> I have tried to research this a bit myself and seem to have come to
> the conclusion that packet fence is best suited for a hotel wifi
> system 

We would like to be more present in this space but actually right now,
we are not.

> and that there is really no control over iptables. 

There is control over the iptables rules.

You can alter the iptables settings by modifying conf/iptables.conf. We
use chains heavily so that we can assign the proper interface to the
chains at startup time.

> I was hoping
> for a solution that incorporated a bit of internal access control,
> host and user inventory.

For inline enforcement, access control can be done by modifying
iptables. For vlan enforcement, it's usually better to do it with ACLs
on your edge / core and proper VLAN segregation.

Host inventory is done by PacketFence. Well, for my own understanding of
what is host inventory I guess..

User inventory: except for guests, we decided that it would be best if
our users used their already existing infrastructure for user
management. This is often Active Directory but could be RADIUS,
Kerberos, etc. We have a flat file facility (conf/user.conf) see the
local authentication module.

If you have any precise suggestions to improve our documentation or
installation procedure please let us know. However, we are a small team
and can't simply comply to requests like: "Please have documentation
that covers all the various use cases". Be specific and we'll do our
best to address it.

Cheers!
-- 
Olivier Bilodeau
[email protected]  ::  +1.514.447.4918 *115  ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence
(www.packetfence.org)

------------------------------------------------------------------------------
Write once. Port to many.
Get the SDK and tools to simplify cross-platform app development. Create 
new or port existing apps to sell to consumers worldwide. Explore the 
Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
http://p.sf.net/sfu/intel-appdev
_______________________________________________
Packetfence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to