PacketFence - BTS - PacketFence
View Issue Details
0001375PacketFencecaptive portalpublic2012-02-03 15:242012-02-03 15:37
fgaudreault 
 
lowtweakhave not tried
feedbackopen 
3.1.0 
 
0001375: Activation link appears to be valid even if node did not confirm within the proper time period
It appears that the activation link sent to self-registering node is still valid even if the node did not confirm within the determined time frame (default 10min)

Registering at 13:49
Unreg by pfmon at 13:59
...
Feb 03 14:13:18 email_activation.cgi(0) INFO: Activation code sent to email xxxx successfully verified! Node authorized: xxx (pf::email_activation::validate_code)
No tags attached.
Issue History
2012-02-03 15:24fgaudreaultNew Issue
2012-02-03 15:37obilodeauNote Added: 0002566
2012-02-03 15:37obilodeauStatusnew => feedback
2012-02-03 15:37obilodeauSeverityminor => tweak

Notes
(0002566)
obilodeau   
2012-02-03 15:37   
activation codes are valid for 31 days by default.

Not sure if this is something we want to change or not. After all the device is properly unregistered after 10 minutes.. If he still has access to the activation link (from another device or from registration VLAN with a fat mail client) why shouldn't he be able to click on it?

So this is definitely confirmed but not an 'issue' IMO. If anyone think it should be fixed let us know why with a good reason and we'll fix it.