azure-activedirectory-library-for-dotnet - ADAL and MSAL authentication libraries for .net

•    CSharp

Active Directory Authentication Library for .NET (ADAL.NET) is an easy to use authentication library. You can use ADAL.NET to acquire security tokens to access protected Web APIs, for instance Microsoft Graph, or another Web APIs. ADAL.NET is available on various .NET Desktop/Mobile platforms to acquire a token for the signed-in user ( Windows desktop, UWP, Windows 8.1, Xamarin iOS and Xamarin Android). It can also be used in Web applications and Web APIs (ASP.NET, .NET Core, ASP.NET Core) that call other Web APIs in the name of a user, or without a user. ADAL.NET takes advantage of Windows Server Active Directory and Windows Azure Active Directory. dev: Contains newest development of both ADAL (v4+) and MSAL (v2+). This is where all current and future development of ADAL and MSAL takes place. adalV3/dev : Holds the v3 branch. Only security fixes will make it to v3.

DCOMShim RCW Authentication Wrapper for .NET

•    DotNet

DCOMShim is a RCW that authenticates to any DCOM object using Kerberos. This is needed because the default RCW in .NET limits your functionality of CoCreateInstanceEx(). DCOMShim is an example of how to use custom wrappers to alter the nature of CoCreateInstanceEx()

Waffle - Enable drop-in Windows Single Sign On for popular Java web servers

•    Java

WAFFLE is a native Windows Authentication Framework consisting of two C# and Java libraries that perform functions related to Windows authentication, supporting Negotiate, NTLM and Kerberos. Waffle also includes libraries that enable drop-in Windows Single Sign On for popular Java web servers, when running on Windows. While Waffle makes it ridiculously easy to do Windows Authentication in Java, on Windows, Waffle does not work on *nix(UNIX-like). Unlike many other implementations Waffle on Windows does not require any server-side Kerberos keytab setup, it's a drop-in solution.

gokrb5 - Pure Go Kerberos library for clients and services

•    Go

gokrb5 may work with other versions of Go but they are not tested. If you are interested in contributing to gokrb5, great! Please read the contribution guidelines.

LemonLDAP::NG - Web Single Sign On and Access Management Free Software

•    Perl

LemonLDAP::NG is a complete and modular Web-SSO system that can run with reverse-proxies or directly on application webservers. It can be used in conjunction with OpenID-Connect, CAS and SAML systems as identity or service provider. It can also be used as proxy between those federation systems.

Kerberos Module For Apache

•    C

Mod_auth_kerb is a module that provides Kerberos user authentication to the Apache web server. It allows to retrieve the username/password pair, and also supports full Kerberos authentication (also known as Negotiate or SPNEGO based authentication).

kx509

•    C

KX.509: X.509 certificates using Kerberos -- Convenient, Secure, Web Authentication. KX.509 is an open source project that provides a Kerberos realm's users with a secure means of acquiring short-term X.509 certificates via Kerberos authentication.

Kerberos Authorization Directory

Kerberos Authorization Directory give docs and tools to manage a Kerberos with LDAP backend. The target is not develop a new infrastructure but to allow integration of existing servers, supplying also patches to increase the usability of the whole system

PKI authentication in Kerberos

•    C

PKINIT is an extension of the Kerberos v5 protokol allowing users to use their PKI credentials for getting kerberos tickets. This project provides an implementation of the PKINIT specification for the Heimdal implementation of Kerberos5.

dotnet-script - Run C# scripts from the .NET CLI.

•    CSharp

Run C# scripts from the .NET CLI. The only thing we need to install is .Net Core 2.0+ SDK. dotnet-script supports both .NET Core 2.1 and .NET Core 2.0. Depending on the currently active .NET Core SDK, dotnet-script will run either as netcoreapp2.1 or as netcoreapp2.0. You can use global.json file to control that.

Apache Directory Server - An extensible, embeddable LDAP and Kerberos server, entirely in Java

•    Java

ApacheDS is an extensible and embeddable directory server entirely written in Java, which has been certified LDAPv3 compatible by the Open Group. Besides LDAP it supports Kerberos 5 and the Change Password Protocol. It has been designed to introduce triggers, stored procedures, queues and views to the world of LDAP which has lacked these rich constructs.

ruby-net-ldap - Pure Ruby LDAP library

•    Ruby

Net::LDAP for Ruby (also called net-ldap) implements client access for the Lightweight Directory Access Protocol (LDAP), an IETF standard protocol for accessing distributed directory services. Net::LDAP is written completely in Ruby with no external dependencies. It supports most LDAP client features and a subset of server features as well. Net::LDAP has been tested against modern popular LDAP servers including OpenLDAP and Active Directory. The current release is mostly compliant with earlier versions of the IETF LDAP RFCs (2251–2256, 2829–2830, 3377, and 3771). Our roadmap for Net::LDAP 1.0 is to gain full client compliance with the most recent LDAP RFCs (4510–4519, plus portions of 4520–4532).

Ftp Dot Net

Ftp Dot Net is a Ftp Server written in C#. It runs on Windows 2000/XP/2003 and Framework 1.1. It provide windows / Active Directory / NTFS authentication and permissions, Isolated ftp roots and Virtual Paths.

Directory access via LDAP

•    DotNet

.NET library for managing a directory via LDAP.

ufdbGuard - URL filter for Squid

•    C

URL filter to block unwanted content on the internet

Open Distro for Elasticsearch - Elasticsearch enhanced with enterprise security, alerting, SQL, and more

•    Java

Open Distro for Elasticsearch is an Apache 2.0-licensed distribution of Elasticsearch enhanced with Enterprise Security, Alerting, SQL, Index Management, k-Nearest Neighbor Search, Performance Analyzer and more.

Kerberos Poppassd

•    C

Kerberos Poppassd is a password changing daemon based upon poppassd version 1.8 by Pawel Krawczyk. The daemon works exactly like the original poppassd. The only difference being that this poppassd changes a users Kerberos 5 password.

Active Directory Common Dialogs .NET

.NET common dialog based wrappers for the Active Directory UI common dialogs, in particular the Directory Object Picker.

Yet Another FTP Client

•    C

Yafc is an OpenSource console mode FTP client. It has support for Kerberos 4/5 authentication and sftp (ssh2). Other features include tab completion, directory cache, powerful aliases, recursive file commands and bookmarks with autologin.

LINQ to Active Directory

•    LINQ

LINQ to Active Directory implements a custom LINQ query provider that allows querying objects in Active Directory. Internally, queries are translated into LDAP filters which are sent to the server using the System.DirectoryServices .NET Framework library.