions of the Plesk control panel software always had this "feature" where they disable the browser password auto-complete feature. Sure, they argue it's a security measure, but it's really not. ...
1
vote
1answer
732 views

Password lifetimes, length, complexity and history. Is there something to help?

I need to implement some better control for passwords on a our slackware servers. I have always manually done this but the need for some automation routines to handle a lifetime check, length, ...
1
vote
1answer
26 views

How can I automate the retrieval and usage of passwords from within a script?

We have automated scripts that access certain devices and are getting the passwords for the devices from a root-read-only plain-text file. Is there some kind of architecture we can use so that we can ...
1
vote
3answers
97 views

Unable to change domain password even if the password is complex

I have a problem with users not being able to change their passwords. When they try to change the password, they get this error: "Your new password does not meet the length, complexity, or history ...
1
vote
1answer
62 views

How to change Account Lockout Threshold when the path cannot be found

I am trying to change the account lockout threshold for all the users on our domain. The threshold should be three, but there are users who get locked out after one mistyped password, and others who ...
1
vote
1answer
1k views

Token error when trying to change password through pam-mysql

I am currently preparing a machine for a web hosting service, and I decided to use MySQL to store all our users (since the rest of our services use it already). For that, I am using libnss-mysql and ...
1
vote
1answer
74 views

Remote Windows user's password will not update

One of our remote users had his domain account password expire, so he logged onto a terminal server in the same site as the RRAS server he uses for RA VPN to reset his password. He stays connected ...
1
vote
1answer
118 views

Masquerade as User in Enterprise Windows Environment

In a large Enterprise Windows Environment. What do IT people do to login as a user if needed? It seems impossible to me to keep user passwords in a large environment. In a Mac environment, you have ...
1
vote
1answer
998 views

SharePoint 2010 Password Change?

Does anyone know of a way to allow password changes via SharePoint's web interface? Either a add on or settings?
1
vote
1answer
2k views

How to change password schema for Dovecot user authentication for an already existing mail server

I have an email server setup on Debian Lenny with Postfix, Dovecot, SASL and MySQL. Currently, the password scheme in my dovecot-sql.conf file is set to: CRYPT default_pass_scheme = CRYPT I would ...
1
vote
1answer
205 views

Software for asset or password management in a team

At the office we are looking for software to manage, share and store several of our digital assets like software licenses, registration codes, and most importantly passwords for our hundreds of ...
1
vote
2answers
955 views

Setting password expiration settings on CentOS

How does one set the password expiration parameters on CentOS or Red Hat Linux using PAM? Specifically, I need to set the following: Maximum number of days that a password may be used. Minimum ...
1
vote
2answers
207 views

Password Vaults

The company I work for is looking to setup a web based application that will host the passwords. So it should use SSL and be able to have access controls implemented by user. It does not necessarily ...
1
vote
3answers
234 views

Active Directory Account Creation

We are creating the AD account and password automatically. The Helpdesk will not know the password or use it in way. I'm looking for other companies that are maybe doing the same type of procedure. ...
1
vote
1answer
279 views

Mapped Network Drives Persistently Requesting Credentials

I run a small office network with one Windows 2008 R2 DC and eight Windows 8.1 clients connecting to it. All of the machines have computer accounts on the domain and each user has an old school logon ...
0
votes
4answers
230 views

Security policy: servers without root/administrator password

I am considering running public web and application servers with blank root/Administrator passwords, and I'm wondering whether this might be a bad policy. I see several advantages of having no ...
0
votes
2answers
3k views

Group Policy for Setting Passwords: Server 2003 Domain

In my 2003 domain, I am being requested to set a password policy to require passwords to expire every 4 months, and also require users to change their password on their next login, due to a security ...
0
votes
1answer
2k views

Password reset fails for end users when minimum password age set for more than 0 days

Our Help Desk has been resetting user passwords with "user must reset password at next logon" for years. Recently reset default domain policy for "minimum password age" from 0 days to 5 days. Now ...
0
votes
1answer
3k views

How to configure password maximum days before it expires?

I want to set Maximum days of a password can be used. So I configure PASS_MAX_DAYS in /etc/login.defs, and PASS_WARN_AGE to warn user before the password expired. In my example, I set PASS_MAX_DAYS = ...
0
votes
1answer
85 views

Password Manager Pro backend database MS SQL vs PostgreSQL [closed]

I'm looking to manage users passwords through the programme Password Manager Pro. Reading the documentation it explains that you can use ether your own MS SQL database or use their default PostgreSQL ...
0
votes
1answer
26 views

Unassigned password has expired

On a RHEL6.4 box, I have a user who hasn't been assigned a password. In the /etc/shadow file, the password is shown as !!. This is intentional; that user only logs in using public key authentication. ...
0
votes
1answer
119 views

Cannot enforce password change in OpenLDAP with Password Policy Overlay

I've implemented Password Policy Overlay on OpenLDAP on Debian Stable. The server side and the policies are working as expected. However, after expiration I cannot force users to change their ...
0
votes
1answer
422 views

Disable Admin password requirement on Domain user PC

So here is my situation: My company runs a "Windows 2003 Server Standard Edition" domain server, connected to a bunch of Dell Optiplex PC's (380's, and 9020's). The older Dells (380) are connected to ...