Configure Your Own Computer By Clicking Here!

Home  

 


  Create an account

Search


[x]  
 
 [x]
Categories Menu
· All Categories
· Commands
· Distro News
· General
· Link of the Week
· Linux Jobs
· Security
· Software
· Tips

 
Navigation
 
User Info
Welcome, Anonymous

Username:
Password:

(Register)

Membership:
Latest: chondo2
New Today: 0
New Yesterday: 0
Overall: 219

People Online:
Visitors: 14
Members: 0
Total: 14

 
hacker Beware
You have been warned!
We have caught 1304 shameful hackers.

NukeSentinel(tm) 2.5.14

 
Hot Downloads
 
  
Security: The Ultimate Linux Password Management Guide Part 6 kedpm
Posted on Wednesday, February 06 @ 01:00:00 CST by maysvill

Linux Computer & Network Security

This is part 6 of a multi-part article. Part 1 is available here, part 2 is available here, part 3 is available here, and part 4 is available here. Part 5 is here. Part 1 discusses the importance of complex passwords and also discusses some ways to create them in Linux. Part 2 covers the KeepassX, a program with a very nice graphical user interface. Part 3, takes a look at the gpass program which is a nice graphical user interface for the gnome desktop (will work on others too), part 4 takes a look at the command line pwsafe. Part 5 takes a look at the command line cpm (console password manager).

In this issue, we are going to take a look at ked password manager. The ked password manager has both a graphical user interface based on GTK2 and also a command line interface. I will cover both of them in this article.



ABOUT

Ked Password Manager helps to manage large numbers of passwords and related information and simplifies the tasks of searching and entering password data. It is written in pure python and can be run on virtually any platform the python interpreter can. For the moment, KedPM is tested on Linux and OpenBSD systems.

KedPM is written as an extensible framework, which allows users to plug in custom password database back-ends and custom user interface front-ends. Currently, only the Figaro PM back-end supported. To control KedPM user can choose between CLI and GTK2 based GUI front-ends.

Features

Currently Ked Password Manager includes the following features:

  • Read and write to Figaro Password Manager (FPM) password database versions 0.53 and 0.58 (and above) are supported.
  • Creating, editing, searching, deleting and displaying password information
  • Saving the password database in FPM-compatible way
  • Passwords organized in tree structure
  • Quick password search using regular expressions
  • Command line user interface
  • Graphical user interface (based on GTK2)
  • The Parser feature. It will help you incorporate passwords from your e-mails to the database more efficiently

INSTALLATION

I would check to see if kedpm is available for your distributions normal package management channels (repository, rpm, etc) and use that method if possible. However, I will provide the instructions on compiling kedpm from source code.

At the time of this article, kedpm-0.4.0 was the latest version available for download and was released in 2004. However, it still works just fine on my gentoo amd64 system.

To run this software you need:

Additionally, to run the GUI you will need:

To install the KedPM source code into your python tree and the KedPM scripts into /usr/local/bin (substitute that path with whatever is appropriate for your system). You will need to have write permission for the selected location, e.g: being root on Unix:

[code]
python setup.py install
[/code]

If you would like to place the KedPM scripts in a directory other than /usr/local/bin, then specify the preferred location with --install-script. For example, to install them in /opt/kedpm/bin:

[code]
python setup.py install --install-scripts=/opt/kedpm/bin
[/code]

You can also use the --prefix /path/to/install option to use a completely different base directory, if you do not want to use administrator rights. If you choose to do this, take note of the message at the end of installation and modify the python path accordingly.

RUNNING THE GUI VERSION

After the installation was finished, I had ked password manager available under the KDE menu in Utilities with an icon

ked password manager can also be run from a shell or the run menu by using the command (you may need to adjust the path for your installation) -- (for a true cli version of ked pm, see below RUNNING THE CLI VERSION):

[code]
/usr/bin/kedpm
[/code]

After the application is started, you are presented with a window to chose your password for the database. Make sure you chose a secure password:

After you enter your password, you will be presented with the main application window which visually appears similar to the other graphical password managers we have reviewed (keepassx, gpass). You will notice in the main application window a quick way to add new passwords via the + add button, also highlighting a password will enable the edit and delete buttons if you need to edit or delete and existing password. There is also a save button that will only be visible if there have been changes made to the current database. There is also a flatten button and a search box.

The next image show that the Add password is available from the Edit menu like other graphical password managers. One thing that is unique about ked password manager is the entry for Edit parser patterns. This feature allows ked password manager to intercept emails that are received by the user containing passwords (note from the author: anyone sending permanent passwords via unencrypted email should be shot)

The next image shows the parser configuration window that appears when you select the parser editor from the previous image. The parser looks simple enough to use even for those not familiar with regular expressions and there are several examples given to help a user configure this feature.

The next image shows the preferences window that is also in the Edit drop down menu. The save-mode is to select the option of warning if you try to close the application and there have been changes made. You can also configure the default location of the database, which is currently ~/.fpm/fpm

The image on the left shows the edit password feature. This is pretty much all the fields you have to work with with this particular password manager - title (what the entry in the password database will appear as), username, url, notes, and password. There is also a show button next to the password entry which is masked by the asterisks. Clicking the show button would actually show the password in plain text as in the second image below on the right.

Clicking on the Flatten button removes the pane on the left side of the main application window.


RUNNING THE CLI VERSION
The cli version of ked pm can be accessed by using the kedpm command with the -c option. There is also a basic help:
[code]
kedpm --help
Ked Password Manager
Usage /usr/bin/kedpm [option]:

Recognized options:
-c, --frontend=cli: Run command line interface.
-g, --frontend=gtk: Run GTK2 graphical interface.

-?, -h, --help: print this message
[/code]

Running kedpm -c results in:
[code]
kedpm -c
Creating directory ~/.kedpm
Ked Password Manager (version 0.4.0)
Creating new password database.
Provide password:
Repeat password:
Creating directory ~/.fpm
Password accepted.

Ked Password Manager is ready for operation.
try 'help' for brief description of available commands

kedpm:/>
[/code]

Typing help in the running application gives:
[code]
kedpm:/> help

Documented commands (type help ):
========================================
EOF edit help mkdir new pwd rm save show
cd exit ls mv patterns rename rmdir set
[/code]

I am going to guess that new is how we create a new password, show is how we display them, ls to list the entries, rm deletes them, save saves them, edit will edit them, etc. So, I am going to try help new which results in:

[code]
kedpm:/> help new
Add new password to current category. You will be prompted to enter
fields.

Syntax:
new [-p]

-p - Get properties by parsing provided text. Will open default text editor
for you to paste text in.

[/code]

Creating a new password using the new command:
[code]
kedpm:/> new
Enter Title (""): test
Enter Username (""): testusername2
Enter URL (""): testurl2.com
Enter Notes (""): testnotes2
Enter Password:
Repeat:
Passwords don't match. Try again.
Enter Password:
Repeat:
Database was modified. Do you want to save it now? [Y/n]: Y
Saving...OK
[/code]

Listing entered passwords using ls:
[code]
kedpm:/> ls
=== Directories ===
==== Passwords ====
Title Username URL
===== ============= ============
test testusername2 testurl2.com
[/code]

Showing a password using show:
[code]
kedpm:/> show
---------------------------------------
Title: test
Username: testusername2
URL: testurl2.com
Notes: testnotes2
Password: test2

---------------------------------------

[/code]

And here is an actual screen image of the running cli version of ked pm (which I think will be very useful to Linux minimalist desktop environments)
SUMMARY
ked password manager doesn't have the features of some of the other password managers I have reviewed, but the gui is light-weight and the cli interface has no weight. Whereas keepassx requires the kde libraries to be installed, and gpass requires the gnome libraries to be installed, all that is required by ked pm is the python programming language (which is probably installed on most systems anyways) unless you want the gui version and then you need GTK2. Due to its low system resources while running, I think it would make an excellent gui password manager for minimal desktops (fluxbox, enlightenment, etc) and the cli version is much easier to use than the pwsafe and cpm cli password managers I have already reviewed in this series.
I also found out while writing the usage for the cli version that it can use a database created by the gui version. So, you could use the gui on one desktop that has more power, carry the database around on a thumbdrive and use it on a lesser powerful computer. Or, if you are like me and split your linux usage between shells and gui's equally....then you have the best of both worlds using ked pm!


 
Related Websites

Related Links
· More about Linux Computer & Network Security
· News by maysvill


Most read story about Linux Computer & Network Security:
Secure Your Boot Loader


 
Article Rating
Average Score: 0
Votes: 0

Please take a second and vote for this article:

Excellent
Very Good
Good
Regular
Bad


 
Options
 
Associated Topics

Commands You Should Know How to UseLinux Computer & Network SecuritySoftwareTips & Tricks

The comments are owned by the poster. We aren't responsible for their content.

No Comments Allowed for Anonymous, please register

 
All content Copyright 2000 - 2008, Maysville Linux Users Group unless otherwise credited.
All Rights Reserved!
The opinions expressed by visitors to this web site are their own and not necessarily the opinions of the MLUG!


Web site powered by PHP-Nuke Web site powered by PHP-Nuke-NIP-76.0

You can syndicate our news using the file backend.php or ultramode.txt