[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: best way to remotely manage user credentials



2008/5/13 Matus UHLAR - fantomas <uhlar@fantomas.sk>:

>  just note that when someone does 'ps' on machine you when execute this
>  script, (s)he can see arguments, therefore the password. Yes, grsecurity
>  patch can prevent ordinary people from seeing the password, but this is
>  usually not taken as secure...

sure, it would be not secure if the "managing" server was a multiuser system.
there's only www server without ftp,ssh etc .

i hear "ldap" all the time but dont think that ldap will be the remedy.

more or less -thanks for feedback ;)


regards
wojtek ziniewicz

-- 
Wojciech Ziniewicz
Unix SEX :{look;gawk;find;sed;talk;grep;touch;finger;find;fl
ex;unzip;head;tail; mount;workbone;fsck;yes;gasp;fsck;more;yes;yes;eje
ct;umount;makeclean; zip;split;done;exit:xargs!!;)}


Reply to: