Open Source C Authentication Software

*NOTE* Migrated to http://github.com/cracklib/cracklib Next generation version of libCrack password checking library. As of Oct 2008 (reflected in 2.8.15 code release), licensed under LGPL.

Project has been moved to github: https://github.com/pam-pgsql/pam-pgsql

PAM module which permits authentication for arbitrary services via ssh-agent. Written with sudo in mind, but like any auth PAM module, can be used for for many purposes.

OpenPAM is an open source PAM library that focuses on simplicity, correctness, and portability.

Implementation of checkpassword-compatible PAM authentication program. Details on "checkpassword" interface are available at http://cr.yp.to/checkpwd.html

A virtual filesystem for FUSE that allows to navigate an LDAP tree.

Purpose of this project is to build portable, easy-to-use and standard compliant library suitable for developing free and commercial software that need support for a RADIUS protocol (RFCs 2138 and 2139).

This module provides single sign-on behavior. The user types a passphrase when logging in and is allowed in if it decrypts the user's SSH private key. An ssh-agent is started and keys are added. For the entire session, the user types no more passwords.

GQ is an LDAP client based on GTK+/GTK2

An open source project originally designed to provide the University of Michigan with a secure single sign-on web authentication system. Cosign is part of the National Science Foundation Middleware Initiative (NMI) EDIT software release.

CPU is meant to be a swiss army knife for administrators who are currently using or wanting to use an LDAP backend for user authentication. This project allows for easy user administration of LDAP users and allows for user and group mods, deletes and add

Yap2lc (Yet Another Passwd 2 LDIF Converter) is an LDAP migration tool, which extracts information from passwd, shadow/passwd, and master.passwd formatted files, filters out unwanted/misshapen accounts and writes an LDIF file for easy importing.

A tool to convert data from CSV form to LDIF form.

raddump interprets captured RADIUS packets to print a timestamp, packet length, RADIUS packet type, source and destination hosts and ports, and included attribute names and values for each packet.

Configure Unix users and groups in a MySQL database. It is system-wide like NIS or LDAP! It features open-ended database design and persistent connections. Works with NSS-compatible systems (Linux, Solaris, FreeBSD).

A configurable system for synchronising multiple passwords of different types. Password quality can be imposed by using histories, cracklib based tests, and forcing certain passwords to be distinct. CGI and PAM modules exist for tight integration.

A fork of nss_db, modified to work on Solaris as well as Linux. This provides an alternative location for storing configuration information used by the Name Service Switch libraries, and may be used to supplement user, group and other information in a Berkeley DB. The Berkeley DB NSS module provides an alternative means for storing configuration information traditionally kept in several plain-text files in /etc (e.g. /etc/passwd). The module uses the Berkeley DB Library to store this information in several database files in /var/db (e.g. /var/db/passwd.db). Using these databases can lead to a considerable speed-up if the files in /etc are large (e.g. on a system with a lot of accounts). The databases may also be used as a local cache for network accounts, or as a means to supplement or override UIDs, GIDs, home directories etc. provided by network accounts.

The AACLS acronym stands for "Advanced ACL Server". This is an OpenLDAP server backend, in other words, a LDAP content filtering gateway based on an ACL langage used to describe relations between entries. Patches is now released under OpenLDAP License

APOP + LDAP authentication patch for QMail (auth_pop) 1. POP & APOP authentication 2. Passwords in LDAP are stored encrypted

AccounteX is an IP accounting system based on the IP Stat program. It has many exciting features like fully customizable web traffic accounting and user access control by many different values. information service and web statistics and administration.

Alfred, OpenSource Internet Software, is a collection of utilities that bring Quota support to SQUID. Alfred has been used in a large high school for several years now, and is working without a hitch.

mod_auth_ibmdb2 is an Apache module written in C. It provides authentication and group authorization using data stored in an IBM DB2 database.

Radius client implementation for Apache to allow basic authentication and authorization through radius.

mod_authn_sasl is a SASL authentication backend provider module for the Apache 2.2 webserver. It provides password checking functionality for HTTP Basic Authentication. Username and password are checked against the SASL password checking backends.

The project is a preconfigured VoIP PBX VM Image based on Asterisk. But provides more advance features, such as LDAP integration, VQ monitoring via RTCP XR reports, LDAP user login, integrated billing system and telephone directory PDF generator.