Closed
Milestone
May 13, 2019–Jun 30, 2019
2.0.5
Unstarted Issues (open and unassigned)
0
Ongoing Issues (open and assigned)
0
Completed Issues (closed)
57
- [Security:improvement] Improved use of cryptography
- [Security:low] XXE vulnerability in SOAP notification server
- [Security: low] llng-fastcgi-server could fail to setgid
- [Security: low] CAS 3.0 Logout does not validate redirect URL
- Race condition on SSL login form button
- lmConfigEditor does not work anymore
- Session upgrade does not work with 2FA
- Pdata not cleared after session upgrade
- Portal Notification server unusable with old XML format
- Local cache not fully purged
- searchOn* does not work when a portal uses REST session backend
- Lua-headers file is missing
- UserDB::DBI with Auth::LDAP seems to not work properly
- Auth::LDAP unusable in combination if UserDB::LDAP isn't called
- No error returned if no code provided on OpenID Connect token endpoint
- Auth::Slave is unusable with Choice
- Go to portal message not translated in register confirmation mail
- Server Error with SAML SLO and expired SSO session
- Authentication with double cookies fails when uniq session is enabled
- CDA sessions are not removed when handler uses SOAP
- Server Error when OpenID Connect provider enabled without any RP
- CheckUser plugin fails if OTT globalStrorage is enabled
- Configuration caching issue when overriding globalStorage in lemonldap-ng.ini
- Logout with CASv2 is not working (Bad URL)
- Authentication with "Double Cookies for a single session" (securedCookie==3) does not work
- Impersonation does not work with double cookies authentication
- Warnings "Devel::StackTrace" when using unnative Perl functions
- Can't delete notifications from the manager
- The manager renames the id of applications created by lemonldap-ng-cli
- 2F plugins and method loadTemplate are not using skin rules
- Using lemonldap-ng-cli info gives warning with default configuration
- purgeLocalCache can't (and shouldn't) purge local configuration cache
- StorePassword in session not working when using session REST server
- Allow ServiceToken to send service headers
- Display a message if an expired 2f device is removed
- Append an option in Manager to merge only specified SSO groups with Impersonation
- Portal sub/urls (/checkuser, etc) are nor retained after authentication
- Append an option to set 2FA TTL
- pdata loss in login flow on 2.0.4
- CheckUser plugin does not work with SAML
- Append option to modify service Token handler TTL
- SSO sessions _updateTime value is not updated after a refresh request
- Add save/restore commands in cli
- CSRF token is not automatically regenerated after a failed login with Auth::Choice
- Append startTime overScheme to display sessions to avoid browser crash
- Warning in logs with SAML
- Better CORS handling
- Set choosen language in user session
- Transmission of Authorization header should probably be on by default
- Warnings in Viewer.pm when saving configuration
- Wrong version / author / IP / log in lemonldap-ng-cli
- Logging out from portal cause an error with doubleCookie after refreshing rights
- RPM version uses JSON::PP instead of JSON::XS
- Sessions explorer and Browseable::Postgres
- Real authentication is masked when using proxy authentication module
- html not interpreted for translated messages
- Impersonate Mode?
