key-based single-sign-on authentication module for Apache

 mod_auth_pubtkt is an Apache module that authenticates a user based on a
 cookie with a ticket that has been issued by a central login server and
 digitally signed using either RSA or DSA. This means that only the trusted
 login server has the private key required to generate tickets, while web
 servers only need the corresponding public key to verify them.