Hi,
Yes you are definitely right regarding hacking. Our company aim exactly is to make sure that there is only one sponsor email address. I have edited the HTML code and I have set the sponsor email by default to point to only one email address.

Since you are mentioning this its important to ask you something. Is it worth making the sponsor email greyed out (that is cannot be changed) or else edit the configuration file to make sure that only one email address is allowed?

For simplicity we only want [email protected] to be the only sponsor email address. We can either grey that out in the HTML code or make sure that it is the only one set in the sponsor email address. In your case which do you think is the most secure? Thanks
I would definitely do both :) Greyed out field with the email hardcoded (so users can see the sponsor email without being able to modify it), and code modifications to ensure the "it" user is the only one allowed to sponsor.


Regards,
Matthew

------------------------------------------------------------------------
Date: Tue, 12 Feb 2013 10:01:30 -0500
From: [email protected]
To: [email protected]
Subject: Re: [PacketFence-users] Urgent Response

In the local.pm file (conf/authentication), there is a sub called : isAllowedToSponsorGuests

Do you have any errors in the log files?

Using local authentication when doing sponsor is a bit hackish, the domain part of the email address is stripped before validation, but the email is sent to the email you put in the form :S I would suggest you use LDAP instead, that would be much less hackish :)


On 2013-02-12 9:29 AM, matthew vassallo wrote:

    Hi Francois,

    Thanks for your response.

    In the admin guide, sponsor_authentication is set to local which
    in my case its the same too. The local users are found in
    user.conf file. In fact in the admin guide under Flat File, there
    is written that local users need to have a password set with
    htpasswd (for user.conf file) and that's exactly what I have done.

    Unfortunately, when I try to register via a sponsor, the same
    error is coming up all the time and don't know what I am doing
    wrong. If the sponsor email address is located in user.conf, why
    does the system not allowing such user to be a sponsor?

    Regards,
    Matthew

    ------------------------------------------------------------------------
    Date: Tue, 12 Feb 2013 08:19:50 -0500
    From: [email protected] <mailto:[email protected]>
    To: [email protected]
    <mailto:[email protected]>
    Subject: Re: [PacketFence-users] Urgent Response

    guests_managers.conf have nothing to do with sponsor... read the
    admin guide again.

    Look at page 54, there is an example config.

    On 2013-02-12 1:47 AM, matthew vassallo wrote:

        Hi,

        Reference to my last post:
        *
        *
        /*I want to add Sponsors that are able to authorize guest
        access. I **have added a sponsor in guest-managers.conf but
        when I try to sign up **with a user via Sponsor email, I
        receive an error "Email <e-mail> is **not allowed to sponsor
        guest access". Why is this so please? How can I **add
        guest_managers?*/
        *
        *
        I am still not able to do such configuration. Help will be
        greatly appreciated. Thank you

        Regards,
        Matthew


        
------------------------------------------------------------------------------
        Free Next-Gen Firewall Hardware Offer
        Buy your Sophos next-gen firewall before the end March 2013
        and get the hardware for free! Learn more.
        http://p.sf.net/sfu/sophos-d2d-feb



        _______________________________________________
        PacketFence-users mailing list
        [email protected]  
<mailto:[email protected]>
        https://lists.sourceforge.net/lists/listinfo/packetfence-users



-- Francois Gaudreault
    Architecte de Solution Cloud | Cloud Solutions Architect
    [email protected]  <mailto:[email protected]>
    514-629-6775
    - - -
    CloudOps
    420 rue Guy
    Montréal QC  H3J 1S6
    www.cloudops.com  <http://www.cloudops.com>
    @CloudOps_


    
------------------------------------------------------------------------------
    Free Next-Gen Firewall Hardware Offer Buy your Sophos next-gen
    firewall before the end March 2013 and get the hardware for free!
    Learn more. http://p.sf.net/sfu/sophos-d2d-feb
    _______________________________________________ PacketFence-users
    mailing list [email protected]
    <mailto:[email protected]>
    https://lists.sourceforge.net/lists/listinfo/packetfence-users


    
------------------------------------------------------------------------------
    Free Next-Gen Firewall Hardware Offer
    Buy your Sophos next-gen firewall before the end March 2013
    and get the hardware for free! Learn more.
    http://p.sf.net/sfu/sophos-d2d-feb



    _______________________________________________
    PacketFence-users mailing list
    [email protected]  
<mailto:[email protected]>
    https://lists.sourceforge.net/lists/listinfo/packetfence-users



--
Francois Gaudreault
Architecte de Solution Cloud | Cloud Solutions Architect
[email protected]  <mailto:[email protected]>
514-629-6775
- - -
CloudOps
420 rue Guy
Montréal QC  H3J 1S6
www.cloudops.com  <http://www.cloudops.com>
@CloudOps_

------------------------------------------------------------------------------ Free Next-Gen Firewall Hardware Offer Buy your Sophos next-gen firewall before the end March 2013 and get the hardware for free! Learn more. http://p.sf.net/sfu/sophos-d2d-feb _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users


------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013
and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb


_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users


--
Francois Gaudreault
Architecte de Solution Cloud | Cloud Solutions Architect
[email protected]
514-629-6775
- - -
CloudOps
420 rue Guy
Montréal QC  H3J 1S6
www.cloudops.com
@CloudOps_

------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013 
and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to