Package: liblemonldap-ng-portal-perl Version: 1.9.2-1 Severity: important Tags: security upstream
When using Apache:Session::LDAP to store sessions, they are JSON encoded but the purge script tries to read them with classic encoding (Storable). So sessions are never purged. Workaround: add a "useStorable" key set to 1 in the manager (General parameters » Session parameters » Session storage » Apache::Session module parameters) -- System Information: Debian Release: stretch/sid APT prefers testing APT policy: (900, 'testing'), (400, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.5.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) _______________________________________________ Secure-testing-team mailing list [email protected] http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-team
