LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Enterprise Linux Forums > Linux - Enterprise
User Name
Password
Linux - Enterprise This forum is for all items relating to using Linux in the Enterprise.

Notices


Reply
  Search this Thread
Old 08-14-2011, 05:39 PM   #1
takayama
Member
 
Registered: Sep 2009
Posts: 97

Rep: Reputation: 0
Password sharing program


Hello
Im looking for a program to share password between my colleges. Like a webapplication that each user can log into and access all the different username/password radius shared secrets, snmp communities and so on.
Any recomendations?

Last edited by takayama; 08-14-2011 at 05:43 PM.
 
Old 08-14-2011, 08:45 PM   #2
qlue
Member
 
Registered: Aug 2009
Location: Umzinto, South Africa
Distribution: Crunchbangified Debian 8 (Jessie)
Posts: 747
Blog Entries: 1

Rep: Reputation: 172Reputation: 172
Use pgp together with any social network site that will allow that kind of activity. Or just send each other emails. But beware that if you're sharing anything illegal, they're gonna get you anyway! .
 
Old 08-15-2011, 03:03 AM   #3
takayama
Member
 
Registered: Sep 2009
Posts: 97

Original Poster
Rep: Reputation: 0
Well thats really not what i was looking for. Say i have 20 servers with unique root password on each plus user for mysql and stuff like that. Thats really not a option to browse around a emailbox. Plus that i really dont want the password in cleartext in the mailbox.
 
Old 08-15-2011, 01:46 PM   #4
qlue
Member
 
Registered: Aug 2009
Location: Umzinto, South Africa
Distribution: Crunchbangified Debian 8 (Jessie)
Posts: 747
Blog Entries: 1

Rep: Reputation: 172Reputation: 172
Quote:
Originally Posted by takayama View Post
Well thats really not what i was looking for. Say i have 20 servers with unique root password on each plus user for mysql and stuff like that. Thats really not a option to browse around a emailbox. Plus that i really dont want the password in cleartext in the mailbox.
Hence the reason I suggested using pgp. (or Gpg, the Gnu equivalent) You could try Dropbox.
 
Old 08-15-2011, 02:22 PM   #5
anomie
Senior Member
 
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora
Posts: 3,935
Blog Entries: 5

Rep: Reputation: Disabled
Quote:
Originally Posted by takayama
Hello
Im looking for a program to share password between my colleges. Like a webapplication that each user can log into and access all the different username/password radius shared secrets, snmp communities and so on.
Any recomendations?
I don't know of any great free-beer solutions to this problem. For very sensitive data, an encryption device (i.e. hardware) is the right answer. For the types of credentials you're describing, perhaps (?) a simple approach: keep an AES-encrypted file on an sftp server that your colleagues have access to. (This would require that you have a safe way to share the encryption key, of course.)

Or, if you like the Dropbox idea, you might also want to check out SpiderOak.

Quote:
Originally Posted by qlue
But beware that if you're sharing anything illegal, they're gonna get you anyway!
I didn't see anything in OP's question that would indicate (or even hint at) illegal activity. And good encryption is designed precisely to prevent them from "[getting] you".
 
Old 08-15-2011, 04:46 PM   #6
takayama
Member
 
Registered: Sep 2009
Posts: 97

Original Poster
Rep: Reputation: 0
Well there are stuff like http://www.thycotic.com/products_sec..._overview.html thats more the kind of program im looking for.
 
Old 08-15-2011, 09:41 PM   #7
anomie
Senior Member
 
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora
Posts: 3,935
Blog Entries: 5

Rep: Reputation: Disabled
With respect, I'm wary of software solutions like this. It is going to be accessed by various users over the 'net, and it runs a general-purpose operating system. Seems like an easy thing to get wrong to me.

YMMV.

Last edited by anomie; 08-15-2011 at 09:43 PM.
 
Old 08-16-2011, 07:06 AM   #8
takayama
Member
 
Registered: Sep 2009
Posts: 97

Original Poster
Rep: Reputation: 0
Well it will not be accessed over the "net", it will just be accesible through a series of layer protected with both password and certificates.
 
Old 08-16-2011, 07:29 AM   #9
catkin
LQ 5k Club
 
Registered: Dec 2008
Location: Tamil Nadu, India
Distribution: Debian
Posts: 8,578
Blog Entries: 31

Rep: Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208
KeePassX is a FOSS port of the FOSS Windows KeePass application to store passwords etc. in an encrypted database. If the passwords don't change too often and in too many geo-places you could simply distribute the encrypted master database.
 
Old 08-16-2011, 08:30 AM   #10
takayama
Member
 
Registered: Sep 2009
Posts: 97

Original Poster
Rep: Reputation: 0
That maybe would be something. I have tried this aswell http://sourceforge.net/projects/webkeepass/ But i could not really get it to work as i wanted. The ldap connection was a bit buggy (i could write anything and i could still get logged it)
 
Old 08-16-2011, 10:37 AM   #11
catkin
LQ 5k Club
 
Registered: Dec 2008
Location: Tamil Nadu, India
Distribution: Debian
Posts: 8,578
Blog Entries: 31

Rep: Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208
Quote:
Originally Posted by takayama View Post
The ldap connection was a bit buggy (i could write anything and i could still get logged it)
Ouch! I have been using KeePass and later KeePassX for ~4 years and not had cause for complaint. This usage did not include mounting a serious cryptographic attack on it (I wouldn't know how) but I take comfort in it having a large user base and not having heard of any incidents. The master password entry screen is direct so susceptible to key-loggers.
 
Old 08-16-2011, 10:49 AM   #12
takayama
Member
 
Registered: Sep 2009
Posts: 97

Original Poster
Rep: Reputation: 0
Keepass have good reputation. But i would really like to have some kind of webgui or something like that. First it would be cool to have a user database, well i guess i could just use a local database insted of a ldap, then i would be able to for example controll what user got what password.
Also if we are multiple people sharing the same "database" for example in keepassx it would be a bit messy if many people start to edit it at the same time (i guess).
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
sharing files over a lan without password absinthe1 Linux - Newbie 3 06-07-2010 11:10 AM
sharing accounts/password across different web applications andrews-mark Linux - Server 2 12-20-2008 02:20 PM
2 samba servers sharing common password file ausmpw Linux - Networking 3 04-04-2005 05:22 PM
Samba: Removing password on Linux to Windows sharing nairnie Linux - Networking 2 11-26-2003 06:54 AM
File sharing: username and password setup dmg2206 Linux - Networking 2 03-04-2002 12:41 PM

LinuxQuestions.org > Forums > Enterprise Linux Forums > Linux - Enterprise

All times are GMT -5. The time now is 05:32 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration