I've gone with Sticky Passwords, much easier to configure although not OpenSource.