Hi Francois,
Yes you are definitely right regarding hacking. Our company aim exactly is to 
make sure that there is only one sponsor email address. I have edited the HTML 
code and I have set the sponsor email by default to point to only one email 
address. 
Since you are mentioning this its important to ask you something. Is it worth 
making the sponsor email greyed out (that is cannot be changed) or else edit 
the configuration file to make sure that only one email address is allowed?
For simplicity we only want [email protected] to be the only sponsor email 
address. We can either grey that out in the HTML code or make sure that it is 
the only one set in the sponsor email address. In your case which do you think 
is the most secure? Thanks
Regards,Matthew

Date: Tue, 12 Feb 2013 10:01:30 -0500
From: [email protected]
To: [email protected]
Subject: Re: [PacketFence-users] Urgent Response


  
    
  
  
    In the local.pm file
      (conf/authentication), there is a sub called :
      
      isAllowedToSponsorGuests

      

      Do you have any errors in the log files?

      

      Using local authentication when doing sponsor is a bit hackish,
      the domain part of the email address is stripped before
      validation, but the email is sent to the email you put in the form
      :S  I would suggest you use LDAP instead, that would be much less
      hackish :)

      

      

      On 2013-02-12 9:29 AM, matthew vassallo wrote:

    
    
      
      Hi Francois,
        

        
        Thanks for your response.
        

        
        In the admin guide, sponsor_authentication is set to local
          which in my case its the same too. The local users are found
          in user.conf file. In fact in the admin guide under Flat File,
          there is written that local users need to have a password set
          with htpasswd (for user.conf file) and that's exactly what I
          have done. 
        

        
        Unfortunately, when I try to register via a sponsor, the
          same error is coming up all the time and don't know what I am
          doing wrong. If the sponsor email address is located in
          user.conf, why does the system not allowing such user to be a
          sponsor?
        

        
        Regards,
        Matthew

          

          
            Date: Tue, 12 Feb 2013 08:19:50 -0500

            From: [email protected]

            To: [email protected]

            Subject: Re: [PacketFence-users] Urgent Response

            

            guests_managers.conf have
              nothing to do with sponsor... read the admin guide again.

              

              Look at page 54, there is an example config.

              

              On 2013-02-12 1:47 AM, matthew vassallo wrote:

            
            
              
              Hi,
                

                  
                Reference to my last post:
                

                  
                I want to add Sponsors that
                      are able to authorize guest access. I have added a 
sponsor in
                      guest-managers.conf but when I try to sign up with a
                      user via Sponsor email, I receive an error "Email
                      <e-mail> is not allowed to sponsor guest
                      access". Why is this so please? How can I add 
guest_managers?
                

                  
                I am still not able to do such configuration. Help
                  will be greatly appreciated. Thank you
                

                
                Regards,
                Matthew
              
              

              
              

              
------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013 
and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb
              

              
              

              _______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

            
            

            

            -- 
Francois Gaudreault
Architecte de Solution Cloud | Cloud Solutions Architect
[email protected]
514-629-6775
- - -
CloudOps
420 rue Guy
Montréal QC  H3J 1S6
www.cloudops.com
@CloudOps_
            

            
------------------------------------------------------------------------------
Free
            Next-Gen Firewall Hardware Offer
            Buy your Sophos next-gen firewall before the end March 2013
            and get the hardware for free! Learn more.
            http://p.sf.net/sfu/sophos-d2d-feb

            _______________________________________________
            PacketFence-users mailing list
            [email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
        
      
      

      
      

      
------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013 
and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb
      

      
      

      _______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

    
    

    

    -- 
Francois Gaudreault
Architecte de Solution Cloud | Cloud Solutions Architect
[email protected]
514-629-6775
- - -
CloudOps
420 rue Guy
Montréal QC  H3J 1S6
www.cloudops.com
@CloudOps_
  


------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013 
and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users                  
                  
------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013 
and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to