Open Source C Authentication Software

*NOTE* Migrated to http://github.com/cracklib/cracklib Next generation version of libCrack password checking library. As of Oct 2008 (reflected in 2.8.15 code release), licensed under LGPL.

OpenPAM is an open source PAM library that focuses on simplicity, correctness, and portability.

Project has been moved to github: https://github.com/pam-pgsql/pam-pgsql

This module provides single sign-on behavior. The user types a passphrase when logging in and is allowed in if it decrypts the user's SSH private key. An ssh-agent is started and keys are added. For the entire session, the user types no more passwords.

PAM module which permits authentication for arbitrary services via ssh-agent. Written with sudo in mind, but like any auth PAM module, can be used for for many purposes.

Event Manager for OpenLDAP is an internal LDAP event handler that can execute operations to automate tasks. It can be used as base for remote automation, Identity Management, and so on.

Yet Another Radius Daemon (i.e. YARD RADIUS) is a free RADIUS RFC-compliant daemon for accounting and authorization, which is derived from the original Livingston Enterprise Inc. RADIUS daemon release 2.1. It adds several useful features to the LE daemon

Purpose of this project is to build portable, easy-to-use and standard compliant library suitable for developing free and commercial software that need support for a RADIUS protocol (RFCs 2138 and 2139).

pam_mount is a Pluggable Authentication Module that can mount volumes for a user session (login). Supports mounting local filesystems of any kind the normal mount utility supports, with extra code to better support CIFS, FUSE, various crypto, and more.

mod_authn_sasl is a SASL authentication backend provider module for the Apache 2.2 webserver. It provides password checking functionality for HTTP Basic Authentication. Username and password are checked against the SASL password checking backends.

Yap2lc (Yet Another Passwd 2 LDIF Converter) is an LDAP migration tool, which extracts information from passwd, shadow/passwd, and master.passwd formatted files, filters out unwanted/misshapen accounts and writes an LDIF file for easy importing.

SQL password backend modules for Samba

Implementation of checkpassword-compatible PAM authentication program. Details on "checkpassword" interface are available at http://cr.yp.to/checkpwd.html

It provides a PAM and NSS module for PostgreSQL to completely replace the user/group/shadow flatfile. Maintenance tools are developed by the bofhms project, code has been moved to http://www.pgfoundry.org/projects/sysauth/

An open source project originally designed to provide the University of Michigan with a secure single sign-on web authentication system. Cosign is part of the National Science Foundation Middleware Initiative (NMI) EDIT software release.

A portal project providing useful information for those who have the hard job administering a school network. Hints, tips, configurations and special software for servers that can be used in educational environments can be found here.

GQ is an LDAP client based on GTK+/GTK2

The WiKID Strong Authentication System is a public-key based two-factor authentication system. It is a flexible, extensible, and secure alternative to tokens, certs and passwords. Application & API support exists for Java, ASP, PHP, Ruby, OpenVPN, TACACS+, etc. Read our eGuide on how to setup your network with two-factor authentication: http://www.wikidsystems.com/learn-more/two-factor-authentication-white-papers

CAILogin (Counter AI Login) is an image-based user verification program for web-page logins. It's written in plain C with no special dependencies, and hence it's very suitable for embedded systems which lack "big" interpreted languages, such as PHP.

Circumference is a server-client-style implementation to supplement the WebAuth Diameter subprotocol, complete with an extensible Diameter server and base library. Diameter is a peer-to-peer authentication protocol (RFC 6733).

Login.app is an X server management and authentication application. User authentication is performed with either a username/password or via SmartCard based authentication. At startup the app launches the X server and presents an authentication panel which also recongnizes several commands (reboot, halt, exit and console). SmartCard support relies on the OpenSSH authorized_keys file method for authentication and also requires OpenSC, pcsc-lite and OpenSSL.

/usr/bin/passwd offers a "safe way" for root to edit /etc/passwd (or shadow). If setuid it allows regular users to change passwd without asking root to do changes for them. (note: does have learning curve on args to choose) gnupasswd - gnu change user password gnugpasswd - gnu change group password gnupasswd(1) has a goal to work with older login.c/linux and some newer too, also "getpwent" (any glibc). or help convert. gnupassd does pass only: leaves all else alone (compat). small, simpler for single admin / small linux bases. For example: it can make plain /etc/passwd plain text password file (still) or use shadow - (login.c may do both). A goal is to be old linux and no "depends problems" (ie, some required pam selinux audit kerb (+nis remove hacks) "to work as intended". These can contact remote computers during login if misconfigured and are complicated to know if secure. gnupasswd has none of these (gnu has NIS, off by default)

The project is no longer being maintained here. New releases are available from http://forge.novell.com

Alfred, OpenSource Internet Software, is a collection of utilities that bring Quota support to SQUID. Alfred has been used in a large high school for several years now, and is working without a hitch.

CPU is meant to be a swiss army knife for administrators who are currently using or wanting to use an LDAP backend for user authentication. This project allows for easy user administration of LDAP users and allows for user and group mods, deletes and add