README
1 _ _
2 __ _| |_| | ___ __ __ _ ___ _ __ ___ __ _ _ __
3 / _` | __| |/ / '_ \ / _` / __| '_ ` _ \ / _` | '_ \
4 | (_| | |_| <| |_) | (_| \__ \ | | | | | (_| | | | |
5 \__, |\__|_|\_\ .__/ \__,_|___/_| |_| |_|\__,_|_| |_|
6 |___/ |_|
7
8-----------
9What is it?
10-----------
11
12It is a graphical interface to manage the usage of passwords related to servers
13or services, grouped by customers (plateforms, etc.) The purpose is to provide
14system and network administrators a convenient tool to manage a passwords
15knowledge base related to customers, servers, services... It can help to
16retrieve passwords, or even connect to servers (ssh, telnet, ftp...) Unix, C
17compiler, GTK+ libraries are required in addition to gnupg. Passwords must be
18kept in a gnupg crypted file. The structure of the file is predefined, but
19very easy to edit and maintain.
20
21---------------
22What is needed?
23---------------
24
25 - C compiler
26 - GTK+ libraries (gtkpasman v>0.9 need versions 2 or 3.x)
27 - gnupg (pgp should work)
28
29------------------------
30Where does it come from?
31------------------------
32
33gtkpasman was a project based on gpasman (project of Olivier Sessink) The RC2
34crypted method has been replaced by calls to gnupg. The encryption is now
35external to the application.
36As the 'Eye view' and its menus have been removed, the application is now
37completely distinct.
38
39-----------------
40How does it work?
41-----------------
42
43Typical use:
44 - Edit a password file (see format below)
45 - crypt the password file with your gpg key:
46 gpg --encrypt --no-encrypt-to --recipient YOURKEYID gpasman4.sample
47 - remove uncrypted file
48 - launch gtkpasman:
49 gtkpasman gpasman4.sample.gpg
50
51Buttons under the list of accounts on servers, help you to connect:
52 - you can have the password copied in the paste buffer. (Convenient if you
53 just want to enter it in an HTTP, ldap, or any kind of authentication)
54 - launching xterm-like program of your choice; just point a server or a user
55 on a service in the list, and you are connected, paste password with
56 middle-clic or paste shortcut and you are in.
57 - alternately, you can just launch an xterm, if you use ssh keys and do not
58 need to enter passwords for some servers. gtkpasman just helps you to group
59 servers by customers in this case
60 - when multiple selection is made, gtkpasman tries to launch a specific
61 command for ssh targets, so that you can use multiplexers programs like
62 cluster-ssh (cssh) on your selection.
63
64There is also a search field to find out a server/group/customer in the list.
65
66The password file should contain one line per password; The format of a line
67in the encrypted file must be the same as the following:
68
69 - ";" is the separator
70 - spaces at start and end are allowed
71 - empty fields are allowed
72 - no separator is required for the last field (password)
73 - field names are in order:
74 customer, group, server, service, serviceplus, user, password
75
76A sample file:
77 see src/gpasman4.sample
78
79This file would give a represented tree like this :
80 +customer1
81 +Group 1
82 | +srvA
83 | | +ssh
84 | | +root2
85 | +srvB
86 | +ssh
87 | +root
88 +Group 2
89 +srvC
90 +ssh
91 +root
92 +customer2
93 +Group 1
94 +srvD
95 +ssh
96 +root
97 +acc
98 +customer3
99 +Group A
100 +srvE
101 | +ssh
102 | +port 322
103 | +root
104 +srvF
105 +ssh
106 +port 322
107 +root
108
109