Open Source Authentication Software - Page 5

OpenID is a decentralized authentication protocol for web applications. OpenID users need share credentials with only one OpenID provider, and not every forum and network they log on to. This leads to a safer and more convenient Web. http://openid.net/

Web reverse proxy for Single Sign On (SSO). It can apply a security policy (profiles stored in a LDAP directory) to an existing set of applications, consolidate websites, encrypt all communications, rewrite simple URLs...

Secure LDAP Authentication Script for OpenVPN Server running on Server 2008, XP, Vista, or Windows 7

OPR (Oracle Password Repository) is a Unix based secure tool for storage & retrieval of Oracle database passwords. By replacing hardcoded passwords in scripts with a call to OPR, it helps keeping your Oracle enviroment secure and easier to maintain.

PHPMyLogin is an secure module based authentication system for LAMP (Linux, Apache, MySQL and PHP). It generate and use Apaches htaccess for authenticating. It is secure, and works like an secure and transparent SSO (single sign on) solution.

The Password Auditing Project will be a compilation of other, previously released password auditing programs, in such a fashion as to reap the best benefits of each portion. Pulling innovations from John the Ripper, Lepton, Rainbow Tables, and more.

A configurable system for synchronising multiple passwords of different types. Password quality can be imposed by using histories, cracklib based tests, and forcing certain passwords to be distinct. CGI and PAM modules exist for tight integration.

A portal project providing useful information for those who have the hard job administering a school network. Hints, tips, configurations and special software for servers that can be used in educational environments can be found here.

cSploit is a mass password changer interactive shell script for cpanel usernames along with their respective login passwords it also changes their FTP, MySQL passwords also. And save changed passwords with their respective usernames in a text file. It gives you flexibility to specify custom filename to save password. (This makes filename hard to guess.) This script also allows you to select the specific type of random generated passwords.

Implementation of checkpassword-compatible PAM authentication program. Details on "checkpassword" interface are available at http://cr.yp.to/checkpwd.html

A tool to convert data from CSV form to LDIF form.

csv2ldif2 is a command line tool written in perl that converts CSV files to LDIF files. Features: Platform independent, reads from STDIN and writes to STDOUT, ignoring/selecting specific fields of the CSV, choosing a custom base-dn and much more!

/usr/bin/passwd offers a "safe way" for root to edit /etc/passwd (or shadow). If setuid it allows regular users to change passwd without asking root to do changes for them. (note: does have learning curve on args to choose) gnupasswd - gnu change user password gnugpasswd - gnu change group password gnupasswd(1) has a goal to work with older login.c/linux and some newer too, also "getpwent" (any glibc). or help convert. gnupassd does pass only: leaves all else alone (compat). small, simpler for single admin / small linux bases. For example: it can make plain /etc/passwd plain text password file (still) or use shadow - (login.c may do both). A goal is to be old linux and no "depends problems" (ie, some required pam selinux audit kerb (+nis remove hacks) "to work as intended". These can contact remote computers during login if misconfigured and are complicated to know if secure. gnupasswd has none of these (gnu has NIS, off by default)

This module is aimed at environments with SMB (Samba or Windows NT) or NCP (Netware or Mars-NWE) servers that Unix users wish to access transparently. The module also supports mounting home directories using loopback encrypted filesystems.

Convert LDIF to vCard format

Lemonldap is a reverse proxy based on Apache and mod_perl which manages the accesses of protected resources by informations hosted in LDAP.A webmin module for system administration is provided.

Msktutil creates user or computer accounts in Active Directory, creates Kerberos keytabs on Unix/Linux systems, adds and removes principals to and from keytabs and changes the user or computer account's password. This project has moved to https://github.com/msktutil/msktutil

A fork of nss_db, modified to work on Solaris as well as Linux. This provides an alternative location for storing configuration information used by the Name Service Switch libraries, and may be used to supplement user, group and other information in a Berkeley DB. The Berkeley DB NSS module provides an alternative means for storing configuration information traditionally kept in several plain-text files in /etc (e.g. /etc/passwd). The module uses the Berkeley DB Library to store this information in several database files in /var/db (e.g. /var/db/passwd.db). Using these databases can lead to a considerable speed-up if the files in /etc are large (e.g. on a system with a lot of accounts). The databases may also be used as a local cache for network accounts, or as a means to supplement or override UIDs, GIDs, home directories etc. provided by network accounts.

smbldap-tools addons is an additional tool for smbldap-tools (http://gna.org/projects/smbldap-tools/). The latest version supports smbldap-tools 0.9.6. See more: http://smbldap-addons.sourceforge.net/

An extension for VirtualBox server which reads LDAP entries to authorize users to connect to virtual machine RDP ports.

Powered by the same engine as the Retina Network Security Scanner, Retina Community is a completely free security scanner for up to 128 IPs. Use it to scan servers, desktops - any networked device - for security flaws, and learn how to fix them. New: Now, you can scan virtual applications, deployed via VMware ThinApp, for flaws as well. This is a new industry development, completely unique to eEye.

2FAS Auth Browser Extension is a cross-browser plugin that integrates the 2FAS multi-factor authentication platform directly into the user’s web browsing workflow, helping streamline login flows by interfacing with web pages and 2FA token generation in a seamless way. Once installed in browsers like Chrome, Firefox, or others that support standard extension APIs, it can detect 2FA prompts on login forms and offer to fill or suggest one-time passwords generated by your 2FAS mobile clients or local vault, reducing friction and manual copy-paste steps. The extension communicates securely with companion mobile or desktop clients to fetch or synchronize token data, respecting encryption and privacy boundaries so that secrets are never exposed to the extension itself without user consent. It also lets users manage or view registered accounts, add new ones by scanning QR codes via companion apps, and handle token organization from within browser UI elements.

2FAS Auth for Android is the general Android authenticator client for the 2FAS open-source multi-factor authentication suite, designed to help users protect their online accounts with secure, rotating one-time passwords and optionally manage related vault entries. This client lets users add and view TOTP and HOTP tokens for countless services, restore and backup token sets across devices, and secure the app with passcodes or biometrics. The Android implementation emphasizes straightforward setup and usage, providing an incremental list of codes that update in real time, quick token management, and compatibility with common OTP QR codes. It also supports sync and optional integration with 2FAS browser extensions to autofill or streamline authentication workflows when signing in to services across devices.

389 DS Graph is a utility for graphing connections and operations from the 389 Directory Server (formerly Fedora Directory Server). 389 DS Graph works with 389DS, Fedora DS, Red Hat DS, and may work with Sun DS.

A Plugin for Sympa.org the mailing list manager. This plugin is an authentification engine with LemonLDAP.org(a sf.net project).