Security Basics mailing list archives
Re: Password Manager Software recommendations
From: "Cam Fischer" <camfischer () gmail com>
Date: Sat, 5 May 2007 12:19:20 -0600
If your looking for a good "Client / Server" password manager, NPM (Network Password Manager) works great.(http://www.sowsoft.com/password-manager.htm) A client is installed on the end user machine, and all the passwords are stored (encrypted) on the server. There is one draw back. The application curently sends the stored passwords in clear text across the network (which we found out during testing). The solution is to use the MS IPSec implementation for the specified NPM port. It works well for what we need, and the passwords are centrally stored. Hope that helps! Cam On 5/3/07, BSD Dude <bsdguy2000 () yahoo com> wrote:
My users work with a fair number of systems and application which require unique log in credentials. As a result, I am actively looking for a password manager to help secure and organize these credentials for my end-users. Having spent some time researching available commercial options, I have found basically two types of products: Enterprise level products that are primarily single sign-on solutions--which are not feasible in my environment; or Home user products that are basically all in one Internet security products--which are not suitable for my environment. I am familiar with a few open source projects; however, there is a preference on the part of management to deploy a commercially supported/maintained solution; however, open source is not entirely out of the question (I really do not wish to start a debate on open vs. closed source security products). The basic general requirements are: Easy to use for most non-technical end-users Small resource footprint Easy to deploy Use of AES, Two-fish, and/or Blowfish algorithms Product must be actively supported/maintained for the foreseeable future (I am aware of the problems with this type of requirement) Suitable for business/enterprise (MS Windows) environments I'd appreciate some feedback/recommendations from those admins who have traveled down this path before. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Current thread:
- Password Manager Software recommendations BSD Dude (May 04)
- RE: Password Manager Software recommendations Ackley, Alex (May 04)
- RE: Password Manager Software recommendations jbeauford (May 04)
- Re: Password Manager Software recommendations Jeb Barger (May 04)
- Re: Password Manager Software recommendations Chris Barber (May 04)
- Re: Password Manager Software recommendations Jason Ross (May 07)
- Re: Password Manager Software recommendations Dave Dearinger (May 04)
- Re: Password Manager Software recommendations Cam Fischer (May 07)
- Re: Password Manager Software recommendations fRANz (May 07)
- <Possible follow-ups>
- Re: Password Manager Software recommendations BSD Dude (May 08)
- Re: Password Manager Software recommendations mdevlin (May 08)
- Re: Password Manager Software recommendations Tara Kelly (May 08)
- Re: Password Manager Software recommendations jonathan . cogley (May 09)
- Re: Password Manager Software recommendations Ali, Saqib (May 09)