Open Source C Authentication Software

*NOTE* Migrated to http://github.com/cracklib/cracklib Next generation version of libCrack password checking library. As of Oct 2008 (reflected in 2.8.15 code release), licensed under LGPL.

Project has been moved to github: https://github.com/pam-pgsql/pam-pgsql

PAM module which permits authentication for arbitrary services via ssh-agent. Written with sudo in mind, but like any auth PAM module, can be used for for many purposes.

OpenPAM is an open source PAM library that focuses on simplicity, correctness, and portability.

Purpose of this project is to build portable, easy-to-use and standard compliant library suitable for developing free and commercial software that need support for a RADIUS protocol (RFCs 2138 and 2139).

This module provides single sign-on behavior. The user types a passphrase when logging in and is allowed in if it decrypts the user's SSH private key. An ssh-agent is started and keys are added. For the entire session, the user types no more passwords.

A virtual filesystem for FUSE that allows to navigate an LDAP tree.

Implementation of checkpassword-compatible PAM authentication program. Details on "checkpassword" interface are available at http://cr.yp.to/checkpwd.html

Configure Unix users and groups in a MySQL database. It is system-wide like NIS or LDAP! It features open-ended database design and persistent connections. Works with NSS-compatible systems (Linux, Solaris, FreeBSD).

GQ is an LDAP client based on GTK+/GTK2

The WiKID Strong Authentication System is a public-key based two-factor authentication system. It is a flexible, extensible, and secure alternative to tokens, certs and passwords. Application & API support exists for Java, ASP, PHP, Ruby, OpenVPN, TACACS+, etc. Read our eGuide on how to setup your network with two-factor authentication: http://www.wikidsystems.com/learn-more/two-factor-authentication-white-papers

raddump interprets captured RADIUS packets to print a timestamp, packet length, RADIUS packet type, source and destination hosts and ports, and included attribute names and values for each packet.

mysql auth_ldap is an authentication plugin for the MySQL server. It allows you to create SQL users that are going to be authenticated using a LDAP server. This allows to minimize administrative duties, since your users will be able to reuse their existing account to access the database. The plugin requires MySQL 5.5.7 and up. It is compiled as an add on and does not require you to alter MySQL source code, or recompile the entire server. The plugin add support for LDAP using the openLDAP library.

NIBS - Billing System for small and medium Internet Service Providers based on Cistron Radius with MySQL support.

DACS,a light-weight single sign-on and role-based security system for Apache or server-based software, provides comprehensive authentication capabilities, and powerful, transparent rule-based authorization checking for any web service or CGI program. The latest release is DACS 1.5.1 (26-Oct-2025) It is not available here! Get it at https://dacs.dss.ca/download.html

DS Password Tools are a pair of command line tools for changing passwords on Mac OS X and Mac OS X Server (versions 10.2.x) that make use of the Directory Services API. Unlike the included passwd program, these tools are compatible with Password Server.

This project will consist of a group of command line utilities to assist an LDAP administrator in maintaining LDAP databases.

Smartcard key storage daemon is an application for storing transparently keys for cryptographic applications on smartcards. (ie. GnuPG or OpenSSH)

Yap2lc (Yet Another Passwd 2 LDIF Converter) is an LDAP migration tool, which extracts information from passwd, shadow/passwd, and master.passwd formatted files, filters out unwanted/misshapen accounts and writes an LDIF file for easy importing.

A tool to convert data from CSV form to LDIF form.

Cookie based web authentication and single sign on system for largish intranets under a single domain where many, untrusted, people run their own web services. The server uses a private cookie scoped only for the client browser and the idcheck webserver which is always protected with SSL. In addition to the common practise of using SSL for everything (which idcheck supports). The idcheck system can also be used to provide authentication to websites where you merely want to hide content from various people. For example, an intranet whose contents are available to thousands of people. This is, in fact, its main advantage and feature. Please check the wiki pages for more info (link above). Please submit patches or problems via the patches section (link above). Please note that there are many idcheck RPMs on various web pages. Do not trust or use these versions. Always download them from sf!

LDAPManager is an open source Cocoa application, written in Objective-C, to provide an LDAP browser/editor with a native Mac OS X interface. Should work fine on Tiger and Panther, and perhaps earlier.

The AACLS acronym stands for "Advanced ACL Server". This is an OpenLDAP server backend, in other words, a LDAP content filtering gateway based on an ACL langage used to describe relations between entries. Patches is now released under OpenLDAP License

APOP + LDAP authentication patch for QMail (auth_pop) 1. POP & APOP authentication 2. Passwords in LDAP are stored encrypted

AccounteX is an IP accounting system based on the IP Stat program. It has many exciting features like fully customizable web traffic accounting and user access control by many different values. information service and web statistics and administration.