Re: [vault] "Auto type" feature in Hashicorp vault like the one in Keepass

[Jason Martin]

On Tue, Jul 09, 2019 at 07:55:42AM -0700, Lyes Kerkouche wrote:
> is there the feature "Auto type" in Vault ? like the one on keepass.

Keepass is meant as a 'consumer' password storage mechanism; Vault doesn't
really occupy this space. Someone could in theory write a browser plugin or
native GUI that handles this and uses Vault as a storage mechanism but such
does not yet exist.

-Jason Martin

[Jeff LOMBARDO]

Note that there is also a niche Enterprise case for that. Before the era of Keypass and Lastpass, all this was known as Enterprise Single Sign-On (See Evidian, Avencis, Oracle ESSO - ex Passlogix, etc.).

--
This mailing list is governed under the HashiCorp Community Guidelines - https://www.hashicorp.com/community-guidelines.html. Behavior in violation of those guidelines may result in your removal from this mailing list.

GitHub Issues: https://github.com/hashicorp/vault/issues
IRC: #vault-tool on Freenode
---
You received this message because you are subscribed to the Google Groups "Vault" group.
To unsubscribe from this group and stop receiving emails from it, send an email to vault-tool+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/vault-tool/20190709150115.GA9768%40toger.us.
For more options, visit https://groups.google.com/d/optout.

[shawn wilson]

Haven't used it - pointing to prior art that may fit the need https://github.com/tmobile/t-vault

Looks like it uses jwt to auth to vault, not sure if I like that vs just a js front end that uses vault's own auth and just makes the kv store look like keypass.

To view this discussion on the web visit https://groups.google.com/d/msgid/vault-tool/CAD1Nog1C6%3Di9t-g%2B2EL1o-8LNJ6_znzqXrFS2PnCqEufMbpxSA%40mail.gmail.com.

[Vasilev Vjacheslav]

Tried to play around with t-vault, and I'd say it has nothing with keepass, its main purpose is to simplify maintenance, and bring self-service into operations

[Vasilev Vjacheslav]

Btw there are some plugins available to keep vault synchronized with keepass kdbx

[Josef Málek]

https://github.com/Orange-OpenSource/keepass-vault-sync-plugin

I've tried, but I can not get it work. It just creates new group, but secrets aren't synced (downloaded) from vault.

Has anyone better experience?

Dne sobota 13. července 2019 19:37:42 UTC+2 Vasilev Vjacheslav napsal(a):