Open Source C Authentication Software

*NOTE* Migrated to http://github.com/cracklib/cracklib Next generation version of libCrack password checking library. As of Oct 2008 (reflected in 2.8.15 code release), licensed under LGPL.

OpenPAM is an open source PAM library that focuses on simplicity, correctness, and portability.

PAM module which permits authentication for arbitrary services via ssh-agent. Written with sudo in mind, but like any auth PAM module, can be used for for many purposes.

Project has been moved to github: https://github.com/pam-pgsql/pam-pgsql

The WiKID Strong Authentication System is a public-key based two-factor authentication system. It is a flexible, extensible, and secure alternative to tokens, certs and passwords. Application & API support exists for Java, ASP, PHP, Ruby, OpenVPN, TACACS+, etc. Read our eGuide on how to setup your network with two-factor authentication: http://www.wikidsystems.com/learn-more/two-factor-authentication-white-papers

Purpose of this project is to build portable, easy-to-use and standard compliant library suitable for developing free and commercial software that need support for a RADIUS protocol (RFCs 2138 and 2139).

This module provides single sign-on behavior. The user types a passphrase when logging in and is allowed in if it decrypts the user's SSH private key. An ssh-agent is started and keys are added. For the entire session, the user types no more passwords.

Implementation of checkpassword-compatible PAM authentication program. Details on "checkpassword" interface are available at http://cr.yp.to/checkpwd.html

pGina is an open source replacement authentication system for the Windows OS that uses easy to write plugins to accommodate for authentication via limitless back ends. We have a new home: http://www.pgina.org or http://github.com/pgina/

ICRadius is an Open Source RADIUS package utilizing MySQL tables for all dictionaries, user files, accounting data, etc. This allows fast, efficient manipulation and analysis of available data. ICRadius is a mature, production quality RADIUS package.

A virtual filesystem for FUSE that allows to navigate an LDAP tree.

Configure Unix users and groups in a MySQL database. It is system-wide like NIS or LDAP! It features open-ended database design and persistent connections. Works with NSS-compatible systems (Linux, Solaris, FreeBSD).

raddump interprets captured RADIUS packets to print a timestamp, packet length, RADIUS packet type, source and destination hosts and ports, and included attribute names and values for each packet.

An open source project originally designed to provide the University of Michigan with a secure single sign-on web authentication system. Cosign is part of the National Science Foundation Middleware Initiative (NMI) EDIT software release.

Many enviroments are switching from the Network Information Service (NIS) system over to the Lightweight Directory Access Protocol (LDAP) for sharing their network information (login names, passwords, home directories, group information) to all of the machines on the network. NIS was formerly known as Sun Yellow Pages (YP). This package implements several utilites that provide functional equivalents to utilities from the yp-tools and util-linux-ng package.

A fork of nss_db, modified to work on Solaris as well as Linux. This provides an alternative location for storing configuration information used by the Name Service Switch libraries, and may be used to supplement user, group and other information in a Berkeley DB. The Berkeley DB NSS module provides an alternative means for storing configuration information traditionally kept in several plain-text files in /etc (e.g. /etc/passwd). The module uses the Berkeley DB Library to store this information in several database files in /var/db (e.g. /var/db/passwd.db). Using these databases can lead to a considerable speed-up if the files in /etc are large (e.g. on a system with a lot of accounts). The databases may also be used as a local cache for network accounts, or as a means to supplement or override UIDs, GIDs, home directories etc. provided by network accounts.

Xtradius is a radius server that permits you to handle user authentication and accounting request via external scripts. You can handle script requests for user accounting, user authentication, NAS start and NAS stop packets. You can also write additional

Cookie based web authentication and single sign on system for largish intranets under a single domain where many, untrusted, people run their own web services. The server uses a private cookie scoped only for the client browser and the idcheck webserver which is always protected with SSL. In addition to the common practise of using SSL for everything (which idcheck supports). The idcheck system can also be used to provide authentication to websites where you merely want to hide content from various people. For example, an intranet whose contents are available to thousands of people. This is, in fact, its main advantage and feature. Please check the wiki pages for more info (link above). Please submit patches or problems via the patches section (link above). Please note that there are many idcheck RPMs on various web pages. Do not trust or use these versions. Always download them from sf!

NIBS - Billing System for small and medium Internet Service Providers based on Cistron Radius with MySQL support.

LDAPManager is an open source Cocoa application, written in Objective-C, to provide an LDAP browser/editor with a native Mac OS X interface. Should work fine on Tiger and Panther, and perhaps earlier.

CPU is meant to be a swiss army knife for administrators who are currently using or wanting to use an LDAP backend for user authentication. This project allows for easy user administration of LDAP users and allows for user and group mods, deletes and add

DACS,a light-weight single sign-on and role-based security system for Apache or server-based software, provides comprehensive authentication capabilities, and powerful, transparent rule-based authorization checking for any web service or CGI program. The latest release is DACS 1.5.1 (26-Oct-2025) It is not available here! Get it at https://dacs.dss.ca/download.html

JRadius - A Radius Server Java Adapter and Java Client

Unlike most LDAP authentication solutions this module integrates into Jabberd14 server using its module API (JSM). It consists of two parts - module itself and XDB helper. This module supports versions 1.4 and 1.6 of jabberd.

Mesh is a secure, lightweight grid middleware that is based on the addition of a single sign-on capability to the built-in public key authentication mechanism of SSH using system call interposition.