Account data stored in Configuration Mgmt DB

kenord_at_hotmail.com
Date: 01/26/05 

Date: 26 Jan 2005 06:11:47 -0800

My company wants to create a configuration management database to hold
details on how its IT systems, servers, application and processes all
hang together. this is especially useful for change and release
management. They also want to store info on user, application and
systems accounts including usernames and passwords that are essential
for operation and administrations of the services. I think this extra
step needs to be very well secured and managed as the users of the
database do not need to know all the passwords, only the ones relevant
to their jobs, and also the accounts give different levels of access to
the systems. Can anyone give me advice on how to do this, if it's
something you've developed yourself or a commercial product?

Relevant Pages

  • [Full-disclosure] Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000
    ... Proxy bypass vulnerability & plain text passwords ... "AMG-2000 is an AP Management Gateway dedicatedly designed for small to ... AMG-2000 uses an internal Squid proxy to restrict access to the wireless LAN ... The administration interface shows the passwords of all locally configured ...
    (Full-Disclosure)
  • Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000
    ... Proxy bypass vulnerability & plain text passwords ... "AMG-2000 is an AP Management Gateway dedicatedly designed for small to ... AMG-2000 uses an internal Squid proxy to restrict access to the wireless LAN ... The administration interface shows the passwords of all locally configured ...
    (Bugtraq)
  • RE: Minimum password requirements
    ... Get all the technical details ironed out and then get management to be ... been with this issue of users writing down their passwords (8 chars. ... to facilitate one-on-one interaction with one of our expert instructors. ... Attend a course taught by an expert instructor with years of in-the-field ...
    (Security-Basics)
  • Re: change your password day
    ... Because passwords are crucial to the management of Java-based ... websites. ... watches or sex toys are. ...
    (comp.lang.java.programmer)
  • Re: wonder what tools or test was used
    ... "An investigation of developer passwords revealed a number of weak passwords whose accounts have been locked in response," Schulze wrote. ... (Mostly in marketing, ... I did not expect to get most of HR, then entire board of directors, and most of management ...
    (Pen-Test)