Open Source C Authentication Software

*NOTE* Migrated to http://github.com/cracklib/cracklib Next generation version of libCrack password checking library. As of Oct 2008 (reflected in 2.8.15 code release), licensed under LGPL.

OpenPAM is an open source PAM library that focuses on simplicity, correctness, and portability.

PAM module which permits authentication for arbitrary services via ssh-agent. Written with sudo in mind, but like any auth PAM module, can be used for for many purposes.

Implementation of checkpassword-compatible PAM authentication program. Details on "checkpassword" interface are available at http://cr.yp.to/checkpwd.html

GQ is an LDAP client based on GTK+/GTK2

The WiKID Strong Authentication System is a public-key based two-factor authentication system. It is a flexible, extensible, and secure alternative to tokens, certs and passwords. Application & API support exists for Java, ASP, PHP, Ruby, OpenVPN, TACACS+, etc. Read our eGuide on how to setup your network with two-factor authentication: http://www.wikidsystems.com/learn-more/two-factor-authentication-white-papers

JRadius - A Radius Server Java Adapter and Java Client

This module provides single sign-on behavior. The user types a passphrase when logging in and is allowed in if it decrypts the user's SSH private key. An ssh-agent is started and keys are added. For the entire session, the user types no more passwords.

Project has been moved to github: https://github.com/pam-pgsql/pam-pgsql

An open source project originally designed to provide the University of Michigan with a secure single sign-on web authentication system. Cosign is part of the National Science Foundation Middleware Initiative (NMI) EDIT software release.

Mesh is a secure, lightweight grid middleware that is based on the addition of a single sign-on capability to the built-in public key authentication mechanism of SSH using system call interposition.

It provides a PAM and NSS module for PostgreSQL to completely replace the user/group/shadow flatfile. Maintenance tools are developed by the bofhms project, code has been moved to http://www.pgfoundry.org/projects/sysauth/

A modular, flexible and extensible Identity and Access Management system for integrated login, access and profile management across disparate security domains. Supports Apache, PAM, Webcrossing, XMLRPC and SOAP from C, Perl, and Java with more to come.

Purpose of this project is to build portable, easy-to-use and standard compliant library suitable for developing free and commercial software that need support for a RADIUS protocol (RFCs 2138 and 2139).

pam_mount is a Pluggable Authentication Module that can mount volumes for a user session (login). Supports mounting local filesystems of any kind the normal mount utility supports, with extra code to better support CIFS, FUSE, various crypto, and more.

pppd_ldap is a plugin for pppd >= 2.4.2 which forms an "LDAP-enabled" version of pppd. Plugin authorizes PAP users and can set IP address and session/idle timout according to data retrieved from LDAP server.

Likewise Open is an open source, community project sponsored by Likewise Software that integrates Linux, Unix and Mac platforms with Microsoft Active Directory. To download Likewise Open for free, go to http://www.Likewise.com/

A tool to convert data from CSV form to LDIF form.

Reference implementation of Directory-Based Information Services, described in IETF Internet Drafts, intended to replace NIS and RFC2307.

Cookie based web authentication and single sign on system for largish intranets under a single domain where many, untrusted, people run their own web services. The server uses a private cookie scoped only for the client browser and the idcheck webserver which is always protected with SSL. In addition to the common practise of using SSL for everything (which idcheck supports). The idcheck system can also be used to provide authentication to websites where you merely want to hide content from various people. For example, an intranet whose contents are available to thousands of people. This is, in fact, its main advantage and feature. Please check the wiki pages for more info (link above). Please submit patches or problems via the patches section (link above). Please note that there are many idcheck RPMs on various web pages. Do not trust or use these versions. Always download them from sf!

DACS,a light-weight single sign-on and role-based security system for Apache or server-based software, provides comprehensive authentication capabilities, and powerful, transparent rule-based authorization checking for any web service or CGI program. The latest release is DACS 1.5.2 (28-Aug-2026) It is not available here! Get it at https://dacs.dss.ca/download.html

Login.app is an X server management and authentication application. User authentication is performed with either a username/password or via SmartCard based authentication. At startup the app launches the X server and presents an authentication panel which also recongnizes several commands (reboot, halt, exit and console). SmartCard support relies on the OpenSSH authorized_keys file method for authentication and also requires OpenSC, pcsc-lite and OpenSSL.

A configurable system for synchronising multiple passwords of different types. Password quality can be imposed by using histories, cracklib based tests, and forcing certain passwords to be distinct. CGI and PAM modules exist for tight integration.

Yap2lc (Yet Another Passwd 2 LDIF Converter) is an LDAP migration tool, which extracts information from passwd, shadow/passwd, and master.passwd formatted files, filters out unwanted/misshapen accounts and writes an LDIF file for easy importing.

A fork of nss_db, modified to work on Solaris as well as Linux. This provides an alternative location for storing configuration information used by the Name Service Switch libraries, and may be used to supplement user, group and other information in a Berkeley DB. The Berkeley DB NSS module provides an alternative means for storing configuration information traditionally kept in several plain-text files in /etc (e.g. /etc/passwd). The module uses the Berkeley DB Library to store this information in several database files in /var/db (e.g. /var/db/passwd.db). Using these databases can lead to a considerable speed-up if the files in /etc are large (e.g. on a system with a lot of accounts). The databases may also be used as a local cache for network accounts, or as a means to supplement or override UIDs, GIDs, home directories etc. provided by network accounts.