Security Advisories (2)
CVE-2020-16093 (2022-07-18)

In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used.

CVE-2020-24660 (2020-09-14)

An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used. An attacker may bypass URL-based access control to protected Virtual Hosts by submitting a non-normalized URI. This also affects versions before 0.5.2 of the "Lemonldap::NG handler for Node.js" package.

Documentation

Perl utility to convert Lemonldap::NG configuration file into LDIF file.
Perl utility to convert Lemonldap::NG configuration file into MySQL SQL file.

Modules

Common files for Lemonldap::NG infrastructure
Perl extension written to access to Lemonldap::NG Web-SSO sessions via SOAP.
Simple module to extend CGI to manage HTTP "If-Modified-Since / 304 Not Modified" system.
Extends SOAP::Lite to be compatible with CGI.
Wrapper for all SOAP functions of Lemonldap::NG CGIs.
Perl extension written to manage Lemonldap::NG Web-SSO configuration.
Perl extension written to access to Lemonldap::NG Web-SSO configuration via SOAP.
Contains functions that are automatically imported in Lemonldap::NG Safe objects to be used in expressions like rules, macros,...

Provides

in lib/Lemonldap/NG/Common/Apache/Session.pm
in lib/Lemonldap/NG/Common/BuildWSDL.pm
in lib/Lemonldap/NG/Common/Conf/Constants.pm
in lib/Lemonldap/NG/Common/Conf/DBI.pm
in lib/Lemonldap/NG/Common/Conf/File.pm
in lib/Lemonldap/NG/Common/Conf/LDAP.pm
in lib/Lemonldap/NG/Common/Crypto.pm