Hello,

I am simply seeking some advice on password managers. Ideally, whatever solution we use it would be nice if it supports multiple users and has the ability to also manage SSH keys.

I so far have been looking at the pass password manager which seems like it might work but I am not sure how well it would work with SSH keys. So, any advice or comments would be very helpful.

Thanks,
Joe

Well, that question is a little generic, since you don't mention what setup you've got (distro, DE, etc.). So: I use Plasma / KDE on openSUSE tumbleweed. It has all these things integrated and they work flawlessly for me. That is to say, I use Kmail, Kleopatra, KGPG, KWallet to name just those I remember right now and no hassle. HTH.

I use keepassxc, it has an SSH-Agent feature (but I don't use it).
I don't understand your multiuser requirement at all. Of course Linux supports multiple users; they'd each have their separate HOME and separate password databases.

1 members found this post helpful.

Hello,

Thanks for taking time to give your input. For more details into my situation, I am working with a small group of people and we have a small (but growing) network with various hosts that we login to (most are linux machines). Since our network is growing it is starting to get difficult to manage credentials (and some SSH login Keys). I am aware of commercial products which looks like it might work for us but we are on a small budget. Basically at this point I am envisioning we all login to a jump host and we can access the key manager there to get the creds to login to other hosts and once we have the keys then we go back to your normal host and execute the connection there (or stay on jump host if needed).

Obviously, this example has some problems as well but at least it will store passwords securely and it gives a way to share the keys among the team. Otherwise we all need to have our own password managers (which has its own challenges) and this is a bigger problem because not all the people are that technical.

Anyway, like I said, any ideas/comments or tutorials, or examples of people doing this (or something like this) is what I am hoping to get from this post as I would hate to start a project and realize I did it totally wrong.

Thanks again for your time as I am truly appreciative of this forum and its members,

Joe

I also use keepassxc (and before that keepassx) and recommend it highly. The databases are portable, so team members could have their own copies of the database relevant to their needs.

I much prefer it to web-passed or browser-based alternatives and certainly to those keyring thingees that are tied to various desktop environments.

1 members found this post helpful.

Your post #4 goes way beyond your original question.
Some sort of corporate network authentication administration. Not my cup of tea.

1 members found this post helpful.

Well,

I do realize realistically I probably will not find a solution that is 100% perfect in every way. I am more just looking at what my options are that will address my present needs. Honestly, right now I have been looking at this tool: https://github.com/gopasspw/gopass
Gopass. Does anyone have any experience with this? What I find the most interesting is it saids it is designed for teams.

R
Joe