When a user register a device via an E-Mail address the PF 6 database
node entry Is updated with the configured unregdate set based on the
the authentication.conf:email_activation_timeout value which we have
set to 5minutes.
There are two problems we have found:-
The activation E-Mail that is sent to the user is hard coded in the
conf/templates/emails-guest_email_activation.html file
to say
'Failure to do so within 10 minutes will result in a termination...'
It makes no attempt to refer to the above configuration variable
at all.
When the activation link is followed the database is NOT updated with a
new 'unregdate' by the file
html/captive-portal/lib/captiveportal/PacketFence/Controller/Activate/Email.pm
Which refers to a value that does not exist giving the following log message:-
packetfence.log:May 20 14:09:49 httpd.portal(979) WARN: [mac:00:26:c7:3b:b2:6e]
Use of
uninitialized value $unregdate in concatenation (.) or string at
/usr/local/pf/html/captive-portal/lib/captiveportal/PacketFence/Controller/Activate/Email.pm
line 93.
The result is that the user ends up with an unregdate of 0000-00-00 00:00:00
and has network access
for an indefinite period of time and is never 'unregistered'
Andrew
------------------------------------------------------------------------------
Mobile security can be enabling, not merely restricting. Employees who
bring their own devices (BYOD) to work are irked by the imposition of MDM
restrictions. Mobile Device Manager Plus allows you to control only the
apps on BYO-devices by containerizing them, leaving personal data untouched!
https://ad.doubleclick.net/ddm/clk/304595813;131938128;j
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
