Procedures, policies and constraints on password entry, lifetime, change, strength, and storage. An essential part of access management, together with policies on other forms of authentication.

learn more… | top users | synonyms

2
votes
2answers
172 views

Is it wise to use very secure password for sudo users when using SSH Keys for server login?

I am not asking how to do anything here, rather trying to understand best practices and the "right" way to handle server security. To prevent brute force password attacks, I have secured my server in ...
2
votes
1answer
675 views

Privileges for resetting password, changing password, unlocking account, and read profile

I have made a service that has the capability to reset, changes passwords, unlock a locked out account, and read AD profile values (e.g. sn, firstname etc) of some domain user after the user verifies ...
2
votes
2answers
517 views

Developing a Password Sync Plugin for Active Directory

Recently i came across through password sync plug-ins provided by many identity management provider vendors (Tivoli, Oracle, CA) they provide a password sync plug-in which we will install on every ...
2
votes
3answers
267 views

Should I create a password for a user if they only will be using ssh key authentication?

I am adding a new user account (to a CentOS 6.2 box) which will only use ssh key authentication (with a strong key passphrase of course). I have disabled ssh password auth in sshd_config. Should I ...
2
votes
2answers
493 views

D-Link DES-3550: can't change password

I have a D-Link DES-3550 switch, Firmware: Build 5.00-B28. I want to change admin password, but somehow I am unable to do this: DES-3550 Fast Ethernet Switch Command Line Interface ...
2
votes
1answer
57 views

Best practice for assigning passwords in a company

I work in a small company and have been spending a lot of time optimizing our network. Our security system is, sadly, abysmal, seeing as no one ever really took care of it. So I'm looking for an ...
2
votes
2answers
380 views

Software for managing outside inventory, users and passwords

We are a small sized consulting and system integration company, and we install and partially manage (not always with remote access) different servers and workstations. We need a centralized, and ...
2
votes
2answers
131 views

allow web designer to change password?

I have a Linux web server, and I've created a user (in/etc/passwd) for a web designer. I pre-set her password and she uses the sftp uploading capability of her web design software to upload content. ...
1
vote
3answers
215 views

Your thoughts on managing passwords in a corporate server environment

Good evening, I'm thinking about implementing some way to manage passwords for our Linux/Windows servers based solely on security concerns and an ever growing number of servers. How do you do it? ...
1
vote
5answers
2k views

How can I use fetchmail (or another email grabber) with OSX keychain for authentication?

Many fetchmail tutorials I've read says putting your email account password clear-text in a config file is safe. However, I prefer security through layers [silly example: if my terminal is up and ...
1
vote
2answers
90 views

Adding new users [duplicate]

Possible Duplicate: Adding new users I'm trying to add a new user account to my ftp server. I used useradd -p password -d /home/newuser -s newuser now when he tries to log in it ...
1
vote
2answers
826 views

What is the purpose of openssl passwd

I'm reading "Reliably Deploying Rails Applications" Regarding defining users to be set up by Chef, it says: “Next we need to define users, inside data_bags/users copy the file deploy.json.example to ...
1
vote
3answers
117 views

How to manage credentials on multiserver environment

I have a some software that uses its own encrypted file for password storage ( such as ftp, web and other passwords to login to external systems, there is no way to use certificates ). On each server ...
1
vote
2answers
295 views

Bulk change passwords

I am converting some scripts from an ancient SuSe install, after a swap to ubuntu. These scripts uses a tool called mkpasswd, which sets user passwords. I wonder if there is something similar for ...
1
vote
1answer
908 views

Group Policy “Maximum password age” fails to apply

In my Windows network with all AD servers (still) running Windows 2003, I encounter the following problem: The "Maximum password age" policy apparently does not apply. Even though some of the users ...
1
vote
5answers
886 views

How do you keep track of machines, password, accounts etc? [duplicate]

Possible Duplicates: How do you manage your passwords? How do you manage service account credentials (passwords) ? I've long since passed the line where I can remember passwords and names ...
1
vote
2answers
431 views

tools for user account management for solaris and linux platforms

we have a setup consisting of 60+ hosts (solaris and linux). we would like to develop/install a tool that helps us with passwd resets, account creation/deletion, and other common user account mgmt ...
1
vote
3answers
257 views

Locating services running as an Active Directory user account

My organization's password policy requires that passworsds for two accounts in particular be updated/changed on a regular basis. Is there a way to determine where a particular AD user account has ...
1
vote
1answer
402 views

Why is a linux account not accepting old password after changing password expiration to “never” using chage?

CentOS 5.x I have an old user account that had a password policy in effect that expired. [foo@foobox ~]# chage -l foouser Minimum: 0 Maximum: 90 Warning: 5 Inactive: 5 ...
1
vote
2answers
17k views

AD User Passwords expiring without any notifications?

We setup password Policies in Active Directory to Expire peoples passwords after so many days. Well it looks like the time has come for the Expiration of the Passwords and people are getting locked ...
1
vote
2answers
613 views

Is KeePass good for saving passwords for IT managers?

I am considering switching from passwords.rtf to a new system that is actually secure. I am a great fan of Dropbox and I am a great fan of efficient and quick working. If a passwords system requires 2 ...
1
vote
3answers
854 views

How to make Plesk NOT block the browser password auto-complete feature? [closed]

All versions of the Plesk control panel software always had this "feature" where they disable the browser password auto-complete feature. Sure, they argue it's a security measure, but it's really not. ...
1
vote
1answer
701 views

Password lifetimes, length, complexity and history. Is there something to help?

I need to implement some better control for passwords on a our slackware servers. I have always manually done this but the need for some automation routines to handle a lifetime check, length, ...
1
vote
1answer
583 views

Token error when trying to change password through pam-mysql

I am currently preparing a machine for a web hosting service, and I decided to use MySQL to store all our users (since the rest of our services use it already). For that, I am using libnss-mysql and ...
1
vote
1answer
38 views

Remote Windows user's password will not update

One of our remote users had his domain account password expire, so he logged onto a terminal server in the same site as the RRAS server he uses for RA VPN to reset his password. He stays connected ...
1
vote
1answer
92 views

Masquerade as User in Enterprise Windows Environment

In a large Enterprise Windows Environment. What do IT people do to login as a user if needed? It seems impossible to me to keep user passwords in a large environment. In a Mac environment, you have ...
1
vote
1answer
948 views

SharePoint 2010 Password Change?

Does anyone know of a way to allow password changes via SharePoint's web interface? Either a add on or settings?
1
vote
1answer
1k views

How to change password schema for Dovecot user authentication for an already existing mail server

I have an email server setup on Debian Lenny with Postfix, Dovecot, SASL and MySQL. Currently, the password scheme in my dovecot-sql.conf file is set to: CRYPT default_pass_scheme = CRYPT I would ...
1
vote
1answer
195 views

Software for asset or password management in a team

At the office we are looking for software to manage, share and store several of our digital assets like software licenses, registration codes, and most importantly passwords for our hundreds of ...
1
vote
2answers
815 views

Setting password expiration settings on CentOS

How does one set the password expiration parameters on CentOS or Red Hat Linux using PAM? Specifically, I need to set the following: Maximum number of days that a password may be used. Minimum ...
1
vote
2answers
207 views

Password Vaults

The company I work for is looking to setup a web based application that will host the passwords. So it should use SSL and be able to have access controls implemented by user. It does not necessarily ...
1
vote
0answers
93 views

Deploy RDWeb on a non-default website

I have a public website and a private site set up like below: Public site: samplesite.com (http) Private site: my.samplesite.com (https) I'm trying to use RDWeb to enable users to change Active ...
1
vote
0answers
35 views

Where do you store shared secrets used in building VMs dynamically (phoenix servers)?

We use vagrant to spin up linux VMs for dev, testing, and evaluation servers for our software. Most often, devs are using linux from VMs inside an AD-connected windows7 box. The configuration of the ...
1
vote
3answers
233 views

Active Directory Account Creation

We are creating the AD account and password automatically. The Helpdesk will not know the password or use it in way. I'm looking for other companies that are maybe doing the same type of procedure. ...
1
vote
1answer
131 views

Mapped Network Drives Persistently Requesting Credentials

I run a small office network with one Windows 2008 R2 DC and eight Windows 8.1 clients connecting to it. All of the machines have computer accounts on the domain and each user has an old school logon ...
0
votes
2answers
2k views

Group Policy for Setting Passwords: Server 2003 Domain

In my 2003 domain, I am being requested to set a password policy to require passwords to expire every 4 months, and also require users to change their password on their next login, due to a security ...
0
votes
1answer
823 views

Password reset fails for end users when minimum password age set for more than 0 days

Our Help Desk has been resetting user passwords with "user must reset password at next logon" for years. Recently reset default domain policy for "minimum password age" from 0 days to 5 days. Now ...
0
votes
1answer
60 views

Password Manager Pro backend database MS SQL vs PostgreSQL [closed]

I'm looking to manage users passwords through the programme Password Manager Pro. Reading the documentation it explains that you can use ether your own MS SQL database or use their default PostgreSQL ...
0
votes
1answer
26 views

Unassigned password has expired

On a RHEL6.4 box, I have a user who hasn't been assigned a password. In the /etc/shadow file, the password is shown as !!. This is intentional; that user only logs in using public key authentication. ...
0
votes
1answer
3k views

How to configure password maximum days before it expires?

I want to set Maximum days of a password can be used. So I configure PASS_MAX_DAYS in /etc/login.defs, and PASS_WARN_AGE to warn user before the password expired. In my example, I set PASS_MAX_DAYS = ...
0
votes
1answer
145 views

Disable Admin password requirement on Domain user PC

So here is my situation: My company runs a "Windows 2003 Server Standard Edition" domain server, connected to a bunch of Dell Optiplex PC's (380's, and 9020's). The older Dells (380) are connected to ...
0
votes
1answer
613 views

SSMS 2008 not remembering connection login credentials

When connecting to a server on SQL Server Management Studio 2008, I'm entering the Server Name, and using SQL Server Authentication, entering Login & Password, and ticking Remember password. ...
0
votes
1answer
69 views

How google,yahoo and other mail services securing passwords?

How Google,yahoo and other top level mail services securing passwords ? What technology they are using for securing and storing ? How they managing mail passwords ?
0
votes
2answers
421 views

Does anyone know of a program that will synchronize Google Apps usernames & passwords with Active Directory usernames & passwords?

It would be so great if I could just avoid all the API junk, and install a program on one of my servers that would actively monitor AD and G-Apps and sync stuff between them. I could just create ...
0
votes
1answer
356 views

Where is my Users Account -> Advanced Tab?

I'm running XP Pro SP-3. I want to manage my user network passwords as in this tab: But for some reason when I go to my user accounts I get a different view and nowhere to get to this feature. ...
0
votes
0answers
11 views

Access denied on service password change (might be commands using)

This works if I change the password manually but I get an access denied. I think it might be how I am trying to do it #Service Credential Change -Multi #This script allows us to input a password in a ...
0
votes
0answers
12 views

Macs Users aren't able to Change Password via VPN

I have few users who uses Macs laptop at my company, and it came to my attention that they are unable to change their Domain password via VPN. The Macs are running OS X Yosemite, and this only effects ...
0
votes
0answers
28 views

Forcing a password change on OpenBSD

On OpenBSD 5.6 I need to provision a number of user accounts with default passwords. I would like users, upon their first SSH login, to be forced to change their passwords from the default. On CentOS ...
0
votes
0answers
142 views

Users cannot change their passwords in Active Directory

We have created a new domain. The DCs are server 2012 and 2012r2 and the functional level of both forest and domain is 2008. Password policy is only set on the default domain policy and is set to ...
0
votes
0answers
27 views

FTP automated user password maintenance

We have a need to automate a FTPS transfer using named accounts which require periodic password resets. Due to another party having control over the accounts, we cannot change them to service accounts ...