blocks|key|529443|text|我们使用以下方法：http://sourceforge.net/projects/phppassmanager/+(稍微修改/调优)|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|529444|它安装在具有Active身份验证的HTTPS+web服务器上，以限制我们团队的密码检索。团队的每个成员都知道一个主密码，用于加密存储在phppassmanager中的所有密码。当他们想要添加/修改/读取密码时，就会使用它。密码被存储在mysql数据库中。|529445|他们有可能访问所有密码，但是每个密码解密都是日志，日志在主页上显示给整个团队。这个系统是自我监控和自我管理的。|entityMap|0|LINK|mutability|MUTABLE|url|http://sourceforge.net/projects/phppassmanager/^0|9|1B|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@$A|P|B|Q|1|R]]|C|$]]|$1|D|3|E|5|6|7|S|8|@]|9|@]|C|$]]|$1|F|3|G|5|6|7|T|8|@]|9|@]|C|$]]]|H|$I|$5|J|K|L|C|$M|N]]]]

We use this :
<a href="http://sourceforge.net/projects/phppassmanager/" rel="nofollow noreferrer">http://sourceforge.net/projects/phppassmanager/</a> (a little bit modified/tuned)

It's installed on a HTTPS web server with Active Directory authentication to restrict password retrieval to our team. Each member of the team knows a master password used to encrypt all the passwords stored in phppassmanager. They use it when they want to add/modify/read a password. The passwords are stored encrypted in a mysql database.

They potentialy have access to all the passwords but each password decryption is loggued, and the logs are shown to the whole team on the main page. This system is self-monitored and self-managed.

blocks|key|529275|text|我使用KeePass，我对它非常满意。这是一个开放源码，易于使用密码管理器。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|entityMap|0|LINK|mutability|MUTABLE|url|http://keepass.info/^0|3|7|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@$A|L|B|M|1|N]]|C|$]]]|D|$E|$5|F|G|H|C|$I|J]]]]

I use <a href="http://keepass.info/" rel="nofollow noreferrer">KeePass</a> and i'm very happy with it. It's an opensource easy to use password manager.

blocks|key|529227|text|你到底在用这个系统保护什么？你控制的系统，还是由第三方运行的系统？|type|unstyled|depth|inlineStyleRanges|entityRanges|data|529228|对于内部身份验证，像Kerberos、LDAP甚至仅仅是sudo和PKI这样的系统可以处理这个问题。|529229|对于外部身份验证，比如对软件支持网站来说，无论他们实现什么系统，你都会受到很大的阻碍。像KeePass+(2.0类似于mono)或PasswordGorilla这样的工具可以存储您的密码。我认为他们中的任何一个都不支持多个单独解密密码的概念；我不知道这如何在数学上起作用。|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|G|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|H|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|I|8|@]|9|@]|A|$]]]|F|$]]

What exactly are you protecting with this system? Systems you control, or systems run by third parties?

For internal authentication, systems like Kerberos, LDAP or even just sudo and PKI can handle this. 

For external authentication, say to a software support website, you're largely hamstrung by whatever system they implement. Tools like KeePass (2.0 kinda works with mono) or PasswordGorilla can store your passwords. I don't think either of them supports any notion of multiple separate decryption passwords; I'm not sure how that could work mathematically.

blocks|key|529245|text|到目前为止，我所读到的任何带有数据库后端的wiki系统(即使是文件存储后端，但我更喜欢db)都应该可以解决您的问题。对用户帐户设置适当的限制，并且只有您信任的人(管理员)才能读取/修改pasword列表(在一个普通的html文档:中)。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|529246|将其置于启用SSL的服务器之后，并限制对数据库的访问。|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|E|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|F|8|@]|9|@]|A|$]]]|D|$]]

For what I read so far, any wiki system with database backend (even with file store backend, but I'd prefer db) should solve your problem. Setting proper restrictions on the user accounts, and only the people you trust (admins) will be able to read/modify the pasword lists (in a plain html doc :) ).

Put it behind SSL enabled server, and restrict the access to the database.

blocks|key|4266700|text|PowerBroker是一种专门为控制/审核共享帐户访问而设计的供应商产品；但是，每个主机的许可证成本都很高。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|entityMap|0|LINK|mutability|MUTABLE|url|http://www.symark.com/products/pboverview.html^0|0|B|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@$A|L|B|M|1|N]]|C|$]]]|D|$E|$5|F|G|H|C|$I|J]]]]

<a href="http://www.symark.com/products/pboverview.html" rel="nofollow noreferrer">PowerBroker</a> is a vendor product designed specifically for controlling/auditing access to shared accounts; however, there is a significant per-host license cost.

blocks|key|4266804|text|我在一家非常注重安全的公司工作，在我的5人团队中，我们使用了KeePass，因为加密很强，跨平台，支持将多个数据库导入到自己的数据库中。我们将它存储在一个只能通过内部网络通过需要密钥身份验证的SSH登录访问的系统上(没有密码，谢谢！)。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|entityMap|0|LINK|mutability|MUTABLE|url|http://keepass.info/^0|U|7|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@$A|L|B|M|1|N]]|C|$]]]|D|$E|$5|F|G|H|C|$I|J]]]]

I worked at very security-conscious company, and on my team of 5 we used <a href="http://keepass.info/" rel="nofollow noreferrer">KeePass</a>, because the encryption is strong, it is cross platform and supports importing multiple databases into your own. We stored it on a system that was only accessible through the internal network through SSH logins that required key authentication (no passwords, thanks!).

blocks|key|529345|text|我们使用凯帕斯+--这是一款很酷的软件，你可以用大容量来组织密码。但是，我不确定您是否可以有不同级别的用户登录。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|entityMap|0|LINK|mutability|MUTABLE|url|http://keepass.info/^0|4|3|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@$A|L|B|M|1|N]]|C|$]]]|D|$E|$5|F|G|H|C|$I|J]]]]

We use <a href="http://keepass.info/" rel="nofollow noreferrer">keypass</a> It's quite a cool piece of software, you can organise passwords by catagory. However, I am unsure if you can have different levels of users to log on.

blocks|key|4266905|text|我不太确定这是否是您所需要的，但这对我们是有效的:我们在SVN中保存一个gpg加密的文本文件，其中包含所有的凭据，并使用我们共享的公用密钥加密。与keepassx或类似工具相比，这种方法的主要优点是:+1)可以将自由格式的信息放在那里，2)+gpg+-解密可以发送到管道中，并在终端中使用。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4266906|当然，这只适用于一组10人，但只要有一点授权，就可以稍微扩大一些。另外，我们实际上有两个密钥和两个加密文件，用于不同的访问级别，但这并没有太大的变化。|4266907|哦，而且我们倾向于尽量避免处理密码(主要是使用个人SSH密钥)。|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|G|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|H|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|I|8|@]|9|@]|A|$]]]|F|$]]

I'm not exactly sure it's what you need, but this works for us: we keep in our SVN a gpg-encrypted text file with all the credentials, encrypted with a common key which we all share. The main advantages to this approach instead of keepassx or similar tools are : 1) one can put free-form information there and 2) gpg --decrypt can be sent to a pipe and used in a terminal.

Sure, this only works for a group of ~10 people, but with a bit of delegation can be scaled up a bit. Also, we actually have two keys and two encrypted files for different access levels, but this doesn't change much.

Oh, and we tend to stay away from handling passwords as much as possible (mainly with personal SSH keys).

blocks|key|4266977|text|我正在寻找完全相同的东西，我发现两个可能适合你的需要。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4266978|undefined+--看起来它可以做所需的事情，但我仍在试图找出所有的选择。|offset|length|4266979|公司制+-它是非常基础的，在早期阶段。界面还没有完成，但我发现很容易搞清楚。|entityMap|0|LINK|mutability|MUTABLE|url|http://ossfree.net/webkeepass/|1|http://andygaleano.wordpress.com/2009/05/03/corporate-vault/^0|0|0|9|0|0|0|3|1^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|R|8|@]|9|@$D|S|E|T|1|U]]|A|$]]|$1|F|3|G|5|6|7|V|8|@]|9|@$D|W|E|X|1|Y]]|A|$]]]|H|$I|$5|J|K|L|A|$M|N]]|O|$5|J|K|L|A|$M|P]]]]

I am looking for the exact same thing, and I found 2 that might fit your needs.

<a href="http://ossfree.net/webkeepass/" rel="nofollow noreferrer">Web-KeePass</a> - This seems like it would do what is needed, but I'm still trying to figure out all the options.

<a href="http://andygaleano.wordpress.com/2009/05/03/corporate-vault/" rel="nofollow noreferrer">corporatevault</a> - It is very basic and in the early stages. The interface isn't finished, but I found it pretty easy to figure out.

blocks|key|4267025|text|我认为sysPass是一个不错的选择。它提出：|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|4267026|密码加密与AES-256+CBC。|ordered-list-item|4267027|用户和组管理|4267028|MySQL、OpenLDAP和Active身份验证。|4267029|多语种|4267030|更多的是|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/nuxsmin/sysPass/releases^0|3|7|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|V|8|@]|9|@$A|W|B|X|1|Y]]|C|$]]|$1|D|3|E|5|F|7|Z|8|@]|9|@]|C|$]]|$1|G|3|H|5|F|7|10|8|@]|9|@]|C|$]]|$1|I|3|J|5|F|7|11|8|@]|9|@]|C|$]]|$1|K|3|L|5|F|7|12|8|@]|9|@]|C|$]]|$1|M|3|N|5|F|7|13|8|@]|9|@]|C|$]]]|O|$P|$5|Q|R|S|C|$T|U]]]]

I think <a href="https://github.com/nuxsmin/sysPass/releases" rel="nofollow noreferrer">sysPass</a> is a good choice. It offers:

<ol>
<li>Password encryption with AES-256 CBC.</li>
<li>Users and groups management</li>
<li>MySQL, OpenLDAP and Active Directory authentication.</li>
<li>Multilanguag</li>
<li>and so much more </li>
</ol>

blocks|key|529597|text|蒂克秘密服务器。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|529598|我们在我公司已经用了很多年了。它有很多伟大的功能，如自动更改密码，在某些密码被访问时发送的电子邮件，等等。|529599|它们还提供定期更新和添加功能。|529600|https://thycotic.com/products/secret-server/|offset|length|entityMap|0|LINK|mutability|MUTABLE|url^0|0|0|0|0|18|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Q|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|R|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|S|8|@]|9|@$H|T|I|U|1|V]]|A|$]]]|J|$K|$5|L|M|N|A|$O|G]]]]

Thycotic Secret Server.

We have been using this for many years at my company. It has a lot of greate features like automatically changing passwords, emails sent when certain passwords are accessed, etc.

They also provide regular updates and add features. 

<a href="https://thycotic.com/products/secret-server/" rel="nofollow noreferrer">https://thycotic.com/products/secret-server/</a>

I'm interested in best practices and potential open source projects that would allow my organization to securely store multiple passwords and allow multiple administrators to access them. I'm interested in something that would allow each administrator to have their own login/key versus the typical password protected Excel spreadsheet. ;) 

Preferable would be a web based application which I can run over SSL.

I need it to run in a Mac/Linux environment - no Windows apps, please.

Thanks!

Password Management System for multiple SysAdmins?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

教程

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云智能顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云AI代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

功能1上新10个字符

功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符。

功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符。

功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符

功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符

功能4上新

文章&问答评论现已支持表情

全新交互，全新视觉，新增快捷键、悬浮工具栏、高亮块等功能并同时优化现有功能，全面提升创作效率和体验

社区富文本编辑器全新改版！诚邀体验～ 

精选全网热门MCP server，让你的AI更好用 🚀

💥开发者 MCP广场重磅上线！

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

聚焦“写作效率、视觉美观与运行性能”三方面进行全面升级，为您提供更高效、稳定的创作环境

社区富文本&Markdown编辑器全新改版上线，欢迎大家体验!

诚挚邀请您参与本次调研，分享您的真实使用感受与建议。您的反馈至关重要，感谢您的支持与参与！

社区新版编辑器体验调研

我对最佳实践和潜在的开源项目感兴趣，这些项目将允许我的组织安全地存储多个密码，并允许多个管理员访问它们。我感兴趣的是，与典型的受密码保护的Excel电子表格相比，每个管理员都可以拥有自己的登录/密钥。;)最好是基于web的应用程序，我可以在SSL上运行。我需要它在Mac/Linux环境下运行--请不要使用Windows应用程序。谢谢!

问多SysAdmins密码管理系统？
EN

回答 11

Server Fault用户

Server Fault用户

Server Fault用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问多SysAdmins密码管理系统？EN

回答 11

Server Fault用户

Server Fault用户

Server Fault用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问多SysAdmins密码管理系统？
EN