Re: [TYPO3-english] Password management advice

2012-03-09 Thread Loek Hilgersom
On 02/07/2012 01:01 PM, Stano Paška wrote: We use something like http://supergenpass.com/ Stano. I was tempted to start using this, because the concept is nice, until I saw [1]. Your master password can get stolen by a compromised site. This serious flaw that has not been fixed yet, try the

[TYPO3-english] Password management advice

2012-02-07 Thread Rik Willems
Hi all, I'm looking for some password management advice. How are you all handeling this situation. Say, you work on a lot of TYPO3 (and perhaps Magento as well) projects with your team. Does everybody use his own username/password? How do you manage changes in your team? Do you go through

Re: [TYPO3-english] Password management advice

2012-02-07 Thread Kay Strobach
www.single-signon.com and the TYPO3 BE Adapter should do the job. Regards Kay Am 07.02.2012 10:12, schrieb Rik Willems: Hi all, I'm looking for some password management advice. How are you all handeling this situation. Say, you work on a lot of TYPO3 (and perhaps Magento as well)

Re: [TYPO3-english] Password management advice

2012-02-07 Thread Oliver Salzburg
On 2012-02-07 10:12, Rik Willems wrote: Hi all, I'm looking for some password management advice. How are you all handeling this situation. Say, you work on a lot of TYPO3 (and perhaps Magento as well) projects with your team. Does everybody use his own username/password? How do you

Re: [TYPO3-english] Password management advice

2012-02-07 Thread Stano Paška
We use something like http://supergenpass.com/ Stano. On 7.2.2012 10:12, Rik Willems wrote: Hi all, I'm looking for some password management advice. How are you all handeling this situation. Say, you work on a lot of TYPO3 (and perhaps Magento as well) projects with your team. Does everybody

Re: [TYPO3-english] Password management advice

2012-02-07 Thread Rik Willems
Thank you Kay, I will look into this. Too bad there is not Magento plugin yet. Let's see if it can solve our TYPO3 necessities for now. Cheers! Rik On 7-2-2012 10:45, Kay Strobach wrote: www.single-signon.com and the TYPO3 BE Adapter should do the job. Regards Kay Am 07.02.2012 10:12,

Re: [TYPO3-english] Password management advice

2012-02-07 Thread Oliver Salzburg
Hello Rik, my opinion is that, yes, you would have to delete every one of those 200 accounts one-by-one. I assume you build these sites for your clients. So by forcing a non-default authentication mechanism on the client just to solve your in-house account management issue, you're making life

Re: [TYPO3-english] Password management advice

2012-02-07 Thread Xavier Perseguers
Hi, I would recommend spending a days or two hacking together a solution that can SSH into all the sites of all your clients and add/remove user accounts from the local database. I developed such an extension that allows synchronization of admin accounts with preferences from one master

Re: [TYPO3-english] Password management advice

2012-02-07 Thread Rik Willems
Hi Oliver, Thank you for your insights. I actually did think about an LDAP solution but thought we could do better. I'm not sure I agree on your lock-in comment, but the rest stands clear. I prefer to create as little as possible to avoid security risks. Relying on proven solutions made by

Re: [TYPO3-english] Password management advice

2012-02-07 Thread Rik Willems
Hi Xavier, This sounds like a very interesting solution. Do you have any plans to release this to the public any time soon? Perhaps we can extend it to include Magento as well? Cheers! On 7-2-2012 15:11, Xavier Perseguers wrote: Hi, I would recommend spending a days or two hacking

Re: [TYPO3-english] Password management advice

2012-02-07 Thread Oliver Salzburg
On 2012-02-07 15:11, Xavier Perseguers wrote: Hi, I would recommend spending a days or two hacking together a solution that can SSH into all the sites of all your clients and add/remove user accounts from the local database. I developed such an extension that allows synchronization of