How does your company manage credentials? [closed] - authentication

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 9 years ago.
Improve this question
This is a call for suggestions and even possible solutions. I haven't been at a company that really seemed to get credential management 'right'.
I've seen excel/word documents and even post-it note 'solutions'.
But my main question is what is the right way to do it?
I have initially thought it would revolve around KeePass a bit, but how would you manage those databases among users?
Also, of all the online password managers I have seen, none are really multi-user.
Hopefully this can bring a bit of perspective and shine a little bit of light on something that I haven't seen any great answers to.

The company I work for sells data center automation tools to assist with exactly this. I'm not going to say who I work for, nor how much it costs (but it's distinctly NOT cheap).
The basic approach we take with that tool (used by hundreds of large companies) is to integrate LDAP/AD authentication against the corporate directory server. Then, as agents are deployed to the managed servers, permissions control can be setup in the product, which then manages access based on your user/group permissions to a given device group / server class / facility / etc.
As for how we, internally, manage credentials - I'll second #irixman's comment - we do it very very poorly :)

To answer your question: very poorly.
We're looking to standardize on public keys for password-less authentication and shared group/passwd files. Our testing looks good so far, but we're still trying to smooth over some rough edges.

This is a very good question. The two companies I've been at don't have a good handle.
I'd like to hear from some people that have had experience doing this in a way that is manageable and works. My sense of this is that it is a widespread issue that people don't talk about but just sort cope with it.
+1 for the question and a star :-)

Related

Jitbit helpdesk References and experiences [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
We don’t allow questions seeking recommendations for books, tools, software libraries, and more. You can edit the question so it can be answered with facts and citations.
Closed 5 years ago.
Improve this question
Does anyone out there have any experience with Jitbit Helpdesk? My comapny is looking to replace our current Ticketing system due to costs. We have run the basic company searches such as DNB, without much luck (guessing due to the size of the developer's company).
We plan on using the system with approximately 100 users, and have a dedicated IT department to support and modify the code to fit our needs.
My company is willing to go with a smaller provider (we will be self hosting) but have been trying to find companies of our size or larger that use this software to get their take on it, both good and bad.
If you have experience with this ticketing system I would appreciate your feedback, both good and bad.
My company would prefer to do a reference call, but even some good honest feedback from the users at Stack Overflow could turn the tide one way or the other.
My alternative would be to start Googling JitBit, find companies using the hosted version, then trying to call their IT departments until I find someone that could possibly share their experiences, (That sounds absolutely horrible to even attempt, but I'm fighting a large compliance and purchasing department).
Thanks everyone!
If anyone else comes into this thread with the same question, I just wanted to check back and let you all know how it went.
We did purchase the Jitbit software, and after some code modifications (we purchased the license with source code) it works extremely well.
Some caveats:
The system is more geared towards helpdesks that accept external callers versus an internal corporate helpdesk, and there are no group based permissions they are all handled on a user basis. I had to write the group security by co-opting their department assignments and writing some custom permission code, but for the price(~2k/year versus 100k/year), we are extremely happy with it.

New Tactics for Acquiring Link Backs [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about programming within the scope defined in the help center.
Closed 9 years ago.
Improve this question
As all SEOs know that google is trying its very best to kill SEO and linkbacks are quite a difficult task now. Although content is the key but my boss is still possessed with linkbacks. I can not do directory posting, link exchange, paid linking, web 2.0 and blog commenting as they are spam now. I do not see what other choice i have except forum posting and article posting. Can someone suggest new method to acquire link backs ? I know almost all traditional methods so don't say press release or etc. If you really have something out of the box or not very much common please share.
Google isn't killing SEO, they trying to banish practices that your boss is so intent on doing.
If you want to build a quality reputation - you need to start creating genuine and unique content aimed at your target audience. Research your market, offer your visitors information they want to read and share. Make sure what you create is geared towards Google.
Make it relevant, current, accurate and engaging.
Of course, this all takes time and considerable effort - if you or your boss can't devote the time needed, or at least employ someone to do it for you... the business is going to suffer online.
Buy the links. The majority of online marketing agencies do this as the primary way to increase Google rank.
Or go the natural way and produce so much fine content people will naturally share it.

How to setup a donations page for a charity website? [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 10 years ago.
Improve this question
I need to help a human rights organisation to setup a donation page at their website. They have tried PayPal and GlobalGiving and they found some glitches with these services like ceiling, transaction fees, etc. They want to setup their own mechanism. So what are the possible options and how much programming is needed? Is there any free-open source e-commerce or charity modules available?
Sounds like you are looking for something very customizable here, what I would recommend you is to do some custom coding or leverage solution like wufoo. You can build as simple as a form that whole bunch of fields and sends all these result to paypal or other payment gateways. Leveraging pre-built solution like wufoo is often recommended for non-technical people and/or simple, quick tasks like this.
(Alternatively) Most well-known applications like drupal, Joomal, wordpress (you name the rest) have fairly good support/module on this area, however, most of them require some degree of customizations and often become an overkill solution (mainly because of the learning curve).
You might look into Google Checkout. It's not free, but they do have an option tailored to non-profits (link).
The main benefit of going with them is that you won't need to set up a direct relationship with a CC merchant gateway, which can be a good sized hassle, especially for a smaller nonprofit. To me, the other benefit is that it keeps you far away from Raiser's Edge / Blackbaud, purveyors of some of the most awful donation pages I've ever had the misfortune to see or use.

How can my system docs be more interactive? [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
We don’t allow questions seeking recommendations for books, tools, software libraries, and more. You can edit the question so it can be answered with facts and citations.
Closed 5 years ago.
Improve this question
Perhaps if I make the my documentation better I could spend less time supporting developers and more time developing myself:
I develop a critical platform used by 10 other developers and 50 end users. The developers are of mixed ability ranging from domain-experts to relative beginners. Since I'm one of the people who know how the core platform works support requests from other developers usually go via me.
Our documentation is the usual sort of descriptive stuff any mature project will have: We have a large wiki containing details of all the usual operating procedures plus extensive API documentation.
Unfortunately it does not cater well for "how do I fix " type questions:
Would it be possible to make some interactive fault diagnostic documentation that puts users through a standardized fault-finding routine. The documentation would ask users a series of questions, and depending on the user's input would tell them what to do... it would be a very simple expert system, or possibly a documentation state-machine.
The idea would be to help newbies think more methodically about diagnosing faults in this complex system.
My question:
Are there any free tools intended to implement this kind of user-experience? I'd rather not hand-roll this. There must be some kind of framework for interactive help & documentation.
Has anybody implemented this kind of system before?
If you just wanted to have a flowchart/stat-machine thing where the user moves from the start point to a set of possible solutions by answering questions, then you could probably implement this as a set of wiki pages, where the possible responses to questions on one page are links to other pages.
This solution relies on being able to represent the answers to questions as links, which isn't going to work if the information is more form-like. For example, suppose one question is "What brand of graphics card do you have?" where the answer is one of 300 possible options. In this case it's going to be tiresome to create the links :)
If the developers are asking too many questions then I would suggest making them research the question themselves and come up with an answer, then double-check with you instead of encouraging them to ask you every time. It's much easier to ask somebody else than to find the answer yourself, but they're never going to learn if they don't look for themselves.
If the users are asking a lot of questions then you may need some user interface improvements. Try putting hints in the application itself at the top or bottom of the screen maybe.
For both groups of users a wiki can help.
a FAQ in your wiki
if an error happens too often, try preventing it or output a more useful error message (like "if this happens, the likely cause is that...)

Web-based document sharing for small organizations [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
We don’t allow questions seeking recommendations for books, tools, software libraries, and more. You can edit the question so it can be answered with facts and citations.
Closed 5 years ago.
Improve this question
In the past I have used nexo.com to share documents with sales, marketing, PR, and technical people for a small startup. But I wonder if there is a better solution to allow different types of geo-graphically dispersed workers to get to a variety of uploaded documents. I don't want to have to build or host this myself, and free or cheap is always nice.
I read about Confluence, but it seems to be way more than what I need. I simply want access-controlled folders in the cloud.
I haven't used this myself just yet, but I've heard great things about it google docs
We use s3fm for that. It's a free solution but requires an Amazon S3 account. Since we have one for our hosting needs that was an obvious choice. But given Amazon S3 bottom pricing I think it might make sense to consider open one just for that.
Love Dropbox!!! I haven't used it for setting up a lot of group access, though.
Sounds like Google Sites would help you a lot. You can set up a network of distinct Web sites -- one for sales, another for marketing, another for PR -- and upload your files to them. You can determine who has access to each site as well as each page of content.
In case anyone else checks this Q:
Wound up using filesanywhere.com - has the exact features I was looking for.
We use a combination of:
Backpack
SVN
JungleDisk
Take a look at Dropbox.
Access control is somewhat limited, but it's been working out very well for me.
Unfortunately I'm in the middle of writing such an application for a client. The best thing I can recommend is taking an existing web based file manager and adding in the permission feature.
With a big freaking huge disclaimer that I work on this as my day job:
If you're looking for feedback on those documents Backboard gives you web-based viewing and collaboration with no software required.
there is a product called docpro.this allows you to set up various security levels,routing methods etc.Its a web based one you can use for geographically dispersed team members across the globe.But its not free,But cheap i think.
Check this link
http://www.omnexsystems.com/Faq/documentpro.html