Looking for a password keeper tool

[Domenico_1]

Hi all,

I could find a lot of password keeper tool but only running on windows platform.
Does any of you know this kind of tool but for UNIX platform or windows based but with a port or agent to other UNIX flavours.

Many thanks in advance.

[Ross Zubritski]

What is a password keeper?

Regards,

RZ

[Rainer von Bongartz]

Sorry, what should this tool do ??

Rainer

[harry d brown jr]

If you are talking about a web browser then get mozilla.

If you are talking about applications, then the word SECURITY comes to mind, which would pose a great danger to your system.

live free or die
harry

[Ravi_8]

Hi,

might be you are thinking of shadow file.

shadow file doesn't exist in HP

[Domenico_1]

Sorry for the confusion.
I am looking for a tool to manage in a secure way a long list of passwords.
password corral is one of them running on windows platform.(http://www.cygnusproductions.com/)

Many Thanks.

[Bill Hassell]

Managing passwords across unrelated platforms is a very big problem. There's are many, many password conflicts between the rules in Windows and the rules on mainframes and Unix and Macs, etc. The best you can do is to make a matrix of the lowest common denominator, typically Unix where basic login IDs and passwords are limited to 8 characters. A Trusted HP-UX system can have longer passwords but user logins are still only 8 characters. If you are using NIS, then other rules may limit choices.

LDAP appears to be a possible solution for the future but it is still an emerging technology for multiple platforms. You are best off by creating custom tools for each platform that use a standard config file to limit user login IDs and passwords to the minimum common format and then add a propagation tool for each platform.

[Steven E. Protter]

Couple of options:

You can use LDAP and authorize Unix users based on a Microsoft PDC(primary domain controller). I know that will make Harry cringe because Microsoft isn't reallhy good at security.

You can also install CIFS/9000 and integrate its authentication with a central password machine. CIFS is samba so it can be done on any Unix platform.

In Unix, you can use NIS to manage passwords on multiple machines. Though widely used, it can't integrate with windows and I think its going out of favor.

SEP

[Darren Prior · Accepted solution]

Hi,

I guess by password keeper you mean a piece of software that stores all your other passwords in some encrypted manner, locked by a single master password - so you only have to remember one password.

A quick search of the HPUX porting centre came up with this: http://hpux.connect.org.uk/hppd/hpux/Gtk/gpasman-1.3.0/

I haven't tried it myself though. You could also consider using PGP to encrypt a text file with your password s, but be careful where it writes temp files.

I think that anything that makes it easier for you to keep your passwords in one place will probably reduce the security of them. After all, if the master password is compromised then you've lost the lot.

regards,

Darren

[Domenico_1]

Hi Darren,

It looks like you were the only one to understand my request:-)
I will have a look into this.
In the meantime if you find out other products of the same type but with agent for other platforms (windows,linux), please let me know.

Many thanks,

Domenico.

[Ted M Johnson_1]

And now for something completly different....

I'm not sure if you personally need something, or if you need a single tool for all employees to use.

If this is a personal issue, you can use the Linux hotplug system combined with the cryptoAPI and a small USB flash disk (I use a 32Mb one) to store your passwords.

When you plug the USB disk into your Linux box (I use Gentoo Linux), the hotplug subsystem can run a script to mount the drive; being an encrypted file, mountd will request the password for the volume. After mounting, all your passwords will be available in plain text. Look up the password you need, then unplug the drive. Simply, portable, and very easy to deploy.

I can provide the scripts I use for this on request.



On the other hand, gimping the unix crypt() by storing everyone's password in a single location (a web app!?!?)is A Bad Idea. If the data you protect is that useless to you, why not just assign the same password to everyone? :-) Use LDAP, or just reassign passwords when they are forgotten.

[Kellogg Unix Team]

Domenico,

In unix, you can keep an encrypted file and keep your passwords there.

cd ~
vi -x .
Key:

:wq!

Now if someone tries to just vi this file, all they will get will be junk.
To look at this file -
vi -x .
and supply your key.

HTH
...Manjeet