/ 
Lemonldap-NG-Handler-1.1.1
Security Advisories (2)
CVE-2020-16093 (2022-07-18)

In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used.

CVE-2020-24660 (2020-09-14)

An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used. An attacker may bypass URL-based access control to protected Virtual Hosts by submitting a non-normalized URI. This also affects versions before 0.5.2 of the "Lemonldap::NG handler for Node.js" package.

Modules

Lemonldap::NG::Handler
The Apache protection module part of Lemonldap::NG Web-SSO system.
Lemonldap::NG::Handler::AuthBasic
Perl extension to be able to authenticate users by basic web system but to use Lemonldap::NG to control authorizations.
Lemonldap::NG::Handler::CDA
Module to use Lemonldap::NG::Handler mechanisms with Cross-Domain-Authentication.
Lemonldap::NG::Handler::CGI
Perl extension for using Lemonldap::NG authentication in Perl CGI without using Lemonldap::NG::Handler
Lemonldap::NG::Handler::Proxy
Perl extension to add a reverse-proxy to a Lemonldap::NG handler.
Lemonldap::NG::Handler::SecureToken
Perl extension to generate a secure token
Lemonldap::NG::Handler::SharedConf
Perl extension to use dynamic configuration provide by Lemonldap::NG::Manager.
Lemonldap::NG::Handler::Simple
Perl base extension for building Lemonldap::NG compatible handler.
Lemonldap::NG::Handler::Status
Perl extension to add a mod_status like system for Lemonldap::NG::Handler
Lemonldap::NG::Handler::SympaAutoLogin
Perl extension to generate Sympa cookie for users authenticated by LemonLDAP::NG
Lemonldap::NG::Handler::UpdateCookie
Perl extension to manage update cookie sent by client, to reload session in local cache.
Lemonldap::NG::Handler::Vhost
Perl extension for building a Lemonldap::NG compatible handler able to manage Apache virtual hosts.
Lemonldap::NG::Handler::ZimbraPreAuth
Perl extension to generate Zimbra preauth URL for users authenticated by Lemonldap::NG

Provides

Lemonldap::NG::Apache::Request
in lib/Lemonldap/NG/Handler/CGI.pm
Lemonldap::NG::Handler::_CGI
in lib/Lemonldap/NG/Handler/CGI.pm

Examples

Other files