Open Source C Authentication Software

*NOTE* Migrated to http://github.com/cracklib/cracklib Next generation version of libCrack password checking library. As of Oct 2008 (reflected in 2.8.15 code release), licensed under LGPL.

PAM module which permits authentication for arbitrary services via ssh-agent. Written with sudo in mind, but like any auth PAM module, can be used for for many purposes.

This module provides single sign-on behavior. The user types a passphrase when logging in and is allowed in if it decrypts the user's SSH private key. An ssh-agent is started and keys are added. For the entire session, the user types no more passwords.

Project has been moved to github: https://github.com/pam-pgsql/pam-pgsql

OpenPAM is an open source PAM library that focuses on simplicity, correctness, and portability.

A virtual filesystem for FUSE that allows to navigate an LDAP tree.

The internet storage name service (iSNS) is used to register iSCSI and iFCP storage devices in the network. The iSNS allows dynamic discovery of available storage targets by storage initiators. The iSNS specification is located at http://www.ietf.org/

Purpose of this project is to build portable, easy-to-use and standard compliant library suitable for developing free and commercial software that need support for a RADIUS protocol (RFCs 2138 and 2139).

Implementation of checkpassword-compatible PAM authentication program. Details on "checkpassword" interface are available at http://cr.yp.to/checkpwd.html

The WiKID Strong Authentication System is a public-key based two-factor authentication system. It is a flexible, extensible, and secure alternative to tokens, certs and passwords. Application & API support exists for Java, ASP, PHP, Ruby, OpenVPN, TACACS+, etc. Read our eGuide on how to setup your network with two-factor authentication: http://www.wikidsystems.com/learn-more/two-factor-authentication-white-papers

raddump interprets captured RADIUS packets to print a timestamp, packet length, RADIUS packet type, source and destination hosts and ports, and included attribute names and values for each packet.

CAILogin (Counter AI Login) is an image-based user verification program for web-page logins. It's written in plain C with no special dependencies, and hence it's very suitable for embedded systems which lack "big" interpreted languages, such as PHP.

pGina is an open source replacement authentication system for the Windows OS that uses easy to write plugins to accommodate for authentication via limitless back ends. We have a new home: http://www.pgina.org or http://github.com/pgina/

LDAPManager is an open source Cocoa application, written in Objective-C, to provide an LDAP browser/editor with a native Mac OS X interface. Should work fine on Tiger and Panther, and perhaps earlier.

The project is a preconfigured VoIP PBX VM Image based on Asterisk. But provides more advance features, such as LDAP integration, VQ monitoring via RTCP XR reports, LDAP user login, integrated billing system and telephone directory PDF generator.

BRUTALIS - BRUTeforce ALternative Is Stupid. Brutalis generate brute force passwords. It can be integrated in any command line for an attack and support resume, character panel, minimum and maximum length, special separating characters and more.

CryptID an open framework that bridges Single SignOn (SSO) authentication with any standards compliant LDAP based authentication service. If you want to securely authenticate legacy services, such as smtp, pop3 or http against your Active Directory cluster or LDAP server, CryptID can provide secure access to SSO authentication without the messy HTTP bloat common to conventional SAML products. CryptID is designed to support synchronisation from multiple servers, and multiple organisations.

Database PAM is based on the pam_mysql project with several additional features. Features include arbitary query strings into which the username and passwords are substitued and encrypted passwords so that plain text isn't sent to the database. Currently

JRadius - A Radius Server Java Adapter and Java Client

Mesh is a secure, lightweight grid middleware that is based on the addition of a single sign-on capability to the built-in public key authentication mechanism of SSH using system call interposition.

A configurable system for synchronising multiple passwords of different types. Password quality can be imposed by using histories, cracklib based tests, and forcing certain passwords to be distinct. CGI and PAM modules exist for tight integration.

A portal project providing useful information for those who have the hard job administering a school network. Hints, tips, configurations and special software for servers that can be used in educational environments can be found here.

A tool to convert data from CSV form to LDIF form.

Cookie based web authentication and single sign on system for largish intranets under a single domain where many, untrusted, people run their own web services. The server uses a private cookie scoped only for the client browser and the idcheck webserver which is always protected with SSL. In addition to the common practise of using SSL for everything (which idcheck supports). The idcheck system can also be used to provide authentication to websites where you merely want to hide content from various people. For example, an intranet whose contents are available to thousands of people. This is, in fact, its main advantage and feature. Please check the wiki pages for more info (link above). Please submit patches or problems via the patches section (link above). Please note that there are many idcheck RPMs on various web pages. Do not trust or use these versions. Always download them from sf!

The AACLS acronym stands for "Advanced ACL Server". This is an OpenLDAP server backend, in other words, a LDAP content filtering gateway based on an ACL langage used to describe relations between entries. Patches is now released under OpenLDAP License