Procedures, policies and constraints on password entry, lifetime, change, strength, and storage. An essential part of access management, together with policies on other forms of authentication.

learn more… | top users | synonyms

50
votes
9answers
14k views

Company Password Management [closed]

The topic of personal password management has been covered in great detail time after time. This question is aimed at the business or organization that needs to keep track of many unique passwords for ...
25
votes
4answers
2k views

Is there a way to provide user-specific passwords for Wi-Fi?

Is there a way to provide user-specific passwords for Wi-Fi, so that different users have different passwords? I'd like to provide each user with a different password for my Wi-Fi connection.
1
vote
1answer
74 views

Mapped Network Drives Persistently Requesting Credentials

I run a small office network with one Windows 2008 R2 DC and eight Windows 8.1 clients connecting to it. All of the machines have computer accounts on the domain and each user has an old school logon ...
0
votes
1answer
36 views

Password Manager Pro backend database MS SQL vs PostgreSQL [closed]

I'm looking to manage users passwords through the programme Password Manager Pro. Reading the documentation it explains that you can use ether your own MS SQL database or use their default PostgreSQL ...
0
votes
1answer
75 views

Disable Admin password requirement on Domain user PC

So here is my situation: My company runs a "Windows 2003 Server Standard Edition" domain server, connected to a bunch of Dell Optiplex PC's (380's, and 9020's). The older Dells (380) are connected to ...
0
votes
1answer
597 views

SSMS 2008 not remembering connection login credentials

When connecting to a server on SQL Server Management Studio 2008, I'm entering the Server Name, and using SQL Server Authentication, entering Login & Password, and ticking Remember password. ...
-1
votes
3answers
164 views

Security policy: servers without root/administrator password

I am considering running public web and application servers with blank root/Administrator passwords, and I'm wondering whether this might be a bad policy. I see several advantages of having no ...
3
votes
2answers
313 views

Must create PowerShell script to change Password Expiry and Date to change next password

I've been tasked with creating a script that reads in a file a list of Active Directory user IDs and then clears the flag for Password Never Expires. In addition, my security officer doesn't want the ...
3
votes
2answers
287 views

Centrally managing logins to lots of linux machines

We have a growing collection of servers, both physical and virtual, which we need to login into. Login is usually with SSH, using an RSA key pair rather than a password (which is switched off in SSH ...
3
votes
1answer
55 views

The ipmitool conundrum

We have been trying to migrate to a better password management system on our server. The problem was that all this days we were using a proprietary algorithm to create a hash (a decryptable hash). In ...
4
votes
1answer
130 views

Changing password expiration policy at next password change

We have a password policy with a maximum password age of 180 days. For various reasons we need to change it to 90 days, with a minimum impact for the users. Our users are normally warned about the ...
0
votes
1answer
492 views

Password reset fails for end users when minimum password age set for more than 0 days

Our Help Desk has been resetting user passwords with "user must reset password at next logon" for years. Recently reset default domain policy for "minimum password age" from 0 days to 5 days. Now ...
0
votes
0answers
33 views

auto-reset of cpanel passwords every month

I am wondering is there away to automatically every calendar month reset all the cpanel account passwords on a VPS server? I have WHM and cPanel, I am worried about our sites being attacked, and ...
0
votes
1answer
26 views

Unassigned password has expired

On a RHEL6.4 box, I have a user who hasn't been assigned a password. In the /etc/shadow file, the password is shown as !!. This is intentional; that user only logs in using public key authentication. ...
0
votes
0answers
94 views

Users cannot change their passwords in Active Directory

We have created a new domain. The DCs are server 2012 and 2012r2 and the functional level of both forest and domain is 2008. Password policy is only set on the default domain policy and is set to ...
1
vote
1answer
371 views

Token error when trying to change password through pam-mysql

I am currently preparing a machine for a web hosting service, and I decided to use MySQL to store all our users (since the rest of our services use it already). For that, I am using libnss-mysql and ...
0
votes
0answers
24 views

FTP automated user password maintenance

We have a need to automate a FTPS transfer using named accounts which require periodic password resets. Due to another party having control over the accounts, we cannot change them to service accounts ...
3
votes
1answer
2k views

How is the “change password at next logon” requirement supposed to work with RDP using Network Level Authentication?

We have a Windows server (2008 R2) with the "Remote Desktop Services" feature installed and no Active Directory domain. Remote desktop is set up to "Allow connections only from computers running ...
1
vote
0answers
81 views

Deploy RDWeb on a non-default website

I have a public website and a private site set up like below: Public site: samplesite.com (http) Private site: my.samplesite.com (https) I'm trying to use RDWeb to enable users to change Active ...
1
vote
1answer
633 views

Group Policy “Maximum password age” fails to apply

In my Windows network with all AD servers (still) running Windows 2003, I encounter the following problem: The "Maximum password age" policy apparently does not apply. Even though some of the users ...
0
votes
0answers
57 views

AD LDS changing password events

We've implemented AD LDS and we want to monitor password changes on it. However, the events I see doesn't provide much information. The only thing I see is this 4793 event (Security logs) The ...
-1
votes
1answer
65 views

establish passwordless login without asking the user [duplicate]

On Linux when using dsa keys I establish passwordless login with the command ssh-copy-id -i .ssh/id_dsa.pub user@target.host This prompts the user for user's password on target.host. My script ...
2
votes
1answer
49 views

Best practice for assigning passwords in a company

I work in a small company and have been spending a lot of time optimizing our network. Our security system is, sadly, abysmal, seeing as no one ever really took care of it. So I'm looking for an ...
3
votes
3answers
1k views

Lock Workstation Glitch? (AD/Windows XP)

I was playing with a lab setup recently (Windows 2003 R2 x32 SP2, Windows XP SP3, Active Directory) and noticed that if I locked the workstation, the following strange behaviour appeared: I have a ...
3
votes
1answer
411 views

smbk5pwd overlay on OpenLDAP 2.4

I have an OpenLDAP server and I want to configure the smbk5pwd overlay to make OpenLDAP update the sambaNTPassword and sambaLMPassword attributes automatically when a change occurs on userPassword. ...
1
vote
2answers
510 views

What is the purpose of openssl passwd

I'm reading "Reliably Deploying Rails Applications" Regarding defining users to be set up by Chef, it says: “Next we need to define users, inside data_bags/users copy the file deploy.json.example to ...
1
vote
0answers
30 views

Where do you store shared secrets used in building VMs dynamically (phoenix servers)?

We use vagrant to spin up linux VMs for dev, testing, and evaluation servers for our software. Most often, devs are using linux from VMs inside an AD-connected windows7 box. The configuration of the ...
0
votes
0answers
18 views

How to suppress request string logging in App Engine to secure passwords

I am designing an app for Google App Engine. In my initial set up, I have the user submit their username and password to my app via AJAX. I then hash it and compare that to a stored hash without ...
1
vote
1answer
33 views

Remote Windows user's password will not update

One of our remote users had his domain account password expire, so he logged onto a terminal server in the same site as the RRAS server he uses for RA VPN to reset his password. He stays connected ...
2
votes
2answers
154 views

Is it wise to use very secure password for sudo users when using SSH Keys for server login?

I am not asking how to do anything here, rather trying to understand best practices and the "right" way to handle server security. To prevent brute force password attacks, I have secured my server in ...
3
votes
0answers
176 views

Outlook Change Password Prompt - What enables this, and what do I put for Exchange Server?

One of my end users sent me this screen, which is obviously indicative of an expired user password I'm unable to replicate this in my lab, nor do I know what value to put in for Exchange. (is it ...
4
votes
5answers
8k views

How to let users change linux password from web browser?

I'm not sure if this is a stackoverflow question or serverfault but here goes: I have an Ubuntu 10.04 file server (Samba/FTP/HTTP) and I would like to have the ability to give users the ability to ...
7
votes
2answers
1k views

How do i change Active Directory Password in Windows 2012 Terminal Server without Using CTRL ALT

How do i change Active Directory Password in Windows 2012 Terminal Server without Using CTRL + ALT I cant use CTRL + ALT + END And CTRL + ALT + DEL Is there any other Method invoking the Security ...
0
votes
1answer
68 views

How google,yahoo and other mail services securing passwords?

How Google,yahoo and other top level mail services securing passwords ? What technology they are using for securing and storing ? How they managing mail passwords ?
-1
votes
2answers
36 views

How do I change a third party service password without stopping my service that depends on that service?

Here's my scenario: I have a service that has to run 24/7 and depends on a third party service that has a password. I need to have that password changed. If I blindly change the password my service ...
3
votes
2answers
4k views

Cannot disable password expiry on Server 2012

I have an internal only Windows Server 2012 which I want to disable the password policy on. (The server is also a domain controller, if that makes any difference.) I've tried following the ...
4
votes
3answers
2k views

Central password storage tool that multiple users can access with privilege levels

Working in web development I am in charge of a large array of passwords for various servers, CMSs, etc, etc. At the moment these are stored on paper in a safe, which is cumbersome and an enormous ...
0
votes
1answer
139 views

windows 2008 R2 add another local administrator account without knowing administrator password

I have physical access to a windows 2008 R2 server, I am trying to add a second local administrator account without knowing the original administrator password. It's important that the original ...
12
votes
2answers
303 views

What is the industry standard method for administering the change of the local administrator password for all machines on a domain?

Although there appears to be three available options, one of which is actually secure, there seems to be only two available choices that will be able to impact machines that are not powered on at the ...
1
vote
3answers
113 views

How to manage credentials on multiserver environment

I have a some software that uses its own encrypted file for password storage ( such as ftp, web and other passwords to login to external systems, there is no way to use certificates ). On each server ...
1
vote
2answers
14k views

AD User Passwords expiring without any notifications?

We setup password Policies in Active Directory to Expire peoples passwords after so many days. Well it looks like the time has come for the Expiration of the Passwords and people are getting locked ...
3
votes
4answers
3k views

Password Manager, integrated with Active Directory

We have several passwords and key phrases that we need to store in a central place. However, we need to protect this information so others cannot access it. Our thoughts are to have a password ...
7
votes
6answers
834 views

How do you manage passwords for a large number of servers?

Given how important it is to have different passwords for different systems, how does a data centre with thousands of servers manage? I'm only managing a few dozen machines at the moment, but the ...
1
vote
2answers
382 views

tools for user account management for solaris and linux platforms

we have a setup consisting of 60+ hosts (solaris and linux). we would like to develop/install a tool that helps us with passwd resets, account creation/deletion, and other common user account mgmt ...
0
votes
1answer
23 views

SSL Cert on a 2003 DC for password management

I am looking to implement a self help password management system, I have found this: http://code.google.com/p/pwm/ I have a test server setup but constantly fail to get it to read AD with the test ...
2
votes
2answers
467 views

Developing a Password Sync Plugin for Active Directory

Recently i came across through password sync plug-ins provided by many identity management provider vendors (Tivoli, Oracle, CA) they provide a password sync plug-in which we will install on every ...
50
votes
10answers
18k views

How does a team of Systems Administrators share passwords securely?

What are best practices for sharing hundreds of passwords among a few people? These passwords protect mission critical data, and cannot ever be visible beyond a small team.
4
votes
1answer
177 views

Windows - dsmod enforcing password policies?

I am writing a self service password reset tool for users in my test domain. I would like them to be able to change passwords and not generate a random password. I am using dsmod with a service ...
3
votes
2answers
8k views

keepass web interface [closed]

I'm just getting started with Keepass http://keepass.info/ as a password database. It works great as an standalone application. The problem I'm having is when I am with out MY computer or USB key ...
3
votes
5answers
4k views

Change domain password from non-domain computer (AD)

I have a domain controller on Windows Server 2008. When I set up my users, I gave them all a dummy password with the "must change on next login" checked. Everyone's machine is all on the same ...