Free mod auth pipe software for linux

mod-auth-pipe is a module of authentication written for Apache 1 (it hasnt been tested with Apache 2, but it may work).

Actually, this module is just mod-auth-shadow with a few modifications in order to accept any program as a pipe, letting this one validate both users andr groups.

mod_auth_pipe contents the module itself and an example pipe.

mod-auth-pipe can be configured independantly for whole server, for any VirtualHost or just per Location/Directory. It has very few configuration variables and its format is very simple. In order to configure apache to authenticate, for example, access to the administrative interface of oscommerce you can type this on your httpd.conf:

< Directory /var/www/oscommerce/catalog/admin >
AuthType Basic
AuthName osCommerce admin site
AuthPipe on
AuthPipeProgram /usr/local/bin/auth-pipe
require group oscommerce-admins
< /Location >

This way, and with a well-made auth-pipe program you can be sure that only those within the group oscommerce-admins could enter that section of your web.

mod_auth_shadow is an Apache module for authentication using /etc/shadow.

When performing this task one encounters one fundamental difficulty: The /etc/shadow file is supposed to be read/writeable only by root. However, the webserver is supposed to run under a non-root user, such as "nobody".

mod_auth_shadow addresses this difficulty by opening a pipe to an suid root program, validate, which does the actual validation. When there is a failure, validate writes an error message to the system log, and waits three seconds before exiting.

OpenVPN Auth Passwd is a plugin that authenticates OpenVPN users using the local passwd or shadow files, using a privilege separation model.
OpenVPN Auth Passwds authentication method must be defined in the Makefile prior to the compilation of the plugin.
On shadowed systems it uses the functions provided in the shadow suite and, on other systems, the getpwnam(3) function to verify the username/password.
SYNOPSIS
The openvpn-auth-passwd module implements username/password authentication via the passwd files and, in the systems with shadow support, we use it. It is provided for systems that dont have PAM.
This module uses a split privilege execution model, the same used in the auth-pam and down-root plugins. That is, even if you drop the openvpn daemon privileges using the user, group, or chroot directives, the plugin still work.
BUILD
To build openvpn-auth-passwd on systems that use shadow, you will need to have the shadow suite and its devel headers installed.
On GNU systems build with the "make" command. In other systems you should install the GNU make, if you dont have it, and type "gmake". The module will be named openvpn-auth-passwd.so
USAGE
To use this plugin module, add to your OpenVPN config file:
plugin openvpn-auth-passwd.so
Run OpenVPN with --verb 7 or higher to get debugging output from this plugin.
CAVEATS
This module is supposed to work on any *nix system but, more testing should be done. Right now it works in the Linux and OpenBSD.
There is no portable way to check if you are using the shadow suite or not. And, as we are not using autoconf to do this, you must manually set the USE_SHADOW directive in the Makefile. We assume by default that you are using it (the majority of linux distributions and sun). If you arent (the majority of *bsd systems and others),
you should set it to 0.
Enhancements:
- Added a new funtion to check if the user belong to a given group or not.

Simple UDP proxy/pipe is an advanced UDP proxy/datapipe/packets forwarder and modifier with multiple functions.

Multiple clients allowed (you can connect many clients you want to this proxy), creation of ACP files (tcpdump capture files, just like a sniffer), packets forwarding (chat style, each packet is forwarded to all the other clients and server connected), packets injection (the tool opens a specific UDP port where you can send your customized packets which will be sent to the server), hexadecimal visualization and plugins support for the modification and visualization of the packets with some example plugins already included (Zdaemon huffman, Doom huffman, Half-life decoding and one for the replacement of the text strings).

Plugins (which work on both Windows and Linux) are very basic to create and use, just take a look at example_sudp.c for more informations.

Auth MemCookie is an Apache v2 authentification and authorization modules are based on "cookie" authentification mecanism.

The module dont make authentification by it self, but verify if authentification "the cookie" are valid for each url protected by the module. The module validate also if the "authentificated user" have authorisation to acces url.

Authentification are made externaly by an authentification form page and all authentification information nessary to the module a stored in memcached indentified by the cookie value "authentification session id" by this login page.

How it Works

Phase 1 : The login Form

Authentification are made by a login formular page.
This login page must authenticate the user with any authenticate source (ldap, /etc/password, file, database....) accessible to langage of the page (php, perl, java... an ldap login page sample in php are in samples directory).

Then must set cookie that contain only a key the "authentification unique id" of the "authentification session".

The login page must store authorisation and user information of the authenticated user in memcached identified by the cookie key "authentification unique id".

The login page can be developted in any langage you want, but must be capable to use memcached (they must have memcache client api for us)

Phase 2 : The Apache v2 Module

After the user are logged, the apache 2 module check on each protected page by apache ACL the presence of the "cookie".

if the "cookie" exist, try to get session in memcached with the "cookie" value if not found return "HTTP_UNAUTHORIZED" page.

if session exist in memcached verify if acl match user session information if not match return "HTTP_FORBIDDEN" page.

mod-xslt is an Apache module that converts XML files into HTML files using XSLT stylesheets. It was written to overcome most of the limits of similar modules and uses a standard API, which could easily be used for other applications or to support more servers.
It is able to parse dynamically generated documents, both in POST and GET requests, includes a fully featured language to choose the stylesheet to load from both configuration files and from .xml files, and allows stylesheets to access server variables. It supports redirects, dynamically generated stylesheets, and both Apache 1 and 2.
Enhancements:
- configure, configure.ac - updated automatically by release scripts, in order to prepare a snapshot.

Apache SNMP Module allows you to monitor different configuration and status values of the Apache Web server using SNMP.
Enhancements:
- Bugfixes, the inclusion of MRTG scripts, and changes to make the module work on the IBM HTTP Server.

AMX Mod X project is a Half-Life Metamod plugin.
AMX Mod X is a Metamod plugin which allows you to write modifications for Half-Life with the Pawn scripting language.
It provides in-game administration tools, game statistics, server management, and gameplay modifiers. It is based on the original AMX Mod.
AMX Mod X is a versatile Half-Life metamod plugin which is targetted toward server administration.
It has a wide array of scripting capabilities so people can write "plugins", or files which add on to a mods functionality.
Plugins can take form in administrative services (adding new admin commands), statistics generation (StatsX), fun additions (godmode, etc), gameplay changes (WC3, CSDM), and much, much more!
You can also write modules to expand the functionality of AMX Mod X and add to the scripting language.
Enhancements:
- Fixed am46213: New-style menus that had numbered blanks would cause Core to guess the item numbers wrong.
- Fixed am46266: Team name detection did not work for TFC.
- Fixed a bug where get_func_id() would crash on an invalid plugin.
- Added an optional timeout parameter to SQL_MkDbTuple().
- Added a "queuetime" parameter to threaded query handlers, to get the amount of time passed.
- Extended CreateMultiForward() with CreateMultiForwardEx() for filtering old/new plugins from forwards.
- Fixed am45337: SQLX_GetQueryString() did not work with threaded queries.
- Fixed am46350: geoip.inc having faulty a double-inclusion barrier.
- Fixed am46378: unregister_forward() attempted to remove from the wrong hook table.
- Fixed am46336: Vexd_Utilities.inc did not include VexdUM for AMX Mod Compat compiling.
- Fixed am46630: rename_file() could not use relative paths.
- Fixed am45990: amxmod_compat.amxx could conflict and crash hand-ported AMX Mod plugins.
- Fixed am46340: miscstats.amxx could throw an RTE finding the enemy team.
- Fixed am46335: adminchat.amxx color tsay messages were not space aligned. Additionally, the leading space can now be omitted.
- Fixed am46699: stats.amxx for DoD did not display working multi-lingual menus.
- Fixed am46559: miscstats.amxx could throw an RTE if a player got more than 6 kills in a row.
- Fixed am45492: DoDX would overwrite the stats database on load.
- Fixed am46112: WinCSX.exe would not load properly on some versions of Windows.
- Fixed am45362: AMXX Studio did not indent correctly.