Re: [TYPO3-english] Password management advice

2012-03-09 Thread Loek Hilgersom
On 02/07/2012 01:01 PM, Stano Paška wrote: We use something like http://supergenpass.com/ Stano. I was tempted to start using this, because the concept is nice, until I saw [1]. Your master password can get stolen by a compromised site. This serious flaw that has not been fixed yet, try the

Re: [TYPO3-english] Password management advice

2012-02-07 Thread Oliver Salzburg
On 2012-02-07 15:11, Xavier Perseguers wrote: > Hi, > >> I would recommend spending a days or two hacking together a solution >> that can SSH into all the sites of all your clients and add/remove >> user accounts from the local database. > > I developed such an extension that allows synchronizati

Re: [TYPO3-english] Password management advice

2012-02-07 Thread Rik Willems
Hi Xavier, This sounds like a very interesting solution. Do you have any plans to release this to the public any time soon? Perhaps we can extend it to include Magento as well? Cheers! On 7-2-2012 15:11, Xavier Perseguers wrote: Hi, I would recommend spending a days or two hacking togethe

Re: [TYPO3-english] Password management advice

2012-02-07 Thread Rik Willems
Hi Oliver, Thank you for your insights. I actually did think about an LDAP solution but thought we could do better. I'm not sure I agree on your lock-in comment, but the rest stands clear. I prefer to create as little as possible to avoid security risks. Relying on proven solutions made by kn

Re: [TYPO3-english] Password management advice

2012-02-07 Thread Xavier Perseguers
Hi, > I would recommend spending a days or two hacking together a solution > that can SSH into all the sites of all your clients and add/remove > user accounts from the local database. I developed such an extension that allows synchronization of admin accounts with preferences from one master web

Re: [TYPO3-english] Password management advice

2012-02-07 Thread Oliver Salzburg
Hello Rik, my opinion is that, yes, you would have to delete every one of those 200 accounts one-by-one. I assume you build these sites for your clients. So by forcing a non-default authentication mechanism on the client just to solve your in-house account management issue, you're making life wor

Re: [TYPO3-english] Password management advice

2012-02-07 Thread Rik Willems
Hi Oliver, I've seen this one. It does solve the password distribution but not the management part of the user accounts. When you run 200 websites you don't want to remove a user in each installtion when one of your employees leaves. How you other companies manage this? Cheers! Rik On 7

Re: [TYPO3-english] Password management advice

2012-02-07 Thread Rik Willems
Thank you Kay, I will look into this. Too bad there is not Magento plugin yet. Let's see if it can solve our TYPO3 necessities for now. Cheers! Rik On 7-2-2012 10:45, Kay Strobach wrote: www.single-signon.com and the TYPO3 BE Adapter should do the job. Regards Kay Am 07.02.2012 10:12, schr

Re: [TYPO3-english] Password management advice

2012-02-07 Thread Stano Paška
We use something like http://supergenpass.com/ Stano. On 7.2.2012 10:12, Rik Willems wrote: Hi all, I'm looking for some password management advice. How are you all handeling this situation. Say, you work on a lot of TYPO3 (and perhaps Magento as well) projects with your team. Does everybody

Re: [TYPO3-english] Password management advice

2012-02-07 Thread Oliver Salzburg
On 2012-02-07 10:12, Rik Willems wrote: > Hi all, > > I'm looking for some password management advice. How are you all > handeling this situation. > > Say, you work on a lot of TYPO3 (and perhaps Magento as well) projects > with your team. Does everybody use his own username/password? How do you

Re: [TYPO3-english] Password management advice

2012-02-07 Thread Kay Strobach
www.single-signon.com and the TYPO3 BE Adapter should do the job. Regards Kay Am 07.02.2012 10:12, schrieb Rik Willems: > Hi all, > > I'm looking for some password management advice. How are you all > handeling this situation. > > Say, you work on a lot of TYPO3 (and perhaps Magento as well) pr

[TYPO3-english] Password management advice

2012-02-07 Thread Rik Willems
Hi all, I'm looking for some password management advice. How are you all handeling this situation. Say, you work on a lot of TYPO3 (and perhaps Magento as well) projects with your team. Does everybody use his own username/password? How do you manage changes in your team? Do you go through al