[mdlug] Password management application

[David L Lambert]

I'm currently working with a client who uses something called "Thycotic 
The Secret Server", http://thycotic.com/products/secret-server/ . 
Unfortunately my own request for access to their instance is tied up in 
a lot of paperwork. It might run on Windows. It also looks like it costs 
at least $$$$, although I wasn't involved in procuring the instance.

IBM sells "IBM Security Privileged Identity Manager", 
http://www-03.ibm.com/software/products/en/pim . (Disclaimer: I work for 
IBM, but have not used this product.) Once again I expect it costs at 
least $$$$, but it probably runs on Linux (RHEL on System x, System p or 
System z more likely than other distros).

Depending on how much auditing you need and how many passwords you need 
to manage, it may be simplest to use text-files or OpenOffice 
spreadsheets protected by file permissions and/or ACLs.

On 02/16/2015 03:42 PM, Mathew May wrote:
> Hey gang, I have a question for you. I have been tasked with looking into a password manager application that can be installed in a central location, that allows multiple user accounts to be configured, and then these user can display account/password information that is approved for their level of access.
>
> Example: We want to store database user names and passwords in a central local, and we want people to be able to login and see this information, but only what they have the appropriate access for. We want the developers to only see credentials for the dev environment, not able to see production values.
>
> I have been looking at and trying to configure a product called Rattic, but this solution does not store the information encrypted. I would have to install it on an encrypted file system, and I am not super versed in Apache and am running into a few brick walls trying to get this up and running.
>
> Anyone have any suggestions for a solution along these lines? And preferably open source (almost no budget for this project)
>
> Thanks,
> Mat
> _______________________________________________
> mdlug mailing list
> mdlug at mdlug.org
> http://mdlug.org/mailman/listinfo/mdlug


-- 
David Lee Lambert * KD8WQF * (cell) +1 586-873-8813
IM: davidleelambert (Yahoo!, Skype and Google Talk)
"Justicia, Tierra y Libertad"