RE: enterprise password manager

["Cisternas Marquez, Gonzalo" <gcisternas () cientec com>]

Hi Martin:

That sounds to me as Single Sing-On. In this scheeme you could maintain
an unique database for users, and keep as authentication server.
Integrate with agents acrooss the entire organization and each system
could assign permission based in the profile defined in the specific
system.

Please review products as Secure Computing Safeword Premier Access or
SecurId.

Thats are my 5 cents.

Gonzalo A. Cisternas M.

-----Mensaje original-----
De: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
En nombre de martin
Enviado el: Martes, 08 de Septiembre de 2009 10:17
Para: security-basics () securityfocus com
Asunto: enterprise password manager

Hi All

I'm looking for a password manager for use in our company for storing
customer's passwords.  Ideally, I would like on which can:

1.  Require a username and password to access (or using AD would be even
better)
2.  Give different passwords depending on group membership (again, AD
groups preferable)
3.  Require that a user be a member of multiple groups in order to be
given access to a password.  eg, a user must be in the engineers group
AND in the managers group.
4.  Only give a lower level of access if a user is a member of a
particular group.  eg, if a user is in the engineers group AND the
contractors group, they will only be given a read only password (if
available).  If they were only in the contractors group, they wouldn't
get any password
4.  Obviously, use encryption
5.  Doesn't have to be free

I'm also looking for something similar that can be used to store
config files for routers, switches, firewalls etc.

I know this is alot to ask, but I'd like to hear what other people are
using

Thanks in advance
M

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an
SSL certificate.  We look at how SSL works, how it benefits your company
and how your customers can tell if a site is secure. You will find out
how to test, purchase, install and use a thawte Digital Certificate on
your Apache web server. Throughout, best practices for set-up are
highlighted to help you ensure efficient ongoing management of your
encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------