Debian: 2172-1: moodle: Multiple vulnerabilities


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) Debian: 2172-1: moodle: Multiple vulnerabilities
# 1  
Old 02-23-2011
Debian: 2172-1: moodle: Multiple vulnerabilities

LinuxSecurity.com: Several vulnerabilties have been discovered in phpCAS, a CAS client library for PHP. The Moodle course management system includes a copy of phpCAS. [More...]

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
Apache2::AuthCASSimple(3pm)				User Contributed Perl Documentation			       Apache2::AuthCASSimple(3pm)

NAME
Apache2::AuthCASSimple - Apache2 module to authentificate through a CAS server DESCRIPTION
Apache2::AuthCASSimple is an authentication module for Apache2/mod_perl2. It allow you to authentificate users through a Yale CAS server. It means you don't need to give login/password if you've already be authentificate by the CAS server, only tickets are exchanged between Web client, Apache2 server and CAS server. If you not're authentificate yet, you'll be redirect on the CAS server login form. This module allow the use of simple text files for sessions. SYNOPSIS
PerlOptions +GlobalRequest <Location /protected> AuthType Apache2::AuthCASSimple PerlAuthenHandler Apache2::AuthCASSimple PerlSetVar CASServerName my.casserver.com PerlSetVar CASServerPath / # PerlSetVar CASServerPort 443 # PerlSetVar CASServerNoSSL 1 PerlSetVar CASSessionTimeout 3660 PerlSetVar CASSessionDirectory /tmp # PerlSetVar CASFixDirectory / # PerlSetVar ModProxy 1 # PerlSetVar HTTPSServer 1 require valid-user </Location> or order deny,allow deny from all require user xxx yyyy satisfy any CONFIGURATION
CASServerName Name of the CAS server. It can be a numeric IP address. CASServerPort Port of the CAS server. Default is 443. CASServerPath Path (URI) of the CAS server. Default is "/cas". CASServerNoSSL Disable SSL transaction wih CAS server (HTTPS). Default is off. CASCaFile CAS server public key. This file is used to allow secure connection between the webserver using Apache2::AuthCASSimple and the CAS server. DEPRECATED : Authen::CAS::Client use LWP::UserAgent to make https requests CASSessionTimeout Timeout (in second) for session create by Apache2::AuthCASSimple (to avoid CAS server overloading). Default is 60. -1 means disable. 0 mean infinite (until the user close browser). CASSessionDirectory Directory where session data are stored. Default is /tmp. CASFixDirectory Force the path of the session cookie for same policy in all subdirectories else current directory is used. ModProxy Apache2 mod_perl2 don't be use with mod_proxy. Default is off. HTTPSServer If you want to keep a HTTPS server for all data. Default is 0. OK AUTH_REQUIRED DECLINED REDIRECT SERVER_ERROR M_GET Apache constants to make pod coverage happy METHOD
handler call by apache2 VERSION
This documentation describes Apache2::AuthCASSimple version 0.10 BUGS AND TROUBLESHOOTING
o Old expired sessions files must be deleted with an example provided script : "delete_session_data.pl" o Apache::Session::Wrapper certainly need Apache2::Cookie o $r must be global for sessions with Apache::Session::Wrapper, add PerlOptions +GlobalRequest in your virtualhost conf o Apreq module must be enable in debian a2enmod apreq or add LoadModule apreq_module /usr/lib/apache2/modules/mod_apreq2.so in your apache configuration file Please submit any bug reports to agostini@univ-metz.fr. NOTES
Requires "mod_perl 2" version 2.02 or later Requires Authen::CAS::Client Requires Apache::Session::Wrapper AUTHOR
Yves Agostini CPAN ID: YVESAGO Univ Metz agostini@univ-metz.fr http://www.crium.univ-metz.fr COPYRIGHT
Copyright (c) 2009 by Yves Agostini This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. The full text of the license can be found in the LICENSE file included with this module. perl v5.10.0 2009-05-10 Apache2::AuthCASSimple(3pm)