In a large Linux only network how would you handle Authentication and User management?
After working with linux for years in small networks, I’ve started in a company that maintains large windows networks. I know you can cobble a linux host onto an Active Directory network but is there a tidy linux-y way of handling it if you didn’t have to deal with Windows hosts. Purely hypothetical. Asked by Keith Loughnane The closest equivalent to Active Directory for Linux is FreeIPA. FreeIPA is made by Redhat, and provides both [...]
Continue Reading »Group Policy for Setting Passwords: Server 2003 Domain
In my 2003 domain, I am being requested to set a password policy to require passwords to expire every 4 months, and also require users to change their password on their next login, due to a security issue. In my domain, my OU’s are setup by location, then drilled down to city, then the users and computers are in separate sub-domains. My question is, how do I set this up for my domain? Will I [...]
Continue Reading »Centralised Password Management Software
Currently, the company I work for has nothing in the way of password management – everything is in a big excel spreadsheet that everyone has access to. Obviously this has a whole rash of issues attached to it, namely: Staff have access to passwords they shouldn’t have/don’t need. Anyone who can get access to a machine on the network can get full access to all the passwords. So, I’m pushing for us to move to [...]
Continue Reading »Managing service passwords with Puppet
I’m setting up my Bacula configuration in Puppet. One thing I want to do is ensure that each password field is different. My current thought is to hash the hostname with a secret value that would ensure each file daemon has a unique password and that password can be written to both the director configuration and the file server. I definitely don’t want to use one universal password as that would permit anybody who might [...]
Continue Reading »Is there an app/script I can deploy to enable my users to change their own LDAP passwords?
I’ve recently enabled LDAP based authentication on my domain. This has allowed us to use a single set of credentials to administer the blog, the forum and the wiki. Unfortunately, this has come at the cost of users being able to change their own passwords. Ideally, users would be able to visit a page (i.e. mydomain.com/account), authenticate and then change their password. Does anyone know of a script or app that will allow me to [...]
Continue Reading »SharePoint 2010 Password Change?
Does anyone know of a way to allow password changes via SharePoint’s web interface? Either a add on or settings? Asked by Joe You could use this web part: http://changepassword.codeplex.com/ Works on 2010: http://changepassword.codeplex.com/discussions/219795 Answered by Bart De Vos Check more discussion of this question. Bookmark on Delicious Digg this post Recommend on Facebook share via Reddit Share with Stumblers Tweet about it Print for later Bookmark in Browser Tell a friend
Continue Reading »new user with authorized_keys: how to NOT ask for the old password when setting one?
when I create a user in the system with Chef, I always upload its public key to .ssh/authorized_keys. When user logs in for the first time, he is required to “change” his password. For that a stub password is used, so he can enter the “current” password. This is how it looks like now: ssh user@host WARNING: Your password has expired. You must change your password now and login again! Changing password for user. (current) [...]
Continue Reading »D-Link DES-3550: can’t change password
I have a D-Link DES-3550 switch, Firmware: Build 5.00-B28. I want to change admin password, but somehow I am unable to do this: DES-3550 Fast Ethernet Switch Command Line Interface Firmware: Build 5.00-B28 Copyright(C) 2000-2004 D-Link Corporation. All rights reserved. username:administrator password:****************************DES-3550:admin#show account Command: show accountCurrent Accounts: Username Access Level ————— ———— administrator AdminTotal Entries : 1DES-3550:admin#config account administrator Command: config account administratorThe username does not exist. Enter the name of an existing user.DES-3550:admin# Any [...]
Continue Reading »Is there a password agent for the mysql command-line client?
I use the mysql command line client frequently. Sometimes I wind up typing in my password dozens of times per day, and I’m getting really tired of it. SSH has a neat utility called ssh-agent which lets you type in your password just once at the beginning of the day. Is there a similar utility for MySQL? No. However, you can store your password in a my.cnf file in your home directory. For example, on [...]
Continue Reading »What’s the safest online password system?
It’s so difficult to track dozens of passwords in different locations. Syncing fails from time to time and you end up with collision correction avoidance syndrome. Is there a single source of safe, online, commercial password storage anywhere? One that will be around for years to come and one that is truly safe enough to ensure protection? Use keypass and store the database in gmail, live mesh, or what ever online file storrage solution you [...]
Continue Reading »Recent Posts
- SCP transfer only modified files
- How can I automate clearing and resetting a Linux user’s home directory to a default?
- Cron expression that runs every 5 minutes from 1:30 am – 6:00 am [duplicate]
- Understanding redundant power supplies
- Is there a way for administrators to disable users from installing Firefox extensions?



