Security Advisories (2)
CVE-2020-16093 (2022-07-18)

In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used.

CVE-2020-24660 (2020-09-14)

An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used. An attacker may bypass URL-based access control to protected Virtual Hosts by submitting a non-normalized URI. This also affects versions before 0.5.2 of the "Lemonldap::NG handler for Node.js" package.

NAME

Lemonldap::NG::Portal::Display - Display functions for LemonLDAP::NG Portal

SYNOPSIS

use Lemonldap::NG::Portal::SharedConf;
use HTML::Template;

my $portal = Lemonldap::NG::Portal::SharedConf->new();

my($templateName,%templateParams) = $portal->display();

my $template = HTML::Template->new(
  filename => $templateName,
  die_on_bad_params => 0,
  cache => 0,
  global_vars => 1,
  filter => sub { $portal->translate_template(@_) }
);
while ( my ( $k, $v ) = each %templateParams ) { $template->param( $k, $v ); }

print $portal->header('text/html; charset=utf-8');
print $template->output;

DESCRIPTION

This module is used to build all templates parameters to display LemonLDAP::NG Portal

SEE ALSO

Lemonldap::NG::Portal

AUTHOR

Clement Oudot, <clem.oudot@gmail.com>
Fran�ois-Xavier Deltombe, <fxdeltombe@gmail.com.>
Xavier Guimard, <x.guimard@free.fr>
Sandro Cazzaniga, <cazzaniga.sandro@gmail.com>
Thomas Chemineau, <thomas.chemineau@gmail.com>

BUG REPORT

Use OW2 system to report bug or ask for features: http://jira.ow2.org

DOWNLOAD

Lemonldap::NG is available at http://forge.objectweb.org/project/showfiles.php?group_id=274

COPYRIGHT AND LICENSE

This library is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program. If not, see http://www.gnu.org/licenses/.