28 plugins ready to install
| Name | Version | Description | Compat |
|---|---|---|---|
| captchetat | 0.1.5 | CaptchEtat captcha module for LemonLDAP::NG | <2.23.0 |
| custom-functions | 0.4.0 | Extra functions for rules, macros and headers (customFunctions) | >=2.0.0 |
| external-menu | 0.1.14 | Redirect authenticated users to an external menu URL | <2.23.0 |
| fixed-logout-redirection | 0.1.14 | Force redirect to a fixed URL after logout | >=2.0.0 |
| json-file | 0.5.1 | JSON file-based authentication and user backend for development and testing | >=2.23.2 |
| krb-provisioning | 0.5.1 | On-the-fly Kerberos principal provisioning from SSO logins | >=2.23.2 |
| mail-autodiscover | 0.3.11 | SMTP/IMAP autodiscover for Outlook and Thunderbird | >=2.0.0 |
| matrix-token-exchange | 0.4.0 | Matrix token exchange for OIDC relying parties | >=2.20.0 |
| oidc-acr-claims | 0.5.1 | Emit `acr` + `auth_time` claims on JWT access tokens | >=2.23.2 |
| oidc-ciba | 0.5.1 | OpenID Connect Client-Initiated Backchannel Authentication (CIBA) | >=2.23.2 |
| oidc-device-authorization | 0.5.1 | OAuth 2.0 Device Authorization Grant (RFC 8628) | >=2.23.2 |
| oidc-device-organization | 0.5.1 | Organization Device Ownership for OIDC Device Authorization | >=2.23.2 |
| oidc-federation | 0.5.1 | OpenID Connect Federation (server side) | >=2.23.2 |
| oidc-global-scopes | 0.5.1 | Global OIDC scope and claim definitions for all relying parties | >=2.23.2 |
| oidc-grant-management | 0.5.1 | FAPI Grant Management for OAuth 2.0 | >=2.23.2 |
| oidc-id-jag | 0.5.1 | Cross-App Access — Identity Assertion JWT Authorization Grant (ID-JAG) | >=2.23.2 |
| oidc-jar | 0.5.1 | JWT-Secured Authorization Request (JAR, RFC 9101) | >=2.23.2 |
| oidc-jarm | 0.5.1 | JARM - JWT Secured Authorization Response Mode (RFC 9207) | >=2.23.2 |
| oidc-par | 0.5.1 | OAuth 2.0 Pushed Authorization Requests (RFC 9126) | >=2.23.2 |
| oidc-rar | 0.5.1 | OAuth 2.0 Rich Authorization Requests (RFC 9396) | >=2.23.2 |
| oidc-resource-indicators | 0.5.1 | OAuth 2.0 Resource Indicators (RFC 8707) | >=2.23.2 |
| oidc-scope-applications | 0.5.1 | OIDC 'applications' scope exposing portal menu in userinfo | >=2.0.12 |
| pacc | 0.5.1 | PACC - Provider Automatic Configuration for Clients (draft-ietf-mailmaint-pacc) | >=2.23.2 |
| pam-access | 0.5.2 | PAM access token generation and authorization for SSH/sudo | >=2.23.2 |
| reports | 1.0.0 | Session and browser usage reports (CSV) | >=2.0.0 |
| ssh-ca | 0.5.1 | SSH Certificate Authority for LemonLDAP::NG | >=2.23.2 |
| twake | 0.4.0 | Twake integration: well-known endpoint and applicative accounts | >=2.0.0 |
| vault-conf-backend | 0.1.14 | LemonLDAP::NG configuration backend using OpenBAO / Vault KV v2 | >=2.0.0 |
sudo lemonldap-ng-store add-store \ https://linagora.github.io/lemonldap-ng-plugins/
lemonldap-ng-store list sudo lemonldap-ng-store install \ <plugin> --activate
sudo systemctl restart \ lemonldap-ng-fastcgi-server
--activate automatically adds the plugin to
customPlugins via lemonldap-ng-cli.
lemonldap-ng-store info <plugin-name> # Show plugin details lemonldap-ng-store installed # List installed plugins lemonldap-ng-store check # Check for updates sudo lemonldap-ng-store remove <plugin-name> # Remove a plugin
All archives are signed. The key is imported automatically on
add-store (Trust On First Use). Set
gpgVerify = required in [store] to enforce it.
Public key: store-key.asc
All plugins are also available as Debian packages.
curl -fsSL https://linagora.github.io/lemonldap-ng-plugins/store-key.asc \ | sudo gpg --dearmor -o /usr/share/keyrings/linagora-llng-plugins.gpg echo "deb [signed-by=/usr/share/keyrings/linagora-llng-plugins.gpg] \ https://linagora.github.io/lemonldap-ng-plugins/debian stable main" \ | sudo tee /etc/apt/sources.list.d/linagora-llng-plugins.list sudo apt update sudo apt install linagora-lemonldap-ng-plugin-<name>
linagora-lemonldap-ng-store
package in this repository provides lemonldap-ng-store for
older versions. It is pulled automatically when needed.
The linagora-lemonldap-ng-store package is also
available as a signed dnf/yum repository for
RHEL/Rocky/AlmaLinux 9 & 10 (single noarch package).
sudo curl -fsSL https://linagora.github.io/lemonldap-ng-plugins/rpm/linagora-llng-plugins.repo \ -o /etc/yum.repos.d/linagora-llng-plugins.repo sudo dnf install linagora-lemonldap-ng-store