+--------------------------+
     /     .-----------+--------/|
    /-----/           /        / |
   /     /===========+        /  |
  /     /           /        /   |
 /     /           /        /|   |
+-----.--------------------+ |  /|
|     | P@ssw0rd  |        | | / |
|-----|-----------.        | |/| |
|     |   Cub3    |        | / | |
|     |           |========|/  | |
|     |           |        |   | |
|-----+           |        |   |/|
|     |   v 1.0   |        |   / +
|     |====+======|        |  / /
|     |    |      |        | / /
|     |    |      `========|/|/
|     |    |               | /
|     +----`---------------|/
+--------------------------+

This is the Password Cub3 v 1.0, a password safe built to take advantages of automated processes and allow team members to collaborate.

For detailed information on how and why this product was designed, check out the DerbyCon talk here: https://www.youtube.com/watch?v=S3WncEzGby0

and the slides here: https://michaelvieau.com/wp-content/uploads/2019/09/Sikich-Building-a-Password-Manager-Presentation-DerbyCon-2019.09.03.pdf

The setup was tested on CentOS 7.1

rpm -Uvh https://repo.mysql.com/mysql80-community-release-el7-3.noarch.rpm -y sed -i 's/enabled=1/enabled=0/' /etc/yum.repos.d/mysql-community.repo yum --enablerepo=mysql57-community install mysql-community-server -y systemctl start mysqld.service systemctl enable mysqld.service

grep "A temporary password" /var/log/mysqld.log

mysql -u root -p

ALTER USER root@localhost IDENTIFIED BY ''; flush privileges; create database PasswordCub3; use PasswordCub3; create table passwords(ID int NOT NULL AUTO_INCREMENT, ClientName varchar(255), Password varchar(1000), PRIMARY KEY (ID)); create table users(ID int NOT NULL AUTO_INCREMENT, Username varchar(255), FullName varchar(255), PRIMARY KEY (ID)); exit;

mkdir -p /PasswordCub3/ServerKeys mkdir -p /PasswordCub3/ramdisk mkdir -p /PasswordCub3/public-keys groupadd ramdisk groupadd PasswordCub3 groupadd Cub3Admins chgrp ramdisk /PasswordCub3/ramdisk chmod 770 /PasswordCub3/ramdisk chmod 777 /PasswordCub3/public-keys echo '%PasswordCub3 ALL=(root) NOPASSWD: /bin/mount, /bin/umount' >> /etc/sudoers

useradd -c "${FULLNAME}" -G PasswordCub3,ramdisk ${USERNAME} mkdir /home/${USERNAME}/.ssh touch /home/${USERNAME}/.ssh/authorized_keys chmod 700 /home/${USERNAME}/.ssh chmod 644 /home/${USERNAME}/.ssh/authorized_keys chown -R ${USERNAME}:${USERNAME} /home/${USERNAME}/.ssh echo "exec /PasswordCub3/Scripts/UserSide.sh" >> /home/${USERNAME}/.bash_profile