Linagora

LemonLDAP::NG Plugin Store

28 plugins ready to install

Available Plugins

NameVersionDescriptionCompat
captchetat0.1.5CaptchEtat captcha module for LemonLDAP::NG<2.23.0
custom-functions0.4.0Extra functions for rules, macros and headers (customFunctions)>=2.0.0
external-menu0.1.14Redirect authenticated users to an external menu URL<2.23.0
fixed-logout-redirection0.1.14Force redirect to a fixed URL after logout>=2.0.0
json-file0.5.1JSON file-based authentication and user backend for development and testing>=2.23.2
krb-provisioning0.5.1On-the-fly Kerberos principal provisioning from SSO logins>=2.23.2
mail-autodiscover0.3.11SMTP/IMAP autodiscover for Outlook and Thunderbird>=2.0.0
matrix-token-exchange0.4.0Matrix token exchange for OIDC relying parties>=2.20.0
oidc-acr-claims0.5.1Emit `acr` + `auth_time` claims on JWT access tokens>=2.23.2
oidc-ciba0.5.1OpenID Connect Client-Initiated Backchannel Authentication (CIBA)>=2.23.2
oidc-device-authorization0.5.1OAuth 2.0 Device Authorization Grant (RFC 8628)>=2.23.2
oidc-device-organization0.5.1Organization Device Ownership for OIDC Device Authorization>=2.23.2
oidc-federation0.5.1OpenID Connect Federation (server side)>=2.23.2
oidc-global-scopes0.5.1Global OIDC scope and claim definitions for all relying parties>=2.23.2
oidc-grant-management0.5.1FAPI Grant Management for OAuth 2.0>=2.23.2
oidc-id-jag0.5.1Cross-App Access — Identity Assertion JWT Authorization Grant (ID-JAG)>=2.23.2
oidc-jar0.5.1JWT-Secured Authorization Request (JAR, RFC 9101)>=2.23.2
oidc-jarm0.5.1JARM - JWT Secured Authorization Response Mode (RFC 9207)>=2.23.2
oidc-par0.5.1OAuth 2.0 Pushed Authorization Requests (RFC 9126)>=2.23.2
oidc-rar0.5.1OAuth 2.0 Rich Authorization Requests (RFC 9396)>=2.23.2
oidc-resource-indicators0.5.1OAuth 2.0 Resource Indicators (RFC 8707)>=2.23.2
oidc-scope-applications0.5.1OIDC 'applications' scope exposing portal menu in userinfo>=2.0.12
pacc0.5.1PACC - Provider Automatic Configuration for Clients (draft-ietf-mailmaint-pacc)>=2.23.2
pam-access0.5.2PAM access token generation and authorization for SSH/sudo>=2.23.2
reports1.0.0Session and browser usage reports (CSV)>=2.0.0
ssh-ca0.5.1SSH Certificate Authority for LemonLDAP::NG>=2.23.2
twake0.4.0Twake integration: well-known endpoint and applicative accounts>=2.0.0
vault-conf-backend0.1.14LemonLDAP::NG configuration backend using OpenBAO / Vault KV v2>=2.0.0

Quick Start

1. Register this store

sudo lemonldap-ng-store add-store \
  https://linagora.github.io/lemonldap-ng-plugins/

2. Browse & install

lemonldap-ng-store list
sudo lemonldap-ng-store install \
  <plugin> --activate

3. Restart

sudo systemctl restart \
  lemonldap-ng-fastcgi-server
Tip: --activate automatically adds the plugin to customPlugins via lemonldap-ng-cli.

Other Commands

lemonldap-ng-store info <plugin-name>       # Show plugin details
lemonldap-ng-store installed                  # List installed plugins
lemonldap-ng-store check                      # Check for updates
sudo lemonldap-ng-store remove <plugin-name> # Remove a plugin

GPG Verification

All archives are signed. The key is imported automatically on add-store (Trust On First Use). Set gpgVerify = required in [store] to enforce it.

Public key: store-key.asc

Debian Repository

All plugins are also available as Debian packages.

Setup

curl -fsSL https://linagora.github.io/lemonldap-ng-plugins/store-key.asc \
  | sudo gpg --dearmor -o /usr/share/keyrings/linagora-llng-plugins.gpg

echo "deb [signed-by=/usr/share/keyrings/linagora-llng-plugins.gpg] \
  https://linagora.github.io/lemonldap-ng-plugins/debian stable main" \
  | sudo tee /etc/apt/sources.list.d/linagora-llng-plugins.list

sudo apt update
sudo apt install linagora-lemonldap-ng-plugin-<name>
LLNG < 2.24.0: the linagora-lemonldap-ng-store package in this repository provides lemonldap-ng-store for older versions. It is pulled automatically when needed.

RPM Repository (EL9 & EL10)

The linagora-lemonldap-ng-store package is also available as a signed dnf/yum repository for RHEL/Rocky/AlmaLinux 9 & 10 (single noarch package).

Setup

sudo curl -fsSL https://linagora.github.io/lemonldap-ng-plugins/rpm/linagora-llng-plugins.repo \
  -o /etc/yum.repos.d/linagora-llng-plugins.repo

sudo dnf install linagora-lemonldap-ng-store