Questions tagged [password-management]

Procedures, policies and constraints on password entry, lifetime, change, strength, and storage. An essential part of access management, together with policies on other forms of authentication.

21 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
6 votes
1 answer
2k views

How do I secure the access token, on Linux, to remote, automated secrets stores like Hashicorp Vault?

There seems to be a bit of a "chicken and egg" problem with the passwords to the password managers like Hashicorp Vault for Linux. While researching this for some Linux servers, someone clever asked, ...
Nathan Basanese's user avatar
5 votes
0 answers
973 views

Outlook Change Password Prompt - What enables this, and what do I put for Exchange Server?

One of my end users sent me this screen, which is obviously indicative of an expired user password I'm unable to replicate this in my lab, nor do I know what value to put in for Exchange. (is it ...
makerofthings7's user avatar
2 votes
0 answers
3k views

OpenVPN - How to suppress WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this

In OpenVPN GUI, I am getting the red message WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this. I do not want to always re-type my password ...
Honza Zidek's user avatar
2 votes
2 answers
3k views

How to remove AdmPwd Permission from BUILTIN\Users (MS LAPS)

I've deployed MS LAPS to manage local admin passwords and all is working fine, except that non-privileged users are able to access the local admin password, in both Powershell and LAPS UI. Running the ...
bahnjee's user avatar
  • 21
2 votes
0 answers
2k views

SSH disconnects on changing expired password

I enabled password expiration on my Debian 8 server and today my password expired. When I login through SSH, the server forces me to change my password now. I had to enter the old password, specify a ...
TrustedCreeper's user avatar
2 votes
0 answers
775 views

Deploy RDWeb on a non-default website

I have a public website and a private site set up like below: Public site: samplesite.com (http) Private site: my.samplesite.com (https) I'm trying to use RDWeb to enable users to change Active ...
JJLL's user avatar
  • 121
2 votes
0 answers
146 views

Where do you store shared secrets used in building VMs dynamically (phoenix servers)?

We use vagrant to spin up linux VMs for dev, testing, and evaluation servers for our software. Most often, devs are using linux from VMs inside an AD-connected windows7 box. The configuration of the ...
JCii's user avatar
  • 121
1 vote
0 answers
375 views

Can you display/change a message on the Windows 10 "change password" screen?

Does anyone know if it is possible to change the error messages displayed to users when changing their password? Specifically the complexity requires message. If possible I would like to change it to ...
Crimsonfox's user avatar
1 vote
0 answers
189 views

How do I input passwords for mysql config editor inside of a dockerfile

Is there a way to create a docker image that needs to use the mysql_config_editor set command with a password without putting the password in the dockerfile and without manually inputting it later in ...
Uberhumus's user avatar
  • 223
1 vote
3 answers
260 views

Active Directory Account Creation

We are creating the AD account and password automatically. The Helpdesk will not know the password or use it in way. I'm looking for other companies that are maybe doing the same type of procedure. ...
user avatar
1 vote
1 answer
1k views

Mapped Network Drives Persistently Requesting Credentials

I run a small office network with one Windows 2008 R2 DC and eight Windows 8.1 clients connecting to it. All of the machines have computer accounts on the domain and each user has an old school logon ...
Brandon's user avatar
  • 61
1 vote
2 answers
1k views

How to run smbpasswd as root on AIX?

I have Hitachi ID Password Manager (formerly p-synch) set up to change the password on (among other systems) an aix 6.1 server running samba. p-synch has the capability of executing additional ...
jpolache's user avatar
  • 155
0 votes
0 answers
58 views

LAPS Update-AdmPwdADSchema not listed in AD attributes

Having issue getting AD to see added attributes. (found this - LAPS Update-AdmPwdADSchema doesn't add the attributes - does not say how added. Have ran the scripts to add the attributes. Says they ...
Burell's user avatar
  • 1
0 votes
0 answers
290 views

Storing Hashed Passwords for Docker and Docker Compose

What is the best way to store passwords and use them in Dockerfile and docker-compose.yaml. Can I store the secrets in a hashed format and make use of it, So that no one can read my real passwords ...
zakadmin's user avatar
0 votes
1 answer
644 views

Can the Maximum machine account password age be set differently for one OU on a domain controller

In my organization, when we provision a computer one of the steps includes joining our domain. Typically we provision one pc at a time as the need comes up. I would like to get out of this habit and ...
Rich Kiroy's user avatar
0 votes
0 answers
45 views

php config - generate hashed password manually

I've created a php conf file, which include some user / password infos. For testing purposes I've added the password for the database in plain text. Since this can't be a good idea, I want to change ...
zippy-flop's user avatar
0 votes
0 answers
936 views

LAPS ms-Mcs-AdmPwd blank or null values

I am writing a script to export all computer LAPS ms-Mcs-AdmPwd values to KeePass to allow historical logging. I have a few machines for whatever reason a few objects have no password set. However I ...
Keith Templin's user avatar
0 votes
1 answer
2k views

How to configure password synchronization between two Active Directory Domains with Microsoft Identity Manager PCNS?

I have two domains with a two-ways trust relationship (selective authentication). Microsoft Identity Manager is installed, configured and "Password Change Notification Service" is configured and ...
donmelchior's user avatar
0 votes
1 answer
1k views

Automated SFTP transfer using WinSCP - how safe is it to store credentials in Windows environment variables?

I've had to implement an automated SFTP file transfer which requires a username and password. Not wanting to leave the password in a text file / batch script for the world to stumble across, I've ...
Karl Buys's user avatar
  • 121
0 votes
0 answers
161 views

Active Directory password policy for Business Days?

I don't think there's any way to do this after looking through Microsoft's password policy documentation, but on the off-chance that someone was particularly clever: Is it possible to create a policy ...
CC.'s user avatar
  • 1,196
0 votes
1 answer
40 views

Do "Old Passwords" have an expiration?

There are some systems that keep track of "old passwords" for increased security, like Databases, Domain Controllers, personal pages (Like Facebook) etc. Do these "old passwords" have an expiration? ...
Ben's user avatar
  • 111