Open Source C Authentication Software

*NOTE* Migrated to http://github.com/cracklib/cracklib Next generation version of libCrack password checking library. As of Oct 2008 (reflected in 2.8.15 code release), licensed under LGPL.

OpenPAM is an open source PAM library that focuses on simplicity, correctness, and portability.

PAM module which permits authentication for arbitrary services via ssh-agent. Written with sudo in mind, but like any auth PAM module, can be used for for many purposes.

Purpose of this project is to build portable, easy-to-use and standard compliant library suitable for developing free and commercial software that need support for a RADIUS protocol (RFCs 2138 and 2139).

DACS,a light-weight single sign-on and role-based security system for Apache or server-based software, provides comprehensive authentication capabilities, and powerful, transparent rule-based authorization checking for any web service or CGI program. The latest release is DACS 1.5.1 (26-Oct-2025) It is not available here! Get it at https://dacs.dss.ca/download.html

Project has been moved to github: https://github.com/pam-pgsql/pam-pgsql

An open source project originally designed to provide the University of Michigan with a secure single sign-on web authentication system. Cosign is part of the National Science Foundation Middleware Initiative (NMI) EDIT software release.

A virtual filesystem for FUSE that allows to navigate an LDAP tree.

Implementation of checkpassword-compatible PAM authentication program. Details on "checkpassword" interface are available at http://cr.yp.to/checkpwd.html

This module provides single sign-on behavior. The user types a passphrase when logging in and is allowed in if it decrypts the user's SSH private key. An ssh-agent is started and keys are added. For the entire session, the user types no more passwords.

raddump interprets captured RADIUS packets to print a timestamp, packet length, RADIUS packet type, source and destination hosts and ports, and included attribute names and values for each packet.

JRadius - A Radius Server Java Adapter and Java Client

GQ is an LDAP client based on GTK+/GTK2

The WiKID Strong Authentication System is a public-key based two-factor authentication system. It is a flexible, extensible, and secure alternative to tokens, certs and passwords. Application & API support exists for Java, ASP, PHP, Ruby, OpenVPN, TACACS+, etc. Read our eGuide on how to setup your network with two-factor authentication: http://www.wikidsystems.com/learn-more/two-factor-authentication-white-papers

A configurable system for synchronising multiple passwords of different types. Password quality can be imposed by using histories, cracklib based tests, and forcing certain passwords to be distinct. CGI and PAM modules exist for tight integration.

Yap2lc (Yet Another Passwd 2 LDIF Converter) is an LDAP migration tool, which extracts information from passwd, shadow/passwd, and master.passwd formatted files, filters out unwanted/misshapen accounts and writes an LDIF file for easy importing.

A tool to convert data from CSV form to LDIF form.

LDAPManager is an open source Cocoa application, written in Objective-C, to provide an LDAP browser/editor with a native Mac OS X interface. Should work fine on Tiger and Panther, and perhaps earlier.

The LDAP proxy is designed to be the part of the email encryption infrastructure which would simplify finding and using public encryption keys contained in X.509 public certificates.

Login.app is an X server management and authentication application. User authentication is performed with either a username/password or via SmartCard based authentication. At startup the app launches the X server and presents an authentication panel which also recongnizes several commands (reboot, halt, exit and console). SmartCard support relies on the OpenSSH authorized_keys file method for authentication and also requires OpenSC, pcsc-lite and OpenSSL.

Configure Unix users and groups in a MySQL database. It is system-wide like NIS or LDAP! It features open-ended database design and persistent connections. Works with NSS-compatible systems (Linux, Solaris, FreeBSD).

OPR (Oracle Password Repository) is a Unix based secure tool for storage & retrieval of Oracle database passwords. By replacing hardcoded passwords in scripts with a call to OPR, it helps keeping your Oracle enviroment secure and easier to maintain.

Yet Another Radius Daemon (i.e. YARD RADIUS) is a free RADIUS RFC-compliant daemon for accounting and authorization, which is derived from the original Livingston Enterprise Inc. RADIUS daemon release 2.1. It adds several useful features to the LE daemon

The AACLS acronym stands for "Advanced ACL Server". This is an OpenLDAP server backend, in other words, a LDAP content filtering gateway based on an ACL langage used to describe relations between entries. Patches is now released under OpenLDAP License

APOP + LDAP authentication patch for QMail (auth_pop) 1. POP & APOP authentication 2. Passwords in LDAP are stored encrypted