topic Re: Looking for a password keeper tool in Operating System - HP-UX

Looking for a password keeper tool

Domenico_1 — Mon, 31 Mar 2003 12:59:12 GMT

Hi all,

I could find a lot of password keeper tool but only running on windows platform.
Does any of you know this kind of tool but for UNIX platform or windows based but with a port or agent to other UNIX flavours.

Many thanks in advance.

Re: Looking for a password keeper tool

Ross Zubritski — Mon, 31 Mar 2003 13:02:02 GMT

What is a password keeper?

Regards,

RZ

Re: Looking for a password keeper tool

Rainer von Bongartz — Mon, 31 Mar 2003 13:06:21 GMT

Sorry, what should this tool do ??

Rainer

Re: Looking for a password keeper tool

harry d brown jr — Mon, 31 Mar 2003 13:10:55 GMT

If you are talking about a web browser then get mozilla.

If you are talking about applications, then the word SECURITY comes to mind, which would pose a great danger to your system.

live free or die
harry

Re: Looking for a password keeper tool

Ravi_8 — Mon, 31 Mar 2003 13:14:04 GMT

Hi,

might be you are thinking of shadow file.

shadow file doesn't exist in HP

Re: Looking for a password keeper tool

Domenico_1 — Mon, 31 Mar 2003 13:20:11 GMT

Sorry for the confusion.
I am looking for a tool to manage in a secure way a long list of passwords.
password corral is one of them running on windows platform.(http://www.cygnusproductions.com/)

Many Thanks.

Re: Looking for a password keeper tool

Bill Hassell — Mon, 31 Mar 2003 13:40:09 GMT

Managing passwords across unrelated platforms is a very big problem. There's are many, many password conflicts between the rules in Windows and the rules on mainframes and Unix and Macs, etc. The best you can do is to make a matrix of the lowest common denominator, typically Unix where basic login IDs and passwords are limited to 8 characters. A Trusted HP-UX system can have longer passwords but user logins are still only 8 characters. If you are using NIS, then other rules may limit choices.

LDAP appears to be a possible solution for the future but it is still an emerging technology for multiple platforms. You are best off by creating custom tools for each platform that use a standard config file to limit user login IDs and passwords to the minimum common format and then add a propagation tool for each platform.

Re: Looking for a password keeper tool

Steven E. Protter — Mon, 31 Mar 2003 13:48:57 GMT

Couple of options:

You can use LDAP and authorize Unix users based on a Microsoft PDC(primary domain controller). I know that will make Harry cringe because Microsoft isn't reallhy good at security.

You can also install CIFS/9000 and integrate its authentication with a central password machine. CIFS is samba so it can be done on any Unix platform.

In Unix, you can use NIS to manage passwords on multiple machines. Though widely used, it can't integrate with windows and I think its going out of favor.

SEP

Re: Looking for a password keeper tool

Darren Prior — Mon, 31 Mar 2003 14:12:43 GMT

Hi,

I guess by password keeper you mean a piece of software that stores all your other passwords in some encrypted manner, locked by a single master password - so you only have to remember one password.

A quick search of the HPUX porting centre came up with this: http://hpux.connect.org.uk/hppd/hpux/Gtk/gpasman-1.3.0/

I haven't tried it myself though. You could also consider using PGP to encrypt a text file with your password s, but be careful where it writes temp files.

I think that anything that makes it easier for you to keep your passwords in one place will probably reduce the security of them. After all, if the master password is compromised then you've lost the lot.

regards,

Darren

Re: Looking for a password keeper tool

Domenico_1 — Tue, 01 Apr 2003 06:28:30 GMT

Hi Darren,

It looks like you were the only one to understand my request:-)
I will have a look into this.
In the meantime if you find out other products of the same type but with agent for other platforms (windows,linux), please let me know.

Many thanks,

Domenico.

Re: Looking for a password keeper tool

Ted M Johnson_1 — Tue, 01 Apr 2003 16:20:08 GMT

And now for something completly different....

I'm not sure if you personally need something, or if you need a single tool for all employees to use.

If this is a personal issue, you can use the Linux hotplug system combined with the cryptoAPI and a small USB flash disk (I use a 32Mb one) to store your passwords.

When you plug the USB disk into your Linux box (I use Gentoo Linux), the hotplug subsystem can run a script to mount the drive; being an encrypted file, mountd will request the password for the volume. After mounting, all your passwords will be available in plain text. Look up the password you need, then unplug the drive. Simply, portable, and very easy to deploy.

I can provide the scripts I use for this on request.

On the other hand, gimping the unix crypt() by storing everyone's password in a single location (a web app!?!?)is A Bad Idea. If the data you protect is that useless to you, why not just assign the same password to everyone? :-) Use LDAP, or just reassign passwords when they are forgotten.

Re: Looking for a password keeper tool

Kellogg Unix Team — Fri, 04 Apr 2003 15:53:09 GMT

Domenico,

In unix, you can keep an encrypted file and keep your passwords there.

cd ~
vi -x .
Key:

:wq!

Now if someone tries to just vi this file, all they will get will be junk.
To look at this file -
vi -x .
and supply your key.

HTH
...Manjeet