Free smtp authentication software for linux

PHP-Authentication provides a Tomcat-like authentication for PHP.
You give the source to authenticate against (DB, file, XML-RPC, etc.) and the directories that shall be protected, and the class handles the rest.
No including of any call to a class method on every page is necessary. You can also use it as if it were a standard Auth-class, using a call to "isLoggedIn" on every page that shall be protected.
Whats New in 1.3.3 Release:
- added logging, use option logFile
- clean up the session handling, remove global-use
- fix some win-issues
- optimize the isUrlProtected method, to work better on win
Whats New in 1.3.5 Release:
- first implementation of SOAP

OpenVPN authentication server is a project which allows you to add very flexible authentication for your OpenVPN server.
OpenVPN authentication server provides very flexible authentication (LDAP, Kerberos, Radius, PAM, SASL, File, SQL, IMAP, POP3) for your OpenVPN server. You can also retrieve per-client configuration in your LDAP server.
Main features:
- Very flexible authentication configuration
- Chainable authentication backends. You can mix several authentication backends
- Authentication server written in perl
- Authentication server can run completely in chroot (recommended)
- Authentication client written in C
- Authentication client can run completely in chroot if OpenVPN server is chrooted
- Supports almost all existing authentication backends.
- Supported authentication backends:
- LDAP
- Kerberos5 (works also with Microsoft AD)
- any SQL database supported by perl DBI driver
- IMAPv4 server
- POP3 server
- plain file
- SASL library
- PAM library
- Radius service
- custom certificate validation algorithm.

smtpauth is a authenticating proxy for servers without SMTP AUTH.

Use smtpauth and stunnel programs to add SMTP AUTH (PLAIN, LOGIN) support to any SMTP server. Clients can authenticate over SSL port 465 or cleartext port 587, and authentication is fully logged via syslog.

Works with JBMail, Pegasus Mail, Mozilla Thunderbird, MS Outlook...

This software is really an interim solution until our favourite MTA(s) support SSL/TLS and SMTP AUTH directly. For now I prefer using external programs to provide this functionality rather than patching MTA source. I designed this software to work with my Postfix server, but smtpauth also works with sendmail and just about any other SMTP server.

Installation:

1. Compile and install binary.

make
Copy smtpauth to /usr/sbin, owned by root, mode 755

2. Create special user smtpauth with its own group, no login allowed.

Note that smtpauth will immediately exit with an error if invoked as root.
It must be run from a low privilege account, for security.

3. [For SSL, port 465] Configure stunnel.conf. Change domain for your site.

setuid = smtpauth
setgid = smtpauth
debug = auth.notice
client = no

[smtps]
accept = 465
exec = /usr/sbin/smtpauth
execargs = smtpauth domain 127.0.0.1

4. Configure /etc/smtpauth.conf

This file should only be readable by the smtpauth user, since it stores plain
passwords. It consists of single lines containing usernames and passwords with
whitespace separating. Blank lines and comment lines starting # are ignored.

user1 pass1
user2 pass2

5. [For SSL, port 465] Start up stunnel

This will create a server running as smtpauth on port smtps/465. When SMTP clients
connect (SSL/TLS) the smtpauth program is launched and provides authentication
service through to 127.0.0.1:25, as a proxy. Your actual SMTP server will accept
mail because that connection is local. The mail headers will include X-SMTP-AUTH
indicating the username. Success and failures will be logged via syslog.

6. [For cleartext, port 587] Configure cleartext submission service in inetd

Since inetd (when started with -W) also supports wrapping, the smtpauth proxy
can be run straight out of here too. Note that this is somewhat risky, because
there will be no SSL/TLS encryption on the submission port (587).

Again, change domain for your site (e.g. mail.yoursite.tld)

submission stream tcp nowait smtpauth /usr/sbin/smtpauth smtpauth domain 127.0.0.1

Message Level Authentication for WebMail is a Firefox extension that authenticates mail from Message Level Network users, Mail Reputation provided by Sender Score for each message and Anti-Phishing Data from PhishTank. Registration is FREE but not required.

Currently works with the following web mail providers: Google Mail (GMail), Yahoo Mail and Comcast Mail.

Use these best practices to thwart spam and phishing attempts.

CGI::Application::Plugin::Authentication::Store is a base module for building storage classes for the CGI::Application::Plugin::Authentication plugin.

SYNOPSIS

package CGI::Application::Plugin::Authentication::Store::MyStore;
use base qw(CGI::Application::Plugin::Authentication::Store);

sub fetch {
my $self = shift;
my @params = @_;
...
}

sub save {
my $self = shift;
my %params = @_;
...
}

sub delete {
my $self = shift;
my @params = @_;
...
}

This module is a base class for all storage classes for the CGI::Application::Plugin::Authentication plugin. Each storage class is required to provide three methods that fetch, save and delete data from the store. The information that is saved will be text based, so there is no need to flatten any of the data that is to be stored.

CGI::Application::Plugin::Authentication::Driver is a Perl base module for building driver clasees for CGI::Application::Plugin::Authentication.

SYNOPSIS

package CGI::Application::Plugin::Authentication::Driver::MyDriver;
use base qw(CGI::Application::Plugin::Authentication::Driver);

sub verify_credentials {
my $self = shift;
my @credentials = @_;

if ( >>> Validate Credentials [ DBI,
DSN => ...,
TABLE => users,
CONSTRAINTS => {
username => __CREDENTIAL_1__,
MD5:password => __CREDENTIAL_2__,
}
],

Here we are saying that the password field is encoded using an MD5 hash, and should be checked accordingly.

mod_auth_ntdom might not work with newer version of domain controllers. Use this at your own risk! It is an access cheking module for Apache.

It defers authentication requests to NT domain controller on network with help by underlying Samba modules statically linked-in.

mod_auth_ntdom also offers access control based on group list retrieved from the domain controller.