... is wildfire. And it is GPL. Now, you wil need a kerberos-capable client, and pandion or spark are the two interesting clients. For a setup I found this page, which I'll test this week probably