Why you need Privileged Account Management

Implement PAM → ibm.biz/BdPzjy
You have probably received these instructions from your IT department, "Don't write down your passwords & don't share your passwords with anyone." It's good advice, so you might be surprised when you find out IT departments frequently ignore it when it comes to their most sensitive accounts. In this video, Jeff Crume explains, why this happens, and how implementing privileged accesses management can help keep your organization secure.
Get started for free on IBM Cloud → ibm.biz/ibm-cloud-sign-up
Subscribe to see more videos like this in the future → ibm.biz/subscribe-now

[@mathcss8496]

This guy explains these concepts like a rockstar

[@jeffcrume]

So very nice of you to say! Thank you!

[@thereal_jan]

that was the best explanation of PAM I heard so far! thank you so much

[@jeffcrume]

Thanks so much for saying so!

[@SahadFoundation]

Thank you for this explanation.

[@princeaaron3186]

Fantastic explanation

[@RohanSingh-dy5ks]

Phenomenal way to explain complex items.

[@leonatkrasniqi5631]

Great explanation😄

[@pereganranwei2153]

Thanks for this

[@lipinaries]

Oh ghosh...Jeff is explains the concept in an awesome and simple way. Love to attend his class f2f someday in Australia

[@jeffcrume]

You’re very kind to say so!

[@lipinaries]

@@jeffcrume hope you got some plans to take classes in Australian Universities

[@vectorialpx]

@IBMTechnology you have very few views and likes for this kind of content. Kudos!

[@jeffcrume]

I’m glad you liked it!

[@podemechamardeperguntas6854]

What it the name and model of the transparent whiteboard that you use?

[@IBMTechnology]

Sorry, our company policy does not allow us to recommend or endorse specific vendors or products without legal review.

[@roeniss]

Quick question: Is Kerberos a kind of PAM implementation?

[@christopherswartz7405]

It's an interesting question...I didn't think so and I found some information on topic: access.redhat.com/documentation/
19.4. Kerberos and PAM
Currently, kerberized services do not make use of Pluggable Authentication Modules (PAM) - kerberized servers bypass PAM completely. However, applications that use PAM can make use of Kerberos for authentication if the pam_krb5 module (provided in the pam_krb5 package) is installed. The pam_krb5 package contains sample configuration files that allow services like login and gdm to authenticate users as well as obtain initial credentials using their passwords. If access to network servers is always performed using kerberized services or services that use GSS-API, such as IMAP, the network can be considered reasonably safe.
Note
Administrators should be careful to not allow users to authenticate to most network services using Kerberos passwords. Many protocols used by these services do not encrypt the password before sending it over the network, destroying the benefits of the Kerberos system. For example, users should not be allowed to authenticate using their Kerberos passwords over Telnet.

[@jeffcrume]

Kerberos could be used behind the scenes to accomplish PAM but, by itself, it wouldn’t give the level of control (e.g., check-out, check-in) or visibility (e.g., session recording) that would be part of an enterprise class PAM solution.

[@jean-charles-AI]

Gosh.... Yes ! :/

[@sak2029]

😁😁😁

[@stock99]

what happen when PAM got ransomed?

[@zaidal-samaraie6765]

This is disingenuous.
AD? Password safe? MFA?
No. No such thing. Administrators use one account and scribble the password on the wall ...or PAM.
There are no other options.
Who is this video aimed at?

[@jeffcrume]

Clients have been using PAM solutions successfully from vendors like IBM for more than a decade

[@mohsenjebelli155]

Fantastic explanation

[@jeffcrume]

Thank you!