Open Source C Authentication Software

*NOTE* Migrated to http://github.com/cracklib/cracklib Next generation version of libCrack password checking library. As of Oct 2008 (reflected in 2.8.15 code release), licensed under LGPL.

PAM module which permits authentication for arbitrary services via ssh-agent. Written with sudo in mind, but like any auth PAM module, can be used for for many purposes.

OpenPAM is an open source PAM library that focuses on simplicity, correctness, and portability.

The WiKID Strong Authentication System is a public-key based two-factor authentication system. It is a flexible, extensible, and secure alternative to tokens, certs and passwords. Application & API support exists for Java, ASP, PHP, Ruby, OpenVPN, TACACS+, etc. Read our eGuide on how to setup your network with two-factor authentication: http://www.wikidsystems.com/learn-more/two-factor-authentication-white-papers

InterStructures a Linux System Administration platform built using MMC familiar to systems administrators.It is a complete server administration platform integrating Linux and Windows servers and providing intuitive and easy point and click administratio

Purpose of this project is to build portable, easy-to-use and standard compliant library suitable for developing free and commercial software that need support for a RADIUS protocol (RFCs 2138 and 2139).

A tool to convert data from CSV form to LDIF form.

pGina is an open source replacement authentication system for the Windows OS that uses easy to write plugins to accommodate for authentication via limitless back ends. We have a new home: http://www.pgina.org or http://github.com/pgina/

This module provides single sign-on behavior. The user types a passphrase when logging in and is allowed in if it decrypts the user's SSH private key. An ssh-agent is started and keys are added. For the entire session, the user types no more passwords.

Project has been moved to github: https://github.com/pam-pgsql/pam-pgsql

The project is a preconfigured VoIP PBX VM Image based on Asterisk. But provides more advance features, such as LDAP integration, VQ monitoring via RTCP XR reports, LDAP user login, integrated billing system and telephone directory PDF generator.

This is a client/server project. Server part is store information about logins in SQL database. Client part it\'s NSS-module for glibc. Client integrates into any program, which use standard getpw.../getgr...

PLEASE GO TO https://github.com/deksai/pam_abl A PAM module that provides auto blacklisting of hosts and users responsible for repeated failed authentication attempts. Generally configured so that blacklisted users still see normal login prompts but are guaranteed to fail to authenticate.

pam_mount is a Pluggable Authentication Module that can mount volumes for a user session (login). Supports mounting local filesystems of any kind the normal mount utility supports, with extra code to better support CIFS, FUSE, various crypto, and more.

An open source project originally designed to provide the University of Michigan with a secure single sign-on web authentication system. Cosign is part of the National Science Foundation Middleware Initiative (NMI) EDIT software release.

This project will consist of a group of command line utilities to assist an LDAP administrator in maintaining LDAP databases.

ICRadius is an Open Source RADIUS package utilizing MySQL tables for all dictionaries, user files, accounting data, etc. This allows fast, efficient manipulation and analysis of available data. ICRadius is a mature, production quality RADIUS package.

Ruby/LDAP is an extension library for Ruby. It provides the interface to some LDAP libraries (e.g. OpenLDAP, Netscape SDK and Active Directory). The common API for application development is described in RFC1823 and is supported by Ruby/LDAP.

Implementation of checkpassword-compatible PAM authentication program. Details on "checkpassword" interface are available at http://cr.yp.to/checkpwd.html

Cookie based web authentication and single sign on system for largish intranets under a single domain where many, untrusted, people run their own web services. The server uses a private cookie scoped only for the client browser and the idcheck webserver which is always protected with SSL. In addition to the common practise of using SSL for everything (which idcheck supports). The idcheck system can also be used to provide authentication to websites where you merely want to hide content from various people. For example, an intranet whose contents are available to thousands of people. This is, in fact, its main advantage and feature. Please check the wiki pages for more info (link above). Please submit patches or problems via the patches section (link above). Please note that there are many idcheck RPMs on various web pages. Do not trust or use these versions. Always download them from sf!

The AACLS acronym stands for "Advanced ACL Server". This is an OpenLDAP server backend, in other words, a LDAP content filtering gateway based on an ACL langage used to describe relations between entries. Patches is now released under OpenLDAP License

Toolset for pam based user management. Including Java client, database scheme (postgresql), pam and nss modules for postgresql (provided by the sysauth-pgsql project ) and interfaces to the system (e.g. rules generation for a traffic shaper).

DACS,a light-weight single sign-on and role-based security system for Apache or server-based software, provides comprehensive authentication capabilities, and powerful, transparent rule-based authorization checking for any web service or CGI program. The latest release is DACS 1.5.1 (26-Oct-2025) It is not available here! Get it at https://dacs.dss.ca/download.html

Database PAM is based on the pam_mysql project with several additional features. Features include arbitary query strings into which the username and passwords are substitued and encrypted passwords so that plain text isn't sent to the database. Currently

Secure local and Network based authentication using pluggable backends which provide authentication and user/groupnames, uidmappings, tokensupport and the lot.