Questions tagged [password-management]
Procedures, policies and constraints on password entry, lifetime, change, strength, and storage. An essential part of access management, together with policies on other forms of authentication.
21
questions with no upvoted or accepted answers
6
votes
1
answer
2k
views
How do I secure the access token, on Linux, to remote, automated secrets stores like Hashicorp Vault?
There seems to be a bit of a "chicken and egg" problem with the passwords to the password managers like Hashicorp Vault for Linux.
While researching this for some Linux servers, someone clever asked, ...
5
votes
0
answers
973
views
Outlook Change Password Prompt - What enables this, and what do I put for Exchange Server?
One of my end users sent me this screen, which is obviously indicative of an expired user password
I'm unable to replicate this in my lab, nor do I know what value to put in for Exchange. (is it ...
2
votes
0
answers
3k
views
OpenVPN - How to suppress WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
In OpenVPN GUI, I am getting the red message
WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this.
I do not want to always re-type my password ...
2
votes
2
answers
3k
views
How to remove AdmPwd Permission from BUILTIN\Users (MS LAPS)
I've deployed MS LAPS to manage local admin passwords and all is working fine, except that non-privileged users are able to access the local admin password, in both Powershell and LAPS UI.
Running the ...
2
votes
0
answers
2k
views
SSH disconnects on changing expired password
I enabled password expiration on my Debian 8 server and today my password expired.
When I login through SSH, the server forces me to change my password now. I had to enter the old password, specify a ...
2
votes
0
answers
775
views
Deploy RDWeb on a non-default website
I have a public website and a private site set up like below:
Public site: samplesite.com (http)
Private site: my.samplesite.com (https)
I'm trying to use RDWeb to enable users to change Active ...
2
votes
0
answers
146
views
Where do you store shared secrets used in building VMs dynamically (phoenix servers)?
We use vagrant to spin up linux VMs for dev, testing, and evaluation servers for our software. Most often, devs are using linux from VMs inside an AD-connected windows7 box.
The configuration of the ...
1
vote
0
answers
375
views
Can you display/change a message on the Windows 10 "change password" screen?
Does anyone know if it is possible to change the error messages displayed to users when changing their password? Specifically the complexity requires message. If possible I would like to change it to ...
1
vote
0
answers
189
views
How do I input passwords for mysql config editor inside of a dockerfile
Is there a way to create a docker image that needs to use the mysql_config_editor set command with a password without putting the password in the dockerfile and without manually inputting it later in ...
1
vote
3
answers
260
views
Active Directory Account Creation
We are creating the AD account and password automatically. The Helpdesk will not know the password or use it in way. I'm looking for other companies that are maybe doing the same type of procedure. ...
1
vote
1
answer
1k
views
Mapped Network Drives Persistently Requesting Credentials
I run a small office network with one Windows 2008 R2 DC and eight Windows 8.1 clients connecting to it. All of the machines have computer accounts on the domain and each user has an old school logon ...
1
vote
2
answers
1k
views
How to run smbpasswd as root on AIX?
I have Hitachi ID Password Manager (formerly p-synch) set up to change the password on (among other systems) an aix 6.1 server running samba. p-synch has the capability of executing additional ...
0
votes
0
answers
58
views
LAPS Update-AdmPwdADSchema not listed in AD attributes
Having issue getting AD to see added attributes.
(found this - LAPS Update-AdmPwdADSchema doesn't add the attributes - does not say how added.
Have ran the scripts to add the attributes. Says they ...
0
votes
0
answers
291
views
Storing Hashed Passwords for Docker and Docker Compose
What is the best way to store passwords and use them in Dockerfile and docker-compose.yaml. Can I store the secrets in a hashed format and make use of it, So that no one can read my real passwords ...
0
votes
1
answer
645
views
Can the Maximum machine account password age be set differently for one OU on a domain controller
In my organization, when we provision a computer one of the steps includes joining our domain. Typically we provision one pc at a time as the need comes up. I would like to get out of this habit and ...
0
votes
0
answers
45
views
php config - generate hashed password manually
I've created a php conf file, which include some user / password infos. For testing purposes I've added the password for the database in plain text. Since this can't be a good idea, I want to change ...
0
votes
0
answers
938
views
LAPS ms-Mcs-AdmPwd blank or null values
I am writing a script to export all computer LAPS ms-Mcs-AdmPwd values to KeePass to allow historical logging.
I have a few machines for whatever reason a few objects have no password set. However I ...
0
votes
1
answer
2k
views
How to configure password synchronization between two Active Directory Domains with Microsoft Identity Manager PCNS?
I have two domains with a two-ways trust relationship (selective authentication). Microsoft Identity Manager is installed, configured and "Password Change Notification Service" is configured and ...
0
votes
1
answer
1k
views
Automated SFTP transfer using WinSCP - how safe is it to store credentials in Windows environment variables?
I've had to implement an automated SFTP file transfer which requires a username and password.
Not wanting to leave the password in a text file / batch script for the world to stumble across, I've ...
0
votes
0
answers
162
views
Active Directory password policy for Business Days?
I don't think there's any way to do this after looking through Microsoft's password policy documentation, but on the off-chance that someone was particularly clever:
Is it possible to create a policy ...
0
votes
1
answer
40
views
Do "Old Passwords" have an expiration?
There are some systems that keep track of "old passwords" for increased security, like Databases, Domain Controllers, personal pages (Like Facebook) etc.
Do these "old passwords" have an expiration? ...