LITTLEBLACKDOG.COM

Posted: Fri Apr 04, 2008 7:47 am Post subject: Password of the Day?

Does anyone know of any tools/resources that allows you to change passwords on a daily basis?

I.E. I want admin passwords for the following types of equipment to change daily at midnight:
Windows 2K Boxes
Windows XP Boxes
Domain Administrator Account
HP-UX Server
Cisco Switches and ASA Device

Just wanted to see if anyone knew of any tools/resources before I went off and developed something on my own.

TIA!

Posted: Fri Apr 04, 2008 7:55 am Post subject:

your a scripter... why not script it? But dear god, every night are you off your rocker? Shocked

Posted: Fri Apr 04, 2008 8:53 am Post subject:

fear_nothing wrote:
your a scripter... why not script it? But dear god, every night are you off your rocker?

Thats what my intentions were, but before I go out and develop it I wanted to see if there was anything else already out there.

And yes, every day =D The shorter the time frame the better off I am security wise IMO.

Posted: Fri Apr 04, 2008 9:33 am Post subject:

Extreme wrote:
fear_nothing wrote:
your a scripter... why not script it? But dear god, every night are you off your rocker?

Thats what my intentions were, but before I go out and develop it I wanted to see if there was anything else already out there.

And yes, every day =D The shorter the time frame the better off I am security wise IMO.

right.... till you start writing them down 'cause you can't remember what Tuesdays password was Shocked

Every day is a bit extreme, if your concerned about security I'd suggest some form of two-factor authentication. RSA tokens, biometrics etc. That might restore some of your sanity!

EEps · Posted: Fri Apr 04, 2008 9:37 am Post subject:

Why not go with a biometric password system. Kind of hard to duplicate that... Wink Smile

Posted: Fri Apr 04, 2008 9:43 am Post subject:

fear_nothing wrote:
Every day is a bit extreme...

Well, we don't call him that for nothing... Wink

Personally I'm with Fear. I know admins for the Ministry of Defence who don't change passwords that often.

Posted: Fri Apr 04, 2008 11:23 am Post subject:

OK, so heres the deal....
We've been through a few employees here recently, and were recently acquired by another company in Tampa and they are big on outsourcing stuff.

Since I have a pretty good feeling that some of our stuff will be outsourced soon as well, I want to ensure that if one of these companies is given a password(s) when they are on-site and performing some work, that they do not have access on another day for something they may not need access to without going through me first for approval.

I'm also not keen on going through and setting up multiple accounts for each vendor either...

Basically, I wanted to mirror a process that was used by a company I did some consulting work for last year, they had a print out that listed the workstation password of the day, as well as a domain admin account with that password for the day. At midnight, it changed across the board and new information needed to be obtained. Unfortunately, the company I did the work for did not know how this process worked =(

Posted: Fri Apr 04, 2008 11:26 am Post subject:

Also, I have a feeling we will be going through another employee or two, as I keep on telling my boss I need someone who knows VBA/VB, and he gives me everything but that.

He told me yesterday that he's been talking with someone else who sent him a resume, she knows the software we use pretty well (FACS from Ontario Systems)...but when I asked if she knows VBA/VB he stated he didn't know and hasn't asked yet evil

If she gets hired you will be seeing a rant from me!