/ 
Lemonldap-NG-Portal-1.2.1
/ Lemonldap::NG::Portal::AuthNull
Security Advisories (2)
CVE-2020-16093 (2022-07-18)

In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used.

CVE-2020-24660 (2020-09-14)

An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used. An attacker may bypass URL-based access control to protected Virtual Hosts by submitting a non-normalized URI. This also affects versions before 0.5.2 of the "Lemonldap::NG handler for Node.js" package.

NAME

Lemonldap::NG::Portal::AuthNull - Perl extension for building Lemonldap::NG compatible portals with no authentication.

SYNOPSIS

use Lemonldap::NG::Portal::SharedConf;
my $portal = new Lemonldap::NG::Portal::Simple(
       configStorage     => {...}, # See Lemonldap::NG::Portal
       authentication    => 'Null',
  );

if($portal->process()) {
  # Write here the menu with CGI methods. This page is displayed ONLY IF
  # the user was not redirected here.
  print $portal->header('text/html; charset=utf8'); # DON'T FORGET THIS (see CGI(3))
  print "...";

  # or redirect the user to the menu
  print $portal->redirect( -uri => 'https://portal/menu');
}
else {
  print $portal->header('text/html; charset=utf8'); # DON'T FORGET THIS (see CGI(3))
  print "<html><body><h1>Unable to work</h1>";
  print "This server isn't well configured. Contact your administrator.";
  print "</body></html>";
}

DESCRIPTION

This library just overload few methods of Lemonldap::NG::Portal::Simple to create sessions for anonymous users.

See Lemonldap::NG::Portal::Simple for usage and other methods.

SEE ALSO

Lemonldap::NG::Portal, Lemonldap::NG::Portal::Simple, http://lemonldap-ng.org/

AUTHOR

Clement Oudot, <clement@oodo.net>

BUG REPORT

Use OW2 system to report bug or ask for features: http://jira.ow2.org

DOWNLOAD

Lemonldap::NG is available at http://forge.objectweb.org/project/showfiles.php?group_id=274

COPYRIGHT AND LICENSE

Copyright (C) 2010 by Clement Oudot

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself, either Perl version 5.10.0 or, at your option, any later version of Perl 5 you may have available.