/ 
Lemonldap-NG-Portal-1.0.2
/ Lemonldap::NG::Portal::AuthProxy
Security Advisories (2)
CVE-2020-16093 (2022-07-18)

In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used.

CVE-2020-24660 (2020-09-14)

An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used. An attacker may bypass URL-based access control to protected Virtual Hosts by submitting a non-normalized URI. This also affects versions before 0.5.2 of the "Lemonldap::NG handler for Node.js" package.

NAME

Lemonldap::NG::Portal::AuthProxy - Authentication module for Lemonldap::NG that delegates authentication to a remote Lemonldap::NG portal.

The difference with Remote authentication module is that the client will never be redirect to the main Lemonldap::NG portal. This configuration is usable if you want to expose your internal SSO to another network (DMZ).

SYNOPSIS

use Lemonldap::NG::Portal::SharedConf;
my $portal = new Lemonldap::NG::Portal::SharedConf(
       
       # REQUIRED PARAMETERS
       authentication      => 'Proxy', 
       userDB          => 'Proxy',
       soapAuthService => 'https://auth.internal.network/',

       # OTHER PARAMETERS
       # remoteCookieName (default: same name)
       remoteCookieName => 'lemonldap',
       # soapSessionService (default ${soapAuthService}index.pl/sessions)
       soapSessionService =>
          'https://auth2.internal.network/index.pl/sessions',
  );

DESCRIPTION

Authentication module for Lemonldap::NG portal that forward credentials to a remote Lemonldap::NGportal using SOAP request. Note that the remote portal must accept SOAP requests ("Soap=>1").

SEE ALSO

http://lemonldap-ng.org/

AUTHOR

Xavier Guimard, <x.guimard@free.fr>

COPYRIGHT AND LICENSE

Copyright (C) 2009, 2010 by Xavier Guimard

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself, either Perl version 5.10.0 or, at your option, any later version of Perl 5 you may have available.