Security Basics mailing list archives

Re: Password management


From: Micheal Espinola Jr <michealespinola () gmail com>
Date: Mon, 8 Nov 2004 14:46:07 -0500

I use KeePass, maintain multiple databases with appropriete ACLs on
the database files.

<http://keepass.sourceforge.net/>

" KeePass is a free, open-source, light-weight and easy-to-use
password safe for Windows.  The programs key-features:

Highly encrypted databases 
Support of master passwords and key-disks 
Runs on all Windows operating systems and doesn't need to be installed 
Export password list to TXT, HTML, XML or CSV files 
Import from CSV and CodeWallet(Pro) TXT files 
Easy database transfer 
Support of password groups 
Time fields support 
Drag-n-Drop support 
Fast copy fields to the Windows clipboard 
Searching and sorting 
Multi-language translation support 
Strong random password generator 
Low memory requirement 
Open-Source! "



On Mon, 08 Nov 2004 14:13:03 +0000, Leon North <leon_nc () linuxmail org> wrote:
Hi,

We are looking for advice on how others handle recording of passwords in IT departments.

Whenever we look at this all we get back are Single Sign On (SSO) & related solutions, which is not what we want at 
the moment. We are more interested in purely secure & granular network storage for passwords. I'm surprised there 
isn't more around that does this, given that there must be plenty of IT departments still without SSO, that are 
needing to remember a number of regularly changing passwords for various systems. How do they record them, but also 
only allow appropriate levels of access, i.e. access to passwords of systems that each person in the department 
should have access to?

So far, apart from simply encrypted, password protected spreadsheets, the only solution that I have found that does 
precisely this is the Cyber-Ark Password Vault. If anybody has used this or any other similar products I'd be very 
interested to hear what, and how well they worked.

If not, what do you do instead?

Any help appreciated.

Leon
--
______________________________________________
Check out the latest SMS services @ http://www.linuxmail.org
This allows you to send and receive SMS through your mailbox.

Powered by Outblaze



-- 
ME2


Current thread: