1,287 reputation
718
bio website blog.9minutesnooze.com
location New York, United States
age
visits member for 5 years, 6 months
seen 5 hours ago

Jun
18
comment Password Management System for multiple SysAdmins?
Exactly, when you have multiple systems administrators, there needs to be a way to control who has access to what as well as remove their access without changing every key/password. It's also for auditing - who accessed what password and when.
Jun
18
comment Password Management System for multiple SysAdmins?
I made no such blanket rebuttle of LDAP. Perhaps you should answer the question asked rather than make assumptions.
Jun
18
awarded  Commentator
Jun
18
comment Password Management System for multiple SysAdmins?
It looks to me like there is no really good solution out there to handle authenticating multiple administrators to access a common store of passwords. That kind of shocks me. Maybe I'll just have to write one.
Jun
18
comment Password Management System for multiple SysAdmins?
@jldugger: How do you keep track of these passwords amongst multiple administrators? godaddy password router/core switch enable passwords server root accounts remote access card accounts random software that doesn't support LDAP Or do you use LDAP for those, too? ;) In a real world environment, there are always passwords to keep track of. LDAP and kerberos get you part of the way there, but there will always be dozens of outliers that need to be managed. Introduce multiple syadmins into that and you have a real problem.
Jun
18
comment Password Management System for multiple SysAdmins?
We do use LDAP and sudo with a PAM module where we can. There are still a dozen other accounts to deal with. Additionally, there needs to be documentation of the root account passwords, and not everything can be hooked into an LDAP system. Also there are accounts that need to be around in the event that LDAP is unavailable and we need to get into the systems. I appreciate that you think you have a better way, but we already do use centralized authentication where it is practical and possible. There are still multiple sysadmins that need to be able to access passwords occasionally.
Jun
17
comment Password Management System for multiple SysAdmins?
I'm not sure you understand. Not everything can be hooked up to a single LDAP or kerberos server, nor should it. Server root passwords, for example, should never be stored in LDAP, nor should router enable passwords.
Jun
16
comment Best Practise and Solutions for Sharing Passwords
Now you have turned a single point of failure into a dual point of failure. This doubles the odds that the password will be lost. Plus, it is completely impractical - I would never be able to get anything done if I knew only half of every admin password.
Jun
16
awarded  Critic
Jun
16
comment Password Management System for multiple SysAdmins?
Oh, I'm wrong - KeePass has been ported to other platforms
Jun
16
comment Password Management System for multiple SysAdmins?
It's windows and only allows a single login. I need a multiple-login solution so each sysadmin can log in separately, which is the only manageable and secure way to handle this. I'm shocked that there aren't tons of products out there that do this.
Jun
16
comment Password Management System for multiple SysAdmins?
LDAP and kerberos are authentication systems, not password management systems. I need a way to store root passwords, router passwords, LDAP Manager passwords - any of the 8 billion passwords that a systems admin needs to juggle.
Jun
16
revised Password Management System for multiple SysAdmins?
added 74 characters in body
Jun
16
comment Password Management System for multiple SysAdmins?
I forgot to mention that I need a solution which will run under Linux. No Windows apps, please :)
Jun
16
awarded  Student
Jun
16
asked Password Management System for multiple SysAdmins?
Jun
8
awarded  Supporter
Jun
4
answered Ubuntu: Prevent X from starting (turn desktop into server)
Jun
4
awarded  Editor
Jun
4
revised How to make NFS more robust when the server drops devices
deleted 9 characters in body