Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 1 down vote favorite

so, we've got a ton of passwords that several different administrators need to have access to, each with their unique password/key/user/whatever... it needs to be either centralized, or the passwords database need be synchronized between all admins. any simple suggestions for a solution here? most machines operate on either RH/CentOS or OpenBSD...

share|improve this question
Which kind of access? Un*x passwd database, Samba or more confined solution? Did you use nis, radius or other such a centralized solution? – F. Hauri Jan 22 at 7:50

2 Answers

up vote 1 down vote

Depending on your threat / work model, LastPass Enterprise might be exactly what you're looking for. It's a web-based password management service, allowing access from pretty much anywhere that has an internet connection. As long as you've got a browser, you should be able to get at the site. It might even work with ncurses-based browsers if you're lucky!

Features:

  • Shared password management.
  • Random password generation.
  • Passwords encrypted on the server, unlocked by user passwords.
  • Detailed access reports.
  • Easy revocation of access.
  • Various export formats, including CSV, in case you ever want to import the passwords into a local repository like KeePass.

At time of writing, prices are 24 USD per year for an enterprise account that gives you up to 100 users, and they offer a free trial.

share|improve this answer
1  
Oh, and in case you're wondering, I've got no affiliation with them whatsoever - the above is simply based on what's on their site and what I've heard other say! :) – Polynomial Jan 11 at 16:36
1  
for additional choice, could also try CyberArk (again, no affiliation) – Callum Wilson Jan 11 at 16:38
oh, god no, lol. – episteme Jan 11 at 16:45
1  
looking for a solution that keeps the passwords within the company network.. – episteme Jan 11 at 16:46
@episteme Any particular reason? A breach of the site shouldn't result in any passwords being stolen, since they're encrypted with the master passwords of the users. – Polynomial Jan 11 at 20:14
show 1 more comment
up vote 0 down vote

There are several solution under GNU world.

  • nis - clients and daemons for the Network Information Service (NIS)
  • heimdal-kdc Heimdal Kerberos - key distribution center (KDC)
  • libpam-* many PAM module as LDAP, and maybe your own.
  • libpam-ldapd PAM module for using LDAP as an authentication service
  • freeradius a high-performance and highly configurable RADIUS server

At all, you may copy hashed password from a file to another, even if you can't hashed password. This could be a strong job, but someting it could be simplier for doing a first merging procedure.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.