Open Source C Authentication Software

*NOTE* Migrated to http://github.com/cracklib/cracklib Next generation version of libCrack password checking library. As of Oct 2008 (reflected in 2.8.15 code release), licensed under LGPL.

OpenPAM is an open source PAM library that focuses on simplicity, correctness, and portability.

Purpose of this project is to build portable, easy-to-use and standard compliant library suitable for developing free and commercial software that need support for a RADIUS protocol (RFCs 2138 and 2139).

PAM module which permits authentication for arbitrary services via ssh-agent. Written with sudo in mind, but like any auth PAM module, can be used for for many purposes.

Project has been moved to github: https://github.com/pam-pgsql/pam-pgsql

Login.app is an X server management and authentication application. User authentication is performed with either a username/password or via SmartCard based authentication. At startup the app launches the X server and presents an authentication panel which also recongnizes several commands (reboot, halt, exit and console). SmartCard support relies on the OpenSSH authorized_keys file method for authentication and also requires OpenSC, pcsc-lite and OpenSSL.

raddump interprets captured RADIUS packets to print a timestamp, packet length, RADIUS packet type, source and destination hosts and ports, and included attribute names and values for each packet.

Implementation of checkpassword-compatible PAM authentication program. Details on "checkpassword" interface are available at http://cr.yp.to/checkpwd.html

This module provides single sign-on behavior. The user types a passphrase when logging in and is allowed in if it decrypts the user's SSH private key. An ssh-agent is started and keys are added. For the entire session, the user types no more passwords.

GQ is an LDAP client based on GTK+/GTK2

LDAPManager is an open source Cocoa application, written in Objective-C, to provide an LDAP browser/editor with a native Mac OS X interface. Should work fine on Tiger and Panther, and perhaps earlier.

The LDAP proxy is designed to be the part of the email encryption infrastructure which would simplify finding and using public encryption keys contained in X.509 public certificates.

Configure Unix users and groups in a MySQL database. It is system-wide like NIS or LDAP! It features open-ended database design and persistent connections. Works with NSS-compatible systems (Linux, Solaris, FreeBSD).

A configurable system for synchronising multiple passwords of different types. Password quality can be imposed by using histories, cracklib based tests, and forcing certain passwords to be distinct. CGI and PAM modules exist for tight integration.

DACS,a light-weight single sign-on and role-based security system for Apache or server-based software, provides comprehensive authentication capabilities, and powerful, transparent rule-based authorization checking for any web service or CGI program. The latest release is DACS 1.5.1 (26-Oct-2025) It is not available here! Get it at https://dacs.dss.ca/download.html

A virtual filesystem for FUSE that allows to navigate an LDAP tree.

A modular, flexible and extensible Identity and Access Management system for integrated login, access and profile management across disparate security domains. Supports Apache, PAM, Webcrossing, XMLRPC and SOAP from C, Perl, and Java with more to come.

A fork of nss_db, modified to work on Solaris as well as Linux. This provides an alternative location for storing configuration information used by the Name Service Switch libraries, and may be used to supplement user, group and other information in a Berkeley DB. The Berkeley DB NSS module provides an alternative means for storing configuration information traditionally kept in several plain-text files in /etc (e.g. /etc/passwd). The module uses the Berkeley DB Library to store this information in several database files in /var/db (e.g. /var/db/passwd.db). Using these databases can lead to a considerable speed-up if the files in /etc are large (e.g. on a system with a lot of accounts). The databases may also be used as a local cache for network accounts, or as a means to supplement or override UIDs, GIDs, home directories etc. provided by network accounts.

pGina is an open source replacement authentication system for the Windows OS that uses easy to write plugins to accommodate for authentication via limitless back ends. We have a new home: http://www.pgina.org or http://github.com/pgina/

pam_mount is a Pluggable Authentication Module that can mount volumes for a user session (login). Supports mounting local filesystems of any kind the normal mount utility supports, with extra code to better support CIFS, FUSE, various crypto, and more.

A plugin for pppd>=2.4.2 which authenticates users against a mysql database and maintains daily usage statistics for individual users.

The AACLS acronym stands for "Advanced ACL Server". This is an OpenLDAP server backend, in other words, a LDAP content filtering gateway based on an ACL langage used to describe relations between entries. Patches is now released under OpenLDAP License

APOP + LDAP authentication patch for QMail (auth_pop) 1. POP & APOP authentication 2. Passwords in LDAP are stored encrypted

AccounteX is an IP accounting system based on the IP Stat program. It has many exciting features like fully customizable web traffic accounting and user access control by many different values. information service and web statistics and administration.

Alfred, OpenSource Internet Software, is a collection of utilities that bring Quota support to SQUID. Alfred has been used in a large high school for several years now, and is working without a hitch.