Security Basics mailing list archives

Re: enterprise password manager


From: John Morrison <john.morrison101 () googlemail com>
Date: Thu, 17 Sep 2009 16:07:15 +0100

Martin,

Why do you want to store "customer's passwords"? Could you not use
RADIUS to authenticate access to customer equipment?

2009/9/8 martin <martiniscool () gmail com>

Hi All

I'm looking for a password manager for use in our company for storing
customer's passwords.  Ideally, I would like on which can:

1.  Require a username and password to access (or using AD would be even better)
2.  Give different passwords depending on group membership (again, AD
groups preferable)
3.  Require that a user be a member of multiple groups in order to be
given access to a password.  eg, a user must be in the engineers group
AND in the managers group.
4.  Only give a lower level of access if a user is a member of a
particular group.  eg, if a user is in the engineers group AND the
contractors group, they will only be given a read only password (if
available).  If they were only in the contractors group, they wouldn't
get any password
4.  Obviously, use encryption
5.  Doesn't have to be free

I'm also looking for something similar that can be used to store
config files for routers, switches, firewalls etc.

I know this is alot to ask, but I'd like to hear what other people are using

Thanks in advance
M

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Current thread: