REQ: Password storage system
| From: | Daevid Vincent | Date: | Tue, 05 Aug 2003 23:33:07 +0000 |
| Subject: | REQ: Password storage system | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-158370@lists.php.net to get a copy of this message | ||
I'm in search of an 'enterprise level' password storage system.
I have looked at phpMyPass and it looks promising, but the demo doesn't seem
to have everything I want.
http://freshmeat.net/releases/127316/
While this one says v2.0
http://www.phpmypass.paniris.com/
Says 1.0 ??
I need it to be multiuser, have different security levels/access, encrypt
and decrypt on the fly (phpmypass has all the passwords in the rendered HTML
page :-( ), grouping of passwords (i.e. 'internal servers', websites, banks,
clients sites, personal, etc).
Ideally it should use mod_auth_mysql for security. The storage should be
encrypted so that even root can't see the passwords in the database without
the decryption key. Perhaps use a strong crypto algorithm for the important
fields, not just the pw.
I'd like to store: common name, url, username, pw, notes, incept date, last
mod date at least.
I could build this myself, or I could take phpMyPass and run with it, but I
thought I'd see if there were anything else out there before I build this.
http://daevid.com