Free mod auth pipe 1.0 software for linux

One half of mod_auth_udp, is a modul designed to be linked into the Apache http server. (Version 1.3.x) The other half is an external serverprogram, that queries a datasource to retrieve the user, password and group information, that is needed for authentication and authorization.

The first implementation of the server is written in C and queries a PostgreSQL database, but I have designed it in a way, that there is only one file, that interacts with PostgreSQL. So you can think of this server as a template for building your own.

Auth MemCookie is an Apache v2 authentification and authorization modules are based on "cookie" authentification mecanism.

The module dont make authentification by it self, but verify if authentification "the cookie" are valid for each url protected by the module. The module validate also if the "authentificated user" have authorisation to acces url.

Authentification are made externaly by an authentification form page and all authentification information nessary to the module a stored in memcached indentified by the cookie value "authentification session id" by this login page.

How it Works

Phase 1 : The login Form

Authentification are made by a login formular page.
This login page must authenticate the user with any authenticate source (ldap, /etc/password, file, database....) accessible to langage of the page (php, perl, java... an ldap login page sample in php are in samples directory).

Then must set cookie that contain only a key the "authentification unique id" of the "authentification session".

The login page must store authorisation and user information of the authenticated user in memcached identified by the cookie key "authentification unique id".

The login page can be developted in any langage you want, but must be capable to use memcached (they must have memcache client api for us)

Phase 2 : The Apache v2 Module

After the user are logged, the apache 2 module check on each protected page by apache ACL the presence of the "cookie".

if the "cookie" exist, try to get session in memcached with the "cookie" value if not found return "HTTP_UNAUTHORIZED" page.

if session exist in memcached verify if acl match user session information if not match return "HTTP_FORBIDDEN" page.

mod_auth_shadow is an Apache module for authentication using /etc/shadow.

When performing this task one encounters one fundamental difficulty: The /etc/shadow file is supposed to be read/writeable only by root. However, the webserver is supposed to run under a non-root user, such as "nobody".

mod_auth_shadow addresses this difficulty by opening a pipe to an suid root program, validate, which does the actual validation. When there is a failure, validate writes an error message to the system log, and waits three seconds before exiting.

OpenVPN Auth Passwd is a plugin that authenticates OpenVPN users using the local passwd or shadow files, using a privilege separation model.
OpenVPN Auth Passwds authentication method must be defined in the Makefile prior to the compilation of the plugin.
On shadowed systems it uses the functions provided in the shadow suite and, on other systems, the getpwnam(3) function to verify the username/password.
SYNOPSIS
The openvpn-auth-passwd module implements username/password authentication via the passwd files and, in the systems with shadow support, we use it. It is provided for systems that dont have PAM.
This module uses a split privilege execution model, the same used in the auth-pam and down-root plugins. That is, even if you drop the openvpn daemon privileges using the user, group, or chroot directives, the plugin still work.
BUILD
To build openvpn-auth-passwd on systems that use shadow, you will need to have the shadow suite and its devel headers installed.
On GNU systems build with the "make" command. In other systems you should install the GNU make, if you dont have it, and type "gmake". The module will be named openvpn-auth-passwd.so
USAGE
To use this plugin module, add to your OpenVPN config file:
plugin openvpn-auth-passwd.so
Run OpenVPN with --verb 7 or higher to get debugging output from this plugin.
CAVEATS
This module is supposed to work on any *nix system but, more testing should be done. Right now it works in the Linux and OpenBSD.
There is no portable way to check if you are using the shadow suite or not. And, as we are not using autoconf to do this, you must manually set the USE_SHADOW directive in the Makefile. We assume by default that you are using it (the majority of linux distributions and sun). If you arent (the majority of *bsd systems and others),
you should set it to 0.
Enhancements:
- Added a new funtion to check if the user belong to a given group or not.

mod-vhost-ldap is an Apache 2.x module for storing and configuring virtual hosts from LDAP. mod-vhost-ldap project supports DocumentRoot, ScriptAlias, ServerName, ServerAlias, ServerAdmin, and SuexecUserGroup directives.

Its built on top of mod_ldap, so it uses its caching capabilities and can be used with a threaded Apache httpd.

smixer is a command-line and scriptable program to control and display the mixer volume levels on a sound card in linux. smixer is ideal for setting mixer settings on startup or to switch between multiple configurations quickly.

Distrubution of smixer is under the GNU GPL. See the "COPYING" and/or smixer.c file for more information.

Usage is explained very good in the man page.

smixer may be invoked with the following command-line options:
-a When printing current settings include all devices.
-p Print out the current mixer settings, then exit.
-f file Process commands from file, then exit.
[no options] Process commands from stdin (interactive or from a pipe), then exit.

Simple UDP proxy/pipe is an advanced UDP proxy/datapipe/packets forwarder and modifier with multiple functions.

Multiple clients allowed (you can connect many clients you want to this proxy), creation of ACP files (tcpdump capture files, just like a sniffer), packets forwarding (chat style, each packet is forwarded to all the other clients and server connected), packets injection (the tool opens a specific UDP port where you can send your customized packets which will be sent to the server), hexadecimal visualization and plugins support for the modification and visualization of the packets with some example plugins already included (Zdaemon huffman, Doom huffman, Half-life decoding and one for the replacement of the text strings).

Plugins (which work on both Windows and Linux) are very basic to create and use, just take a look at example_sudp.c for more informations.