Open Source C Authentication Software for Mac

The WiKID Strong Authentication System is a public-key based two-factor authentication system. It is a flexible, extensible, and secure alternative to tokens, certs and passwords. Application & API support exists for Java, ASP, PHP, Ruby, OpenVPN, TACACS+, etc. Read our eGuide on how to setup your network with two-factor authentication: http://www.wikidsystems.com/learn-more/two-factor-authentication-white-papers

raddump interprets captured RADIUS packets to print a timestamp, packet length, RADIUS packet type, source and destination hosts and ports, and included attribute names and values for each packet.

CPU is meant to be a swiss army knife for administrators who are currently using or wanting to use an LDAP backend for user authentication. This project allows for easy user administration of LDAP users and allows for user and group mods, deletes and add

JRadius - A Radius Server Java Adapter and Java Client

Toolset for pam based user management. Including Java client, database scheme (postgresql), pam and nss modules for postgresql (provided by the sysauth-pgsql project ) and interfaces to the system (e.g. rules generation for a traffic shaper).

BRUTALIS - BRUTeforce ALternative Is Stupid. Brutalis generate brute force passwords. It can be integrated in any command line for an attack and support resume, character panel, minimum and maximum length, special separating characters and more.

CAILogin (Counter AI Login) is an image-based user verification program for web-page logins. It's written in plain C with no special dependencies, and hence it's very suitable for embedded systems which lack "big" interpreted languages, such as PHP.

Database PAM is based on the pam_mysql project with several additional features. Features include arbitary query strings into which the username and passwords are substitued and encrypted passwords so that plain text isn't sent to the database. Currently

Secure local and Network based authentication using pluggable backends which provide authentication and user/groupnames, uidmappings, tokensupport and the lot.

ICRadius is an Open Source RADIUS package utilizing MySQL tables for all dictionaries, user files, accounting data, etc. This allows fast, efficient manipulation and analysis of available data. ICRadius is a mature, production quality RADIUS package.

LDAP bind SLAPI plugin for CAS authentication. Plugin has been tested and is working in a real system since march 2007. It is developed for Fedora DS, and should also work with no changes or minimal ones in RedHat DS and SUN. Openldap port is in progress

Likewise Open is an open source, community project sponsored by Likewise Software that integrates Linux, Unix and Mac platforms with Microsoft Active Directory. To download Likewise Open for free, go to http://www.Likewise.com/

A modular, flexible and extensible Identity and Access Management system for integrated login, access and profile management across disparate security domains. Supports Apache, PAM, Webcrossing, XMLRPC and SOAP from C, Perl, and Java with more to come.

Perl tools for keeping an LDAP directory service in sync with NIS or any other text based naming service.

pam_mobtok is a PAM module together with a J2ME midlet to realize authentification. A password is entered into the J2ME capable mobile device which then generates a token that is valid for a short time.

A configurable system for synchronising multiple passwords of different types. Password quality can be imposed by using histories, cracklib based tests, and forcing certain passwords to be distinct. CGI and PAM modules exist for tight integration.

This project has been started to publish the work done on a new backend for the DGI (France). This backend has been designed to get strong performance enhancements. It is a fork from the META backend.

SMSec is a free , open source, GPLed implementation of two-factor authentication via SMS (Short Message Service). It uses SMSD to "talk" to GSM modems, provides a flexible XMLRPC web-service for web-developers integrate SMSec into their web-apps.

Code for reference implementations of identity brokers and simple single sign-on (SSO) mechanisms that utilize XDI and link contracts to manage the dataweb.

A portal project providing useful information for those who have the hard job administering a school network. Hints, tips, configurations and special software for servers that can be used in educational environments can be found here.

TACACS+ protocol client library and PAM module in C. This PAM module support authentication, authorization (account management) and accounting (session management)performed using TACACS+ protocol designed by Cisco.

Windows Primary domain controller

Cookie based web authentication and single sign on system for largish intranets under a single domain where many, untrusted, people run their own web services. The server uses a private cookie scoped only for the client browser and the idcheck webserver which is always protected with SSL. In addition to the common practise of using SSL for everything (which idcheck supports). The idcheck system can also be used to provide authentication to websites where you merely want to hide content from various people. For example, an intranet whose contents are available to thousands of people. This is, in fact, its main advantage and feature. Please check the wiki pages for more info (link above). Please submit patches or problems via the patches section (link above). Please note that there are many idcheck RPMs on various web pages. Do not trust or use these versions. Always download them from sf!

mod_psldap is an Apache module for leveraging LDAP services built on the OpenLDAP library and the Apache APIs, to include web based A&A, web based updates to the LDAP store, server-side XSLT processing, and session management across servers.

An extension for VirtualBox server which reads LDAP entries to authorize users to connect to virtual machine RDP ports.