LDAP User Management System (LUMS) provides a set of basic LDAP API functions for PHP and a strong configuration language. This API can then be used to create Web services or can be used in any PHP script. The language allows the administrator to define LDAP object types along with their corresponding attributes. Each attribute may be defined as required as multivalued with a type (string, binary, dn, telephone, mail, etc.) and can be user inserted, constant, auto incremented, or function created. Attribute uniqueness is supported.
Samba LDAP Tools++ is a branch of the smbldap-tool scripts. It has Kerberos (Heimdal) support for passwords, LDAP hashes, and domain machines; support for DynDNS updates on Samba using BIND; and additional structures for system users that allow a single user to play different roles as RADIUS, LDAP, Kerberos, Samba, and Jabber users. It has many additions and functions that allow full support on new technologies.
ldap2dns is a program to read DNS (Domain Name Service) records from an LDAP directory and format them into flat files suitable for TinyDNS (or Bind). ldap2dns reduces all kinds of administration overhead: no more flat file editing, no more zone file editing. After having installed ldap2dns, the administrator only has to modify the data stored in the LDAP directory. Access control can be configured for each zone, GUIs can be more easily implemented, and all other kinds of zone and resource record information can be managed without interfering with the DNS server directly.
NordicEdge Certificate Services gives Web service providers a simple path to integrate x509 certificate authentication, digital signatures, and automatic self-registration with their existing authentication infrastructure. Users can be authenticated by HTTPS client certificates or by a simple WebServices API. The vast majority of x509 certificates are supported, both from major vendors and internal enterprise certificates. Supported signature types are PKCS#7, S/MIME, and XML Digital signatures.
Bandit is a system of loosely-coupled components that provide consistent identity services and create a community that organizes and standardizes identity-related technologies in an open way, promoting both interoperability and collaboration. It implements open standard protocols and specifications so identity services can be constructed, accessed, and integrated from multiple identity sources. The Bandit system supports many authentication methods and provides user-centric credential management.
PasswordNotify was written to solve a long-standing need of ActiveDirectory and OpenLDAP administrators. It simply queries your LDAP server once a day and notifies a user when their password is about to expire. It is highly customizable, and runs as either a Unix cron job or a Windows service.
mod-vhost-ldap is an Apache 2.x module for storing and configuring virtual hosts from LDAP. It supports DocumentRoot, ScriptAlias, ServerName, ServerAlias, ServerAdmin, and SuexecUserGroup directives. It's built on top of mod_ldap, so it uses its caching capabilities and can be used with a threaded Apache httpd.