PacketFence 4.1.0 released

December 11, 2013

The Inverse team is pleased to announce the immediate availability of PacketFence 4.1.0. This is a minor release with some new features, enhancements and important bug fixes. This release is considered ready for production use and upgrading from 4.0.6 is strongly advised.

Here are the changes in 4.1.0:

New feature

• Portal profiles can now be filtered by switches
• Proxy interception support
• New pfcmd "fixpermissions" command
• Added a "Null" authentication source for simple "Click to connect" portals
• Displayed columns of nodes are now customizable
• Create a single node or import multiple nodes from a CSV file from the Web admin interface
• LDAP authentication sources can now filter by group membership using a second LDAP query
• Extended definition of access durations
• FreeRADIUS no longer needs to be restarted after adding a switch
• New customizable ACLs for the Web admin interface

Enhancements

• Improved error messages in RADIUS modules
• Simple search for nodes now includes IP address
• Search by MAC address for nodes and users now accepts any MAC format
• Improved starting delay when using inline mode
• Added memcached as a managed service
• Added CoA support for Xirrus access point
• Improved validation of VLAN management
• Updated FontAwesome to version 3.2.1
• Each portal profile can now have a different redirection URL
• Initial destination URL is now respected with Firefox
• An Htpasswd source can now define sponsors
• Improved display of pie charts (limit of legend labels and highlight of table rows)
• Creation of users is now performed from the users page (was on the configuration page)
• Validate file path when saving an Htpasswd authentication source
• Improved validation of a sponsor’s email address
• Allow actions depending on authentication source type
• Modified logrotate so it uses copytruncate instead of restarting the services.
• Now comes with a corosync compatible barnyard2 init script in addons.
• Unreg the node when you come from a secure connection to an open connection
• Allow a self-registered node by SMS to go back to the registration page
• Sponsor email authentication source can refuse email addresses of the local domain (as the email source)
• Updated German (de) translation

Bug fixes

• RADIUS configuration files are no longer replaced when updating packages
• Fixed match of Htpasswd authentication source (#1714)
• Fixed creation of users without a role (#1721)
• Fixed expiration date of registration to the end of the day (#1722)
• Fixed caching issue when editing authentication sources (#1729)
• Allow rules with dashes (#1730)
• Fixed vconfig setting the wrong name_type
• Fixed help text in Web admin (#1724)
• Removed references to unavailable snort rules (#1715)
• Fixed LDAP regexp condition not considering all attribute values (#1737)
• Fixed sort by phone number and nodes count when performing an advanced search on users (#1738)
• Fixed users searches not being saved in the proper namespace
• Fixed handling of form submit when saving a user search
• Fixed self-registration of multiple unverified devices
• Fixed duplicate entries in advanced search of nodes
• Fixed advanced search by node category
• Fixed reordering of conf sections and groups (#1749)
• Fixed pid of SMS-registered devices (was "admin" in certain circumstances)
• Fixed saving of ‘allow local domain’ option when disabled in an email authentication source
• The ‘allow local domain’ option of the email source will now only affect the user who registers by email
• Fixed ifoctetshistoryuser command to use the correct query when just a user is given
• Fixed SQL query of SSID report in Web admin

See the ChangeLog file for the complete list of changes and the UPGRADE.asciidoc file for notes about upgrading.