# LemonLDAP::NG

## Presentation

LemonLDAP::NG is an open source Web Single Sign On product (WebSSO) written in Perl, plugged into Apache Web Server.

LemonLDAP::NG is a free software, released under GPL license.

LemonLDAP::NG is the first SSO software deployed in French administrations. It can handle more than 200 000 users. Many private firms use it too. Check our references!

## Main Features

### Single Sign On for Web Applications

- Many SSO-ready applications (OBM, Bugzilla, Dokuwiki, etc.)
- Special Handlers for Zimbra, Sympa
- Tomcat SSO Valve
- Replace all .htaccess based security
- Forward SSO trough HTTP Auth-Basic or form replay
- One line code to integrate in Java, PHP, .Net, Perl, Ruby, Python, …

### Strong authorization system

- URL matching trough regular expressions (subdirectories, file types, …)
- Use of any user session information to build access rule

### Authentication modules

- LDAP
- Database
- SSL X509
- Apache built-in modules (Kerberos, NTLM , OTP, …)
- SAML 2.0 / Shibboleth
- OpenID
- Twitter
- CAS
- Radius
- Multiple and Choice (modules stacking)

### LDAP integration

- LDAP v2 and v3 protocol support
- SSL / TLS
- Active Directory compliance
- Password policy
- Recursive groups

### Identity provider

- SAML 2.0 / Shibboleth
- OpenID
- CAS

### User interfaces

- Dynamic application menu
- Password change form
- Password reset by mail

### Administration

- Graphical Manager
- Sessions explorer
- Status page
- Apache logs
- Syslog
- Log4Perl compatibility

### Security

- Protected cookies
- XSS and SQL/LDAP injection protection
- Compatibility with Apache mod_security
- User tracking in Apache logs or syslog

## Project activity

### Ohloh statistics

### SVN activity

- Rev 2886 -- Update packaging for 1.2.5 release by clement_oudot (2013/08/26 09:47)
- Rev 2885 -- Update versions for 1.2.5 release by clement_oudot (2013/08/26 09:43)
- Rev 2884 -- Add a test to force vhost name to be lower ... by clement_oudot (2013/08/23 18:41)
- Rev 2883 -- Load session content in error page to apply skin rules ... by clement_oudot (2013/08/23 15:34)
- Rev 2882 -- Fix loading of alternate config file (#LEMONLDAP-608) by clement_oudot (2013/08/23 14:59)