[SOLVED] password management software

saiyen2002 · 05-14-2016, 08:19 AM

Currently in our company we have a custom built application where we store all of our sensitive details such as passwords, keys etc. We login, search for a server, and then we can see all the details of the server, ie root pass, mysql root pass, server SSL certs and keys
It is unmaintained and not very friendly to use.

I have had look at things such as ManageEngine Password Manager and LastPass

I am looking for recommendations of software that we could use, preferably
open source that we can install on our own servers, not hosted. If it is PCI compliant than it is even better.

Thanks,

lazydog · 05-14-2016, 09:49 AM

I have not used it I have heard that KeePass is good as well as FREE.
I use LastPass myself.

Tonus · 05-14-2016, 10:42 AM

password-store (aka pass)?

sgosnell · 05-14-2016, 12:04 PM

KeePass works well. I've used it for a long time, and it accepts all sorts of information. It runs locally. LastPass isn't open source, nor is the data stored locally, although it is encrypted. KeePassX is a java implementation of KeePass, and so runs on any platform with java installed. I'm not a fan of java, but some are. KeePass for Linux does require the installation of mono.

ondoho · 05-14-2016, 02:30 PM

i'm just a humble home user, but my recommendation goes to keepassx.

Quote:

Originally Posted by sgosnell

KeePassX is a java implementation of KeePass

i'm sorry but this is not true:
https://www.keepassx.org/requirements/
and

Code:

pacman -Qi keepassx
(...)
Depends On      : libxtst  qt4  shared-mime-info
(...)

VamosBaby · 05-14-2016, 05:02 PM

Quote:

Originally Posted by saiyen2002

Currently in our company we have a custom built application where we store all of our sensitive details such as passwords, keys etc. We login, search for a server, and then we can see all the details of the server, ie root pass, mysql root pass, server SSL certs and keys
It is unmaintained and not very friendly to use.

Set up a MediaWiki on you intranet server, requiring logging in to see its content, and be done with it.

frankbell · 05-14-2016, 11:00 PM

I use KeePassX. I started using it when I did a gig with a hosting company; it was their application of choice for their staff to use.

It's not server-based, which I consider a plus, and its databases are portable. It is, in fact, the cat's meow and the bee's knees.

saiyen2002 · 05-15-2016, 05:24 AM

I do use KeePass actually. But I need something server based. Accessed and administered centrally by all staff through their browser.
Also, I do not think you can store SSL Keys and Certs in KeePass.

sgosnell · 05-15-2016, 07:43 PM

You want something that runs locally, on your local server, not on user machines? I don't know of anything that does that. That doesn't mean it doesn't exist, though.

VamosBaby · 05-16-2016, 01:03 AM

Quote:

Originally Posted by saiyen2002

I do use KeePass actually. But I need something server based. Accessed and administered centrally by all staff through their browser.
Also, I do not think you can store SSL Keys and Certs in KeePass.

MediaWiki is your friend.

Tonus · 05-16-2016, 04:11 AM

From passwordstore.org (pass) :

Quote:

There is bash completionso that you can simply hit tab to fill in names and commands, as well as completion for zsh andfish available in the completionfolder. The community has even produced a cross-platform GUI client, an Android app, an iOS app, a Firefox plugin, a Windows client, a pretty Python QML app, an interactive console UI, Alfred integration (1) (2) (3), a dmenu script, OS X integration, git credential integration, and even an emacs package.

saiyen2002 · 05-17-2016, 07:47 AM

passwordstore.org looks very promising.

I have also come across https://www.vaultproject.io/ which is very interested and packed full lots of interested features.

thank you folks !