开发者

Python-based password tracker (or dictionary)

Where we work we need to remember about 10 lon开发者_开发百科g passwords which need to change every so often. I would like to create a utility which can potentially save these passwords in an encrypted file so that we can keep track of them.

I can think of some sort of dictionary passwd = {'host1':'pass1', 'host2':'pass2'}, etc, but I don't know what to do about encryption (absolutely zero experience in the topic).

So, my question is really two questions:

  1. Is there a Linux-based utility which lets you do that?
  2. If you were to program it in Python, how would you go about it?

A perk of approach two, would be for the software to update the ssh public keys after the password has been changed (you know the pain of updating ~15 tokens once you change your password).

As it can be expected, I have zero control over the actual network configuration and the management of scp keys. I can only hope to provide a simple utility to me an my very few coworkers so that, if we need to, we can retrieve a password on demand.

Cheers.


Answers to your questions:

  1. Yes. Take a look at KeePass.

  2. I wouldn't program a utility like this in Python, because there are available open source tools already. Furthermore, I would have concerns about protecting the unencrypted passwords as they were processed by a Python program.

Hope that helps.


You might want to checkout ecryptfs. It should be available for any Linux OS. On Ubuntu, setting it up is as easy as

sudo apt-get install ecryptfs-utils
ecryptfs-setup-private

This creates a directory for encrypted files, typically called ~/.Private. To use it:

mount -t ecryptfs ~/.Private ~/Private

This mounts the encrypted files from ~/.Private at the mount point ~/Private. You can read/write the plain text files in ~/Private.

umount ~/Private

updates the encrypted files in ~/.Private and removes ~/Private.

See these links

  • home page
  • linux journal
  • tutorial
  • another tutorial
for more information.


On first i think you can change passwords on md5 of this passwords.. it will give more safety.


You could use TrueCrypt or AxCrypt -- both are Open Source solutions. I'll echo Mox's concerns about the unencrypted PWs.

Of course you could also follow Bruce Schneier's advice about password protection...

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜