Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-24 Thread Bruce A. Mah
If memory serves me right, Randy Bush wrote: is there a freebsd pam tacacs+ hack? Yep. Haven't actually used it though. PAM_TACPLUS(8) FreeBSD System Manager's Manual PAM_TACPLUS(8) NAME pam_tacplus -- TACACS+ authentication PAM module Bruce. signature.asc Description:

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-22 Thread Sean Donelan
On Sat, 21 Nov 2009, Joel Jaeggli wrote: Since this plays nicely with eap-tls, 802.1x. ike, ssl/tls, and s/mime it seems like a shoe-in, once you have a uniform authentication system one is inclined to use it for everything. obviously being involved in several of these with with multiple ca's is

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-22 Thread Christopher Morrow
On Sat, Nov 21, 2009 at 10:45 PM, Scott Howard sc...@doc.net.au wrote: On Sat, Nov 21, 2009 at 6:38 AM, John Levine jo...@iecc.com wrote: Are passwords still the only lowest-common-denominator? There's OpenID, where a provider can use any verification process it wants, but all the OpenID

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread John Levine
Are passwords still the only lowest-common-denominator? There's OpenID, where a provider can use any verification process it wants, but all the OpenID providers I know use ordinary passwords. R's, John

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Jack Bates
John Levine wrote: Are passwords still the only lowest-common-denominator? There's OpenID, where a provider can use any verification process it wants, but all the OpenID providers I know use ordinary passwords. Yeah, and every ISP would probably use key authentication, except there's not a

RE: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Adam Stasiniewicz
[mailto:s...@donelan.com] Sent: Friday, November 20, 2009 5:43 PM To: nanog@nanog.org Subject: Smartcard and non-password methods (was Re: Password repository) Are any network providers supporting smartcards or other non-password based authentication methods? Passwords always end up blaming

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Stefan
friendly solution, or have to code your own). My $0.02, Adam Stasiniewicz -Original Message- From: Sean Donelan [mailto:s...@donelan.com] Sent: Friday, November 20, 2009 5:43 PM To: nanog@nanog.org Subject: Smartcard and non-password methods (was Re: Password repository) Are any

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Jeffrey Lyon
I was pretty excited about this post until I found out that myvidoop only works on older version of FF. Jeff On Sat, Nov 21, 2009 at 12:31 PM, Matthew Palmer mpal...@hezmatt.org wrote: On Sat, Nov 21, 2009 at 02:38:32PM -, John Levine wrote: Are passwords still the only

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Matthew Palmer
On Sat, Nov 21, 2009 at 04:06:48PM -0500, Jeffrey Lyon wrote: I was pretty excited about this post until I found out that myvidoop only works on older version of FF. I can only find something about the plugin not working on FF 3.5, but I don't use the plugin since I only use it as an OpenID

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Jeffrey Lyon
So it works as a standalone password vault also? Jeff On Sat, Nov 21, 2009 at 4:55 PM, Matthew Palmer mpal...@hezmatt.org wrote: On Sat, Nov 21, 2009 at 04:06:48PM -0500, Jeffrey Lyon wrote: I was pretty excited about this post until I found out that myvidoop only works on older version of

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Matthew Palmer
On Sat, Nov 21, 2009 at 04:58:27PM -0500, Jeffrey Lyon wrote: So it works as a standalone password vault also? I don't know. My only experience with it has been as an OpenID endpoint/provider/whatever, and it was on that basis that I replied originally. - Matt

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Scott Howard
On Sat, Nov 21, 2009 at 6:38 AM, John Levine jo...@iecc.com wrote: Are passwords still the only lowest-common-denominator? There's OpenID, where a provider can use any verification process it wants, but all the OpenID providers I know use ordinary passwords.

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Randy Bush
is there a freebsd pam tacacs+ hack? randy

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Joel Jaeggli
cards and tokens are a proxy for the use of a certificate authentication system... You can in fact do certificate auth without the use of cards or tokens or mix and match physical tokens and other private key storage depending on need with the same authentication backend (typically ldap). Since

Re: Password repository

2009-11-20 Thread Peter Beckman
On Thu, 19 Nov 2009, John Adams wrote: I'm a big fan of 1password, but I'm on mac and iPhone. I'll second that. 1Password truly is fabulous, though it's strength is the Auto-website login feature with a hotkey. When in your browser, Command+Option+\, type some characters of the site or

Smartcard and non-password methods (was Re: Password repository)

2009-11-20 Thread Sean Donelan
Are any network providers supporting smartcards or other non-password based authentication methods? Passwords always end up blaming the user for choosing/not remembering good passwords instead of blaming the technology for choosing/not doing things so the user isn't forced to work around its

Re: Password repository

2009-11-19 Thread Phil Regnauld
Jay Nakamura (zeusdadog) writes: Quick question, does anyone have software/combination of tools they recommend on centrally store various passwords securely? Home built app with GELI (FreeBSD) encrypted disk image and automated versioning of documents/secure stuff wih a VCS.

RE: Password repository

2009-11-19 Thread Blake Pfankuch
and it worked great for that number, however as your database gets larger and larger it does take a while to make some changes. -Original Message- From: Jay Nakamura [mailto:zeusda...@gmail.com] Sent: Wednesday, November 18, 2009 8:57 PM To: NANOG Subject: Password repository Quick question, does

Re: Password repository

2009-11-19 Thread gordon b slater
On Wed, 2009-11-18 at 20:49 -0800, Darren Bolding wrote: Pwman ...which has the HUGE advantage of being CLI (so useable over SSH sessions from network devices) and has tagging for searching large databases of passes. pwman3 is current version. For most OSs. I've even used it looped through a

Re: Password repository

2009-11-19 Thread Bret Clark
Don't recall if it was mention but we use a nice little app called MyPMS http://lvoware.com/. Put it on an internal system and then people have to access via a VPN connection to browse into it. That way if a person is no longer with the company, then their VPN has been turned off and they don't

Re: Password repository

2009-11-19 Thread Jay Nakamura
All, I wasn't expecting the number of suggestions I got! Thanks all. It looks like keepass is the popular choice by many. We are looking into that. And those that suggested RADIUS, yes, I am moving towards that direction for what can be moved to the RADIUS direction. However, we also managed

RE: Password repository

2009-11-19 Thread Jason Granat
I offer a free service: Send me all your passwords via encrypted email and I promise to keep them safe for you :-) Ok, kidding aside we also use KeePass... On Wed, Nov 18, 2009 at 10:56 PM, Jay Nakamura zeusda...@gmail.com wrote: Quick question, does anyone have software/combination of tools

RE: Password repository

2009-11-19 Thread Jeffrey Negro
- From: Jay Nakamura [mailto:zeusda...@gmail.com] Sent: Wednesday, November 18, 2009 10:57 PM To: NANOG Subject: Password repository Quick question, does anyone have software/combination of tools they recommend on centrally store various passwords securely? Thanks.

Re: Password repository

2009-11-19 Thread Dan Young
On Wed, Nov 18, 2009 at 10:34 PM, Randy Bush ra...@psg.com wrote: Quick question, does anyone have software/combination of tools they recommend on centrally store various passwords securely? old school ascii text file, gpg encrypted, only opened with emacs crypt++.el Or if you prefer vim

Re: Password repository

2009-11-19 Thread Dan Bellazetin
I'm not sure if your only considering free software, but if not take a look at password manager pro. http://www.manageengine.com/products/passwordmanagerpro/download.html Dan On Nov 19, 2009, at 10:53 AM, Dan Young dyo...@mesd.k12.or.us wrote: On Wed, Nov 18, 2009 at 10:34 PM, Randy Bush

Re: Password repository

2009-11-19 Thread Pierre-Yves Maunier
Jay Nakamura wrote: Quick question, does anyone have software/combination of tools they recommend on centrally store various passwords securely? Thanks. I use opensource, multiplatforms softwares : Keepass password file in a truecrypt container and it works as heaven and securely.

Re: Password repository

2009-11-19 Thread John Adams
I'm a big fan of 1password, but I'm on mac and iPhone. Sent from my iPhone On Nov 19, 2009, at 23:36, Pierre-Yves Maunier na...@maunier.org wrote: Jay Nakamura wrote: Quick question, does anyone have software/combination of tools they recommend on centrally store various passwords

Re: Password repository

2009-11-19 Thread Kevin Broderick
Pierre-Yves Maunier na...@maunier.org wrote: Jay Nakamura wrote: Quick question, does anyone have software/combination of tools they recommend on centrally store various passwords securely? Thanks. I use opensource, multiplatforms softwares : Keepass password file in a truecrypt

Password repository

2009-11-18 Thread Jay Nakamura
Quick question, does anyone have software/combination of tools they recommend on centrally store various passwords securely? Thanks.

Re: Password repository

2009-11-18 Thread Darren Bolding
Pwman On 11/18/09, Jay Nakamura zeusda...@gmail.com wrote: Quick question, does anyone have software/combination of tools they recommend on centrally store various passwords securely? Thanks. -- Sent from my mobile device -- Darren Bolding -- -- dar...@bolding.org

RE: Password repository

2009-11-18 Thread Darryl Dunkin
http://keepass.info Works great in a multi-user environment. -Original Message- From: Jay Nakamura [mailto:zeusda...@gmail.com] Sent: Wednesday, November 18, 2009 19:57 To: NANOG Subject: Password repository Quick question, does anyone have software/combination of tools they recommend

Re: Password repository

2009-11-18 Thread Randy Bush
Quick question, does anyone have software/combination of tools they recommend on centrally store various passwords securely? old school ascii text file, gpg encrypted, only opened with emacs crypt++.el randy

Re: Password repository

2009-11-18 Thread Dan White
On 19/11/09 15:34 +0900, Randy Bush wrote: Quick question, does anyone have software/combination of tools they recommend on centrally store various passwords securely? old school ascii text file, gpg encrypted, only opened with emacs crypt++.el From the network administrator perspective, we