Free access software for linux

mod_access is an Apache module to access control based on client hostname or IP address.

The directives provided by mod_access are used in < Directory >, < Files >, and < Location > sections as well as .htaccess files to control access to particular parts of the server. Access can be controlled based on the client hostname, IP address, or other characteristics of the client request, as captured in environment variables.

The Allow and Deny directives are used to specify which clients are or are not allowed access to the server, while the Order directive sets the default access state, and configures how the Allow and Deny directives interact with each other.

Both host-based access restrictions and password-based authentication may be implemented simultaneously. In that case, the Satisfy directive is used to determine how the two sets of restrictions interact.

In general, access restriction directives apply to all access methods (GET, PUT, POST, etc). This is the desired behavior in most cases. However, it is possible to restrict some methods, while leaving other methods unrestricted, by enclosing the directives in a < Limit > section.

Access Stats provides a script that enables you to keep track of activities on your web site.

Access Stats allows you to keep track of activities on your web site.

It extracts some statistic from a log file generated by log.pl.

These reports are generated by Access Stats:

- Visits by day
- Visits by hour
- Visits by week-day
- Referer
- Browser
- Operating System
- Countries
- Hostnames

MySQL Squid Access Report, mysar for short, is a reporting system for user web traffic activity, as logged from a squid proxy.
MySAR consists of two parts:
- Command line utilities which import a squid log file in a MySQL database and maintain the databas.
- A web interface for accessing the reports.
Main features:
- Free. Licenced under the GPL, mysar is free for everyone to use.
- Dynamic. Forget about static reports that take ages to generate, hogging the systems CPU. Mysar is is the only squid reporting system with a database as its backend.
- Almost realtime. No longer do you have to wait for the next hour or day for the reports to be generated. All of the user activity is available to you when you want it. NOW.
- Portable. Written in pure PHP, mysar is available to any unix-based OS platform PHP supports, without any modification.
- Flexible. Since the code is open-source, you can customize it to your needs. Create you own reports as you see fit.
- Supported. Mysar project has a mailing-list, forum and an active maintainer.
- Stable. Utilizing mature and stable software like Smarty, MySQL and PHP, mysar is standing on the shoulders of giants.
- Easy. With a foolproof installation and a user-friendly web interface, mysar makes web traffic reporting easier than ever.
- Customizable. Mysar neednt be on the same server as squid or MySQL. If your load is too high, just load-balance your processes as you see fit.
Enhancements:
- This version added 64-bit support for the binary importer.

JavaSVN project is a pure Java Subversion client library. You would like to use JavaSVN when you need to access or modify Subversion repository from your Java application, be it a standalone program, plugin or web application.
Being a pure Java program, JavaSVN doesnt need any additional configuration or native binaries to work on any OS that runs Java. On this site you will also find instructions on how to make existing programs use JavaSVN instead of native javahl bindings.
Main features:
- No external binaries or libraries are needed to work with Subversion repository.
- JavaSVN supports http, https, svn and svn+ssh connection protocols.
- New: file protocol is supported in 1.1.0.beta2 version.
- Low level API allows effective direct Subversion repository access.
- JavaSVN is compatible with applications that already use native javahl bindings.

Rule Set Based Access Control (RSBAC) is a Free Software security extension for current Linux kernels. Rule Set Based Access Control is based on the Generalized Framework for Access Control (GFAC) by Abrams and LaPadula and provides a flexible system of access control based on several modules.
All security relevant system calls are extended by security enforcement code. This code calls the central decision component, which in turn calls all active decision modules and generates a combined decision. This decision is then enforced by the system call extensions.
Main features:
- Free Open Source (GPL) Linux kernel security solution
- Independent of governments and big companies
- Several well-known and new security models, like MAC, ACL and RC
- On-access virus scanning with the Dazuko interface
- Detailed control over individual user and program network accesses
- Fully access controlled kernel level user management
- Any combination of security models possible
- Easily extensible: write your own model for runtime registration
- Support for latest kernels and stable for production use
Enhancements:
- This release relates to kernel 2.4.34.5 and 2.6.22.1.
- There are important fixes with some compilation errors and an important bug with User Management password hashing, introduced with the newer 2.6 kernel crypto API.
- Some security has been added with safety measures against null pointers.

PHP Generic Access Control List is a PHP class that offers Web developers a simple, yet immensely powerful "drop in" permission system for their current Web-based applications.
Main features:
- Split into two classes, and a seperate administration interface.
1. GACL class: Designed to be very small (517 lines of code including comments) and very fast, this class strictly takes care of the permission checks.
2. GACL_API class: Designed to be robust and flexible, this class takes care of creating/editing/deleting objects, groups and ACLs.
3. phpGACL Administration Interface: A set of scripts that allow for the easy administration of the entire GACL universe using only your browser.
- NOT limited to typical "read/write/execute" permissions similar to some flavours of *nix
- User definable "Access Control Objects" (ACO). These are objects which control what access is available to "requesters" (see below).
- Several examples:
- Enable - Projects
- View - Projects, View Own - Projects
- Edit - Projects, Edit Own - Projects
- Delete - Projects, Delete Own - Projects, UnDelete - Projects, UnDelete Own - Projects
- Add - Projects
- System down for Maintenance
- View - The letter "e" ;)
- User definable "Access Request Objects" (ARO). These are objects which request access from an "Access Control Object" (above) examples would be:
- Users/Accounts
- IP Addresses
- Browsers/Browser capabilities (JS/Flash/DHTML)
- User definable "Access eXtension Objects" (AXO). These are objects which extend permissions to a 3rd layer, optionally allowing you to set fine grained permissions on each individual item in your application, or even row in your database. AXOs are often used in cases where you only want to give a user access to a specific project or contact.
- Several examples:
- Projects - Project ID: 3474 (Accounting Software)
- Projects - Project ID: 3484 (Financial Software)
- Contacts - Contact ID: 4775 John Doe
- Contacts - Contact ID: 4795 John Doe
- Tree based ARO/AXO Object grouping with inheritance.
- Contains functionality to easily program add-ons. Examples would be for product pricing, or quantity limitations.
- One function application integration: acl_check()
- Simply pass this function four parameters, it doesnt get any easier!
- Supports the most popular databases using the ADODB database abstraction layer. (MySQL, PostgreSQL, Oracle, MSSQL)
- Complete web based administration interface.
- Scalable. A real-world working version with many added layers of complexity supports over 60,000 Accounts, 200 Groups and 300 ACOs.
Requierments:
- PHP 4.x or greater
- SQL database. (MySQL 3x/4.0.15+, PostgreSQL 7.2+, Oracle 9i+, MS-SQL 2000+)
Enhancements:
- This release contains several minor bugfixes and a fix for a major bug with del_object(), which caused transactions to abort prematurely.
- It also contains a slightly improved installer with Informix support, less possibility of conflicting code with other applications, and upgraded ADODB and Smarty packages.

Distributed Access Control System is a complete, light-weight, single sign-on and role-based access control system distributed under an open source license. It provides:
- extended authentication and role-based access control capabilities for Apache-based web services, CGI programs, and virtually any program or script;
- a wide array of flexible, modular, and efficient authentication methods, including two-factor authentication and hardware tokens;
- powerful, rule-based authorization checking that can be applied transparently to any resource or activity (such as web services, web content, and program features) by Apache-based web services and CGI programs, or virtually any program or script;
- an Apache 2.0/2.2 module, suite of CGI programs, and collection of command line tools for Unix-type platforms, such as Linux, FreeBSD, and Solaris.
Enhancements:
- This release includes an important bugfix to local_passwd_authenticate that prevents invalid passwords from being accepted.
- Some minor bugs have also been addressed, including some problems with dacs.quick(7).

LDAP Mailing Lists Access Policy Daemon (MLAPD) is a mailing list manager that uses LDAP (instead of BDB or GDBM) to control list access. Its designed to work in conjunction with Postfix as an access policy delegation daemon. It manages electronic mail discussion and e-newsletter lists. Its goal is to store/read list data on/from LDAP.
It works as a Postfix access policy delegation agent, so it can be installed one time and used by multiple Postfix instances, or installed multiple times and not suffer database access concurrency issues (because it uses LDAP).
Enhancements:
- This can be considered the first stable and usable release.