Re: [Hampshire] Linux equivalent of DPAPI

2015-10-21 Thread Daniel Llewellyn
I'm unclear what the DPAPI is supposed to be used-for, as DPAPI is listed on the link in your first email as "DPAPI is focused on providing data protection for users. Because DPAPI requires a password to provide protection, the logical step is for DPAPI to use a user's logon password, which it

Re: [Hampshire] Linux equivalent of DPAPI

2015-10-21 Thread James Courtier-Dutton
On 20 Oct 2015 13:26, "Roger Munford" wrote: > > I am bringing an old desktop payment system up to date to work with the payment providers new system and also provide a wrapper for a website which transfers the user to their hosted payment page. > > The website

Re: [Hampshire] Linux equivalent of DPAPI

2015-10-21 Thread Roger Munford
James, This system handles fresh local food home deliveries and one user won the BBC local food retailer of the year a few years ago. It predates supermarket home delivery and credit card payments was introduced in 2006. One of the features is that orders are taken a day or so before packing

[Hampshire] Linux equivalent of DPAPI

2015-10-20 Thread Roger Munford
I am bringing an old desktop payment system up to date to work with the payment providers new system and also provide a wrapper for a website which transfers the user to their hosted payment page. The website is built on the traditional LAMP server. However the website requires a security key

Re: [Hampshire] Linux equivalent of DPAPI

2015-10-20 Thread Vic
> I was looking for a Linux equivalent but there does not seem to be one, > but I assume there must be a technique employed on Linux service to > accomplish the same thing. I'd do that with LUKS. Loopback-mount the volume holding the key, and lock the whole thing down with SELinux. HTH Vic.