Join 3,524 readers in helping fund MetaFilter (Hide)


What is a good multiuser password solution?
May 8, 2008 2:59 PM   Subscribe

What is a good multiuser password database?

At work we have a password problem. Tons of web site control panels, web based email accounts, and passwords for in house things, with tons of people wanting access. Currently, we sort of let each sub group in our organization take care of their own stuff, but things are getting out of hand.

Therefore, I want to put a multiuser password database into place so we can control who can see what, and who can enter new passwords. The ideal solution:

-Supports multiuser with permissions based access
-Integrates with active directory
-Has a web interface
-Has a highly encrypted database
-Logs all access for review
-Is delicious

It's okay if there isn't anything that can do all that, but true multiuser support is very high on my list of things I'm looking for. Can anyone point me in the right direction?
posted by tracert to Computers & Internet (5 answers total) 1 user marked this as a favorite
 
MICROS~1 Active Directory is an LDAP server, yesno? That seems like the perfect place, an LDAP server.

I'm sure there are dozens of web interfaces for LDAP servers. Some will even cost money.

Additional LDAP configuration is the only tricky part. You need an LDAP expert to set up hierarchical permissions.
posted by cmiller at 3:11 PM on May 8, 2008


We've used Cyber-Ark. Our team doesn't use it specifically because it doesn't handle accessing passwords without any internet connection terribly well.
posted by iamabot at 3:16 PM on May 8, 2008


cmiller, I can't quite follow your train of thought. What exactly are you suggesting?
posted by tracert at 3:37 PM on May 8, 2008


LDAP already has the facility for most of what you mentioned. You just need a web interface to show it to people, and to have someone configure it.
posted by cmiller at 6:42 PM on May 8, 2008


cmiller,

That's a little hazy on details, to say the least. Have you had specific experience using Active Directory as a data store for information not specifically handled by the standard Microsoft tools? If so, please post some more information about it.
posted by odinsdream at 6:07 AM on May 9, 2008


« Older ComputerEmbroideryFilter: Can ...   |  Please help me decide whether ... Newer »
This thread is closed to new comments.