Custom functions

Custom functions allow one to extend LL::NG, they can be used in Headers, Rules or form replay data. Two actions are needed:

  • declare them in LLNG configuration

  • load the relevant code


Your perl custom functions must be declared on appropriate server when separating:

Portal type: declare custom functions here when using it in rules, macros or menu.

Reverse-proxy type: declare custom functions here when using it in headers.

Write custom functions library

Create your Perl module with custom functions. You can name your module as you want, for example

vi /path/to/
package SSOExtensions;

sub function1 {
  my (@args) = @_;

  # Your nice code here
  return $result;

sub function2 {
  return $_[0];


Import custom functions in LemonLDAP::NG

Load relevant code in handler server

New method

Just declare files or Perl module that must be loaded:

require = /path/to/, /path/to/
# OR
require = SSOExtensions::function1, SSOExtensions::function2
; Prevent Portal to crash if Perl module is not found
;requireDontDie = 1

Old method


This method is available but unusable by Portal under Apache. So if your rule may be used by the menu, use the new method.


Your module has to be loaded by Apache (for example after Handler load):

# Perl environment
PerlRequire Lemonldap::NG::Handler
PerlRequire /path/to/
PerlOptions +GlobalRequest
FastCGI server (Nginx)

You’ve just to incicate to LLNG FastCGI server the file to read using either -f option or CUSTOM_FUNCTIONS_FILE environment variable. Using packages, you just have to modify your /etc/default/llng-fastcgi-server (or /etc/default/lemonldap-ng-fastcgi-server) file:

# Number of process (default: 7)
#NPROC = 7

# Unix socket to listen to

# Pid file

# User and GROUP

# Custom functions file

Declare custom functions

Go in Manager, General Parameters » Advanced Parameters » Custom functions and set:

SSOExtensions::function1, SSOExtensions::function2


If your function is not compliant with Safe jail, you will need to disable the jail.

Use it

You can now use your function in a macro, an header or an access rule, for example:

SSOExtensions::function1( $uid, $ENV{REMOTE_ADDR} )