REQ: Password storage system

From: Date: Tue, 05 Aug 2003 23:33:07 +0000
Subject: REQ: Password storage system
Groups: php.general 
Request: Send a blank email to php-general+get-158370@lists.php.net to get a copy of this message
I'm in search of an 'enterprise level' password storage system. I have looked at phpMyPass and it looks promising, but the demo doesn't seem to have everything I want. http://freshmeat.net/releases/127316/ While this one says v2.0 http://www.phpmypass.paniris.com/ Says 1.0 ?? I need it to be multiuser, have different security levels/access, encrypt and decrypt on the fly (phpmypass has all the passwords in the rendered HTML page :-( ), grouping of passwords (i.e. 'internal servers', websites, banks, clients sites, personal, etc). Ideally it should use mod_auth_mysql for security. The storage should be encrypted so that even root can't see the passwords in the database without the decryption key. Perhaps use a strong crypto algorithm for the important fields, not just the pw. I'd like to store: common name, url, username, pw, notes, incept date, last mod date at least. I could build this myself, or I could take phpMyPass and run with it, but I thought I'd see if there were anything else out there before I build this. http://daevid.com

« previous php.general (#158370) next »