Re: enterprise tool for password management ?

"Tom Van Overbeke" <tomvo@xxxxxxxxx> writes:

Hi,

I'm looking for software that can protect the multitude of passwords that we
use in our company, both for our internal IT as for our clients' servers.

I have the following requirements:

- multi user and accessible preferrably via a browser

Why not just have a public web page on which you post the keys?
As soon as you make this kind of requirement it is clear that "ease of use"
has taken over completely from security.


- decentralized management : users should be able to maintain their own set
of passwords for which they are responsible (e.g. internal IT support should
be able to update their own passwords, but only be able to see certain other
passwords, and have no access whatsoever to other passwords

NOONE should have access to anyone else's passwords.

- possiblity to print the entire set of passwords (for external storage in a
safe)

See above.

- it would be nice if we can add extensive notes to certain passwords or
sets of passwords (e.g. documentation on how to access a system)


- possibility to keep expired passwords (in case a passwords change was
forgotten and we need to retrieve the old password)

And how would an expired password help? An expired password should be no
better than my name at helping you get into the system.


I've found so far one tool that claims it can do most of this, enterprise
password safe by argosy telcrest), but I've read some negative comments
(anonymous comments) about this software on the securityfocus website
(http://www.securityfocus.com/comments/tools/3864/36636/threaded)
I'm not sure of the validity of these comments (I'm not too keen on
anonymous posters).

Can someone recommend this product, or suggest other tools that might do the
job. I assume every company of some size faces the same problem that excel
password files are just nog safe enough ?


regards,
tom.


.

Relevant Pages

  • Re: Passwords plus
    ... Turn off your computer, box it up, lock it in a safe, bury it in the yard.. ... know above and beyond what is there as well as other methods and applications you can use to protect yourself. ... you aren't always "in that locked area" when using your computer online - meaning you likely have usernames and passwords associated with web sites and the likes that you would prefer other people do not discover/use. ... Microsoft put in an AUTOMATED feature for you to utilize so that you do ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Passwords plus
    ... > I read people are having many many problems with passwords setting. ... Turn off your computer, box it up, lock it in a safe, bury it in the yard.. ... Microsoft has these suggestions for Protecting your computer from the ... using Windows XP "prettifications". ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Is ssh not safe?
    ... > conclusion that having my router route port 22 requests through to my ... It's a whole lot safer than telnet and ftp. ... "safe" are the practices of your users. ... > that they can log in and change their passwords if need be. ...
    (Fedora)
  • Re: Password
    ... Well there is no utility I know of that can simply unlock a safe, or change the compination without showing signs of tampering, however a disgruntled employee could change all the passwords on a PC with that utility and then walk away. ... Ben M. Schorr, MVP ...
    (microsoft.public.windows.vista.security)
  • Re: SELinux survey (was RE: Stupid F7 boot loop)
    ... tags stuck on the monitor with my passwords I use often. ... My computers are safe at home. ... more hard to discover in a brute-force attack. ...
    (Fedora)