florianflad / webpasswordsafe

Web-based, multi-user, secure password safe with delegated access controls.

webpasswordsafe

Web-based, multi-user, secure password safe with delegated access controls.

Overview

This is a fork of the original webpasswordsafe created by Josh Drummond. It was created to make this awesome web application as easy to build and use as possible.

Features

• Rich web application based on GWT and GXT
• Multi language support (i18n)
• Secure password hashing algorithm for database storage
• Fulltext search for password data
• Password history
• Brute force protection by blocking the IP address of the attacker
• Permissions for passwords based on users and groups
• LDAP integration for user and groups
• Detailled reports (users, groups, password access, password expiration, password permissions, ...)
• RESTful web service interface for 3rd party applications

Prerequisites

• Java 6 must be installed
• JCE must be installed
• Web application server (e.g. tomcat) must be installed

Installation

• Download and extract the war file to webapps folder:

cd /opt/tomcat/webapps
wget https://raw.githubusercontent.com/chrisipa/webpasswordsafe/master/public/webpasswordsafe.war
mkdir webpasswordsafe 
unzip webpasswordsafe.war -d webpasswordsafe
rm webpasswordsafe.war

• Change master password:

nano /opt/tomcat/webapps/webpasswordsafe/WEB-INF/encryption.properties

encryptor.jasypt.password=xxxxxxxxxxxxxxxxxxxx

• By default the applicaton is using a HSQL database

Installation (MySQL)

• Install required os packages:

sudo apt-get install mysql-server

• Create mysql database and system user:

CREATE DATABASE webpasswordsafe CHARACTER SET utf8;
CREATE USER 'webpasswordsafe'@'localhost' IDENTIFIED BY 'xxxxxxxxxxx';
GRANT ALL PRIVILEGES ON webpasswordsafe.* TO 'webpasswordsafe'@'localhost';

• Download mysql JDBC connector to lib folder:

cd /opt/tomcat/webapps/webpasswordsafe/WEB-INF/lib
wget http://repo1.maven.org/maven2/mysql/mysql-connector-java/5.1.28/mysql-connector-java-5.1.28.jar

• Configure mysql in hibernate settings:

nano /opt/tomcat/webapps/webpasswordsafe/WEB-INF/jdbc.properties

# Common settings
jdbc.username=webpasswordsafe
jdbc.password=xxxxxxxxxxx

# HSQL settings
#hibernate.dialect=org.hibernate.dialect.HSQLDialect
#jdbc.driverClassName=org.hsqldb.jdbcDriver
#jdbc.url=jdbc:hsqldb:file:/tmp/webpasswordsafedb
#jdbc.url=jdbc:hsqldb:hsql://localhost/
#jdbc.validationQuery=select 1 from INFORMATION_SCHEMA.SYSTEM_USERS

# MySQL/MariaDB settings
hibernate.dialect=org.hibernate.dialect.MySQL5InnoDBDialect
jdbc.driverClassName=com.mysql.jdbc.Driver
jdbc.url=jdbc:mysql://localhost:3306/webpasswordsafe
jdbc.validationQuery=select 1

Installation (Mobile-Fronted)

• This web application is not optimized for mobile devices
• There is an alternative web frontend called pwsafe-mobile which is using the RESTful web service interface for some basic functionalities