jodiecunningham/keepasswd

Rotate your passwords in KeePass

keepasswd's Issues

rotate-expired feature should be implemented

The rotate-expired feature should be implemented.

Use of the rotate-expired flag should query all expired passwords from the database and change them, setting a new expiration. This new expiration should be configurable, or maybe pull from abs(modification date - expiration date).

Support su/sudo and different logon user

for some accounts, like root, you'd SSH in and then su or sudo to root.

The script should support this, but the solution would likely be assumptive. It could pull another entry from KeePass for logon.

Do we try to store this relational information in the KeePass entry somehow?

DB is saved even on failure

The script should die if it fails, instead of saving the bad password back to the DB.

Shouldn't it?

openssl is hardcoded in script

eg Line 115:
my $newpass = openssl rand -base64 12;

Integrate support for config option for openssl or make a real PW generator

Password history is not stored by the script.

If keepasswd messes up, there's no record of the old passwords in the database.

--verify option should be implemented.

You should be able to run

keepasswd --account foo@blah --verify 

To check an account password.

Exit status of the change is not trapped gracefully

This is either not being passed back from the expect script or is not being captured successfully. It always returns "Seemed to have succeeded."