[aklug] Re: Team Password Management?

SecretServer, hands down. http://thycotic.com/products/secret-server/ .

Aside from the unfortunate company name (product should be called
ThecretTherver!), it was the last Keepass exploit that finally drove me
over the edge to do something about our password management. For $10, you
get 1000 secrets and 100 users. Perfect for small-mid range IT shops and
most small businesses. You don't get the fancy features like integrated Duo
2FA and the ability to record SSH sessions, but you get basic Keepass-like
functionality for a bargain price. The bump up to the next license level
was quite a bit more expensive, but the ease of setup, maintenance, and
security of SS beat out all the others I tested. I ended up just getting
the $10 version and deploying it to IT, but it's definitely capable of a
much broader deployment.

At the higher license level in particular, I loved the ability to enforce
"check out" of certain passwords (user checks it out, then once checked in,
password is automatically changed), allow contractors to login to devices
without revealing the password, record SSH sessions, and automate password
management by allowing SS to change the passwords automatically.

Let me know if you have any questions, I just deployed it here and it's
been great. Promise I'm not a shill, I just preach good products from the
rooftops!

Kris Laubenstein
DMVA Systems & Security
907-428-7233

On Wed, Dec 9, 2015 at 4:09 PM, Christopher Howard <
christopher.howard.asi@gmail.com> wrote:

> Hey guys, anybody have an opinion on team password management / vault
> software?
>
> I thought this looked really cool (being FOSS):
>
> http://www.vaultier.org/
>
> But after trying to run a vaultier server myself for a day I realized it
> was going to be too painful to configure/maintain. And the hosted
> enterprise version is $99/month (a wee bit more than we can afford).
>
> --
> Christopher Howard, Computer Assistant
> Alaska Satellite Internet
> 3239 La Ree Way, Fairbanks, AK 99709
> 907-451-0088 or 888-396-5623 (toll free)
> fax: 888-260-3584
> mailto:satinfo@hughes.net
> http://www.alaskasatelliteinternet.com
>
> ---------
> To unsubscribe, send email to <aklug-request@aklug.org>
> with 'unsubscribe' in the message body.
>
>

---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Wed Dec 9 16:29:57 2015