Free ldap software for linux

Pldap short from PAM LDAP Module is an experimental attempt at writing a new LDAP authentication module for PAM. It is currently beta code, and only implements the basic elements of LDAP authentication.
However, it does provide all the elements of a PAM module, and can be used to authenticate and authorise users against an LDAP database.
Main features:
- Simple bind against a directory to authenticate a user
- User defined templates for matching a userid to a DN
- Configurable filters for searching groups to authorise a login
- Change password capability
- TLS security
- Support for Linux, NetBSD, FreeBSD and Solaris
- Links to both the Solaris and OpenLDAP client libraries
Enhancements:
- Support for Solaris and FreeBSD
- Configure fixes to determine client LDAP libraries
- Compile under Redhat FC5
- Minor Bug Fixes

pam_ldap module provides the means for Solaris and Linux servers and workstations to authenticate against LDAP directories, and to change their passwords in the directory.
Main features:
- Uses the Pluggable Authentication Module API defined in OSF DCE RFC 86.0.
- Can utilize transport layer security (such as SSL or TLS) to encrypt transactions between the workstation and the LDAP server and provide strongly authenticated sign-on
- Support for SASL interactive authentication for strong authentication without the overhead of SSL/TLS
- Shares configuration information with nss_ldap module
- Supports PADL NIS/LDAP Gateway locator for finding LDAP servers
- Supports Netscape and IETF password policies
- Supports host- and group-based logon authorization

Ruby/LDAP is an extension module for Ruby that provides the interface to LDAP libraries such as OpenLDAP.

It provides the interface to some LDAP libraries (for example, OpenLDAP, UMich LDAP, Netscape SDK, ActiveDirectory). The common API for application development is described in RFC1823 and most libraries comply with it. Ruby/LDAP supports those libraries.

ldapdns is a fast and rhobust root-nameserver that can outperform bind and djbdns on medium to large installations, and will scale well both up and down.

the secret is that ldapdns uses a threaded core, and takes advantage of an external directory. its extremely simple, and it does not run under user-control as root.

its ideal for small and large installations, because it queries the ldap server directly, updates are immediate. you dont have to rebuild constant databases, or wait for bind to get its shit in gear.

but ldapdns is a work-in-progress. i use it on a production network, as do many others. but its up to you to make it best for your network.

mod_mldap is a simple LDAP authentication module for Apache 2.

Quick installtion of the dynamic module:

As root, run:
make install

It may be necessary to edit the include and APXS paths in
the Makefile.

Config options:

* MLDAP_URL LDAP URL.

* MLDAP_userAttr LDAP user name attibute. The default is "uid".

* MLDAP_pwAttr LDAP encrypted password attribute. Default
"UserPassword".

* MLDAP_logLevel Set to 1000 or above for debug messages.
The default is 0 (only error messages).

* MLDAP_Authoritative Set to "Off" to pass control to other authentication
modules if authentication fails. Default is "On".

Example (.htaccess):

AuthType Basic
AuthName TopSecret
MLDAP_URL ldap://127.0.0.1/dc=narpes,dc=com??sub?(objectClass=uidObject)
Require valid-user

OpenLDAP project is an open-standard protocol for accessing X.500 directory services. The protocol runs over Internet transport protocols, such as TCP.

LDAP is a lightweight alternative to the X.500 Directory Access Protocol (DAP) for use on the Internet. It uses TCP/IP stack verses the overly complex OSI stack. It also has other simplications, such as the representing most attribute values and many protocol items as textual strings, that are designed to make clients easier to implement.

The OpenLDAP Project is pleased to announce the availability of OpenLDAP Software 2.3, a suite of the Lightweight Directory Access Protocol (v3) servers, clients, utilities, and development tools.

This release contains the following major enhancements:

Slapd(8) enhancements

Updated slapd "overlay" interface, and several example (and mostly experimental) overlays.
Updated LDAP "sync" Engine with replication support, provider now an "overlay"
Numerous access control enhancements, including experimental "dont disclose on error" capability
Configuration backend

LDAPv3 extensions, including:

LDAP Password Policy
LDAP Component Matching (requires OpenLDAP snacc)
LDAP Modify Increment

This release includes the following major components:

slapd - a stand-alone LDAP directory server
slurpd - a stand-alone LDAP replication server
-lldap - a LDAP client library
-llber - a lightweight BER/DER encoding/decoding library
LDIF tools - data conversion tools for use with slapd
LDAP tools - A collection of command line LDAP utilities
Admin Guide, Manual Pages - associated documentation
SNACC - ASN.1 development tools for OpenLDAP

In addition, there are some contributed components:

LDAPC++ - a LDAP C++ SDK
Various slapd modules and slapi plugins

mod-vhost-ldap is an Apache 2.x module for storing and configuring virtual hosts from LDAP. mod-vhost-ldap project supports DocumentRoot, ScriptAlias, ServerName, ServerAlias, ServerAdmin, and SuexecUserGroup directives.

Its built on top of mod_ldap, so it uses its caching capabilities and can be used with a threaded Apache httpd.