/ 
Lemonldap-NG-Common-1.9.14
/ convertConfig
Security Advisories (2)
CVE-2021-35472 (2021-07-30)

An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two different users.

CVE-2021-35473

OAuth2 handler does not verify access token validity

NAME

convertConfig - tool used to change Lemonldap::NG configuration database.

SYNOPSIS

convertConfig --current=/current/lemonldap-ng.ini --new=/new/lemonldap-ng.ini

# Convert only latest (loose history)
convertConfig  --latest --current=... --new=...

# Continue even if an error occurs
convertConfig  --force -f --current=... --new=...

DESCRIPTION

convertConfig is a command line toot that can be used to do initialize a new Lemonldap::NG configuration database keeping current configuration and history.

SEE ALSO

http://lemonldap-ng.org/

AUTHORS

Clement Oudot, <clem.oudot@gmail.com>
Xavier Guimard, <x.guimard@free.fr>

BUG REPORT

Use OW2 system to report bug or ask for features: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues

DOWNLOAD

Lemonldap::NG is available at http://forge.objectweb.org/project/showfiles.php?group_id=274

COPYRIGHT AND LICENSE

This library is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program. If not, see http://www.gnu.org/licenses/.