[mdlug] Password management application

[Aaron Kulkis]

Chris Baldwin wrote:
> Mat,
>
> We use Password Manager Pro and it works reasonably well for a similar use case - there are passwords all IT needs access to for one reason or another and we need a secure way to generate, share & store the passwords.
>

Generating passwords is acceptable.
Sharing the passwords via anything other than person-to-person phone calls
or out of band text (i.e. OFF network) or through the chain-of-command
on paper is acceptable (say, sealed envelopes).

Sharing passwords via email is just BEGGING to get compromised from the inside
(say a disgruntled employee).

STORING passwords in anything other than the relevant host's password file is just plain f***ing retarded, and in my mind, if anything happens, and I were a stock holder and found out, I would seek prosecution for criminal negligence.

Yes, seriously.  Criminal Negligence.


> -Chris
>
> On 2/16/15 3:42 PM, Mathew May wrote:
>> Hey gang, I have a question for you. I have been tasked with looking into a password manager application that can be installed in a central location, that allows multiple user accounts to be configured, and then these user can display account/password information that is approved for their level of access.
>>
>> Example: We want to store database user names and passwords in a central local, and we want people to be able to login and see this information, but only what they have the appropriate access for. We want the developers to only see credentials for the dev environment, not able to see production values.
>>
>> I have been looking at and trying to configure a product called Rattic, but this solution does not store the information encrypted. I would have to install it on an encrypted file system, and I am not super versed in Apache and am running into a few brick walls trying to get this up and running.
>>
>> Anyone have any suggestions for a solution along these lines? And preferably open source (almost no budget for this project)
>>
>> Thanks,
>> Mat
>> _______________________________________________
>> mdlug mailing list
>> mdlug at mdlug.org
>> http://mdlug.org/mailman/listinfo/mdlug
>
> _______________________________________________
> mdlug mailing list
> mdlug at mdlug.org
> http://mdlug.org/mailman/listinfo/mdlug