Quote:
Originally Posted by id10t
Proper enterprise should have a single password and user, and use ldap, saml or other centralized auth for service. End result is I have two work passwords to remember - my cuurent domain pw and the one for my ssh key
Shared passwords - root or other shared admin accounts etc - are in a shared password manager that has saml login controlling access
|
That is pretty much how we do it other than we use PMP for access to the servers and it uses a rolling password, that way we can audit who logged in by the access through PMP using their domain creds as opposed to their normal login creds.
Again, this isn't about the actual passwords, but is about people not having consequences for any behavior that puts the company at risk when they know better.