Open Source Python Authentication Software

*NOTE* Migrated to http://github.com/cracklib/cracklib Next generation version of libCrack password checking library. As of Oct 2008 (reflected in 2.8.15 code release), licensed under LGPL.

Fail2Ban scans log files and bans IPs that show the malicious signs -- too many password failures, seeking for exploits, etc. Generally Fail2Ban is then used to update firewall rules to reject the IP addresses for a specified amount of time, although any arbitrary other action (e.g. sending an email) could also be configured. Out of the box Fail2Ban comes with filters for various services (apache, courier, ssh, etc). Fail2Ban is able to reduce the rate of incorrect authentications attempts however it cannot eliminate the risk that weak authentication presents. Configure services to use only two factor or public/private authentication mechanisms if you really want to protect services.

Sentry is a cross-platform, self-hosted error monitoring solution that helps software teams discover, monitor and fix errors in real-time. The most users and logs will have to provide are the clues, and Sentry provides the answers. Sentry offers enhanced application performance monitoring through information-laden stack traces. It lets you build better software faster and more efficiently by showing you all issues in one place and providing the trail of events that lead to errors. It also provides real-time monitoring and data visualization through dashboards. Sentry’s server is in Python, but its API enables for sending events from any language, in any application. More than fifty-thousand companies already ship better software faster thanks to Sentry; let yours be one of them!

truffleHog searches through git repositories for high entropy strings and secrets, digging deep into commit history. TruffleHog runs behind the scenes to scan your environment for secrets like private keys and credentials, so you can protect your data before a breach occurs. Secrets can be found anywhere, so TruffleHog scans more than just code repositories, including SaaS and internally hosted software. With support for custom integrations and new integrations added all the time, you can secure your secrets across your entire environment. TruffleHog is developed by a team entirely comprised of career security experts. Security is our passion and primary concern, and all features are developed with best practices in mind. TruffleHog enables you to track and manage secrets within our intuitive management interface, including links to exactly where secrets have been found. TruffleHog runs quietly in the background, continuously scanning your environment for secrets.

Howdy provides Windows Hello™ style authentication for Linux. Use your built-in IR emitters and camera in combination with facial recognition to prove who you are. Using the central authentication system (PAM), works everywhere you would otherwise need your password: Login, lock screen, sudo, su, etc.

Opens up IIS Proxy Servers using NTLM to non-Microsoft browsers, etc

An open source implementation of the FIDO2 protocol to support passwordless strong authentication using public-key cryptography. Supports registration, authentication (all platforms), and transaction authorization (for native Android apps).

PyADtools will allow Python to easily search, create and manipulate Active Directory objects in a Windows environment. Currently, it is merely a front-end to ADSI. The project will ultimately provide flexible, cross-platform Active Directory tools.

Luma is a graphical utility for accessing and managing data stored on LDAP servers. It is written in Python, using PyQt and python-ldap. Plugin-support is included and useful widgets with LDAP-functionality for easy creation of plugins are delivered. Following plugins are available: - Browser - Search - Templates

pyadselfservice is a software created using Python 3.5 and Django 1.10. This project aims to provide web based password change interface to the end users, for their Active Directory account. While changing the password, users won't not need to enter their current password. Which means users can change their password even if they have forgotten their current password. Moreover, while changing the password, this software will automatically unlock the user account if it is locked. The authenticity of the user is verified against 2 factor authentication. The first factor is validation of 3 different AD attributes. User will need to provide 3 different information which only he will know such as Home Telephone, Pin Code or any new AD attribute say PIN, Date of Birth, Date of Joining etc. The second factor is One Time Password (OTP). After successful validation of First Factor, a OTP is sent to the Email address of the user, may it be official or personal.

Moved to https://codeberg.org/andybalaam/myaddressbook

SSHCE brings list of hosts from LDAP server (based on given ldap filter) and sends command to selected hosts through ssh protocol.

ABCD is an address book server/client system. It is intended to be user friendly, cross platform, and awesome.

This is a scripting environment based on shellscripts and python modules that gives one the ability to manage users, groups and aliases in an ldap directory. It also provides configuration examples of how to use ldap for authenticating users with Linux.

A Jupyter server extension to proxy requests with AWS SigV4 authentication. This server extension enables the usage of the AWS JavaScript/TypeScript SDK to write Jupyter frontend extensions without having to export AWS credentials to the browser. A single /awsproxy endpoint is added on the Jupyter server which receives incoming requests from the browser, uses the credentials on the server to add SigV4 authentication to the request, and then proxies the request to the actual AWS service endpoint. All requests are proxied back-and-forth as-is, e.g., a 4xx status code from the AWS service will be relayed back as-is to the browser. Using this requries no additional dependencies in the client-side code. Just use the regular AWS JavaScript/TypeScript SDK methods and add any dummy credentials and change the endpoint to the /awsproxy endpoint.

BLUSA is a set of shell scripts (mainly for Bash) intended to manage users accounts in bulk. It is mainly based on createusers, from Linux For School Project (www.lfsp.org), but intended to be more modular, flexible and secure.

Buckeye is an apache/postgres/python based account management system for service and subscription providers. Service provisioning, accounting, billing and reporting functions are included.

CGIgen is a collection of classes that are useful in data-encapsulation esp. for CGI-scripts. It also includes other classes that may be helpful in writing CGI-scripts.

DataSync Suite is an open source platform for integrating tools like Zimbra, SugarCRM, and Drupal. The tool is focused on a single sign-on, application data integration, and fast, flexible deployment.

A graphical user, group, and computer account manager for LDAP servers. Doesn't try to be the end-all LDAP tool, focuses on making user management quick and easy. (For linux/gnome, windows, MacOS coming RSN)

GroupsDirectory is a simple module for Python to handle groups and items in a hierarchy. It was developed to provide a flexible user and group management to a web-application. It handles advanced memberships structures which can be used for authorization.

py_xdb_auth is a small but robust jabber-component based on twisted to authenticate jabber users against ldap. It is written for jabberd 1.4 and based on twisted and python-ldap.

The Kantan LDAP Browser is a web-based tool that allows you to view, browse, and search through any LDAP compliant server. It is simple to configure, and easy on the eyes.

Key Manager is designed to allow distribution and management of SSH keys in a way that scales beyond manually copying public keys to remote hosts. This approaches Single-Sign-On functionality, if limited to ssh access from a single host.

Korreio is GUI to mail systems management based on LDAP, CYRUS and POSTFIX. Its has some integrated modules: a LDAP manager, Cyrus-IMAP Mailbox (cyradm replacement), Cyrus-IMAP Partition manager (report-like), Sieve manager, Postfix Queue manager.