Anonymous | Login | 2024-11-22 23:38 EST |
Main | My View | View Issues | Change Log | Roadmap |
View Issue Details [ Jump to Notes ] | [ Issue History ] [ Print ] | |||||||
ID | Project | Category | View Status | Date Submitted | Last Update | |||
0001260 | PacketFence | captive portal | public | 2011-08-30 17:51 | 2011-09-21 22:16 | |||
Reporter | obilodeau | |||||||
Assigned To | obilodeau | |||||||
Priority | normal | Severity | major | Reproducibility | random | |||
Status | closed | Resolution | fixed | |||||
Platform | OS | OS Version | ||||||
Product Version | ||||||||
Target Version | Fixed in Version | 3.0.0 | ||||||
Summary | 0001260: redirect loop on the captive portal because VLAN [re-]assignment failed | |||||||
Description | SNMP uses UDP. Sometimes VLAN changes fails to reach the network devices, especially on busy periods. Especially on busy controllers when there are a lot of deauthentication to do. When it happens, nodes are stuck on the registration VLAN and if they hit the captive portal they get into a redirect loop. Instead of that redirect loop, we could try again to deauth / vlan change the user that we think shouldn't be here. | |||||||
Tags | No tags attached. | |||||||
fixed in git revision | ||||||||
fixed in mtn revision | 9bdb3559a2639121b7d4ff9b330bcc18b37befd9 | |||||||
Attached Files | vlan-assignment-retry-instead-of-redirect-loop-2.2.1.patch [^] (1,198 bytes) 2011-08-30 18:12 [Show Content]
vlan-assignment-retry-instead-of-redirect-loop-1.9.0.patch [^] (1,147 bytes) 2011-08-30 19:14 [Show Content] | |||||||
Notes | |
(0002176) obilodeau (reporter) 2011-08-31 18:07 |
The code is completed. I will test it in the lab tomorrow then commit. It's more intrusive than I originally thought because I can't call flip (because it doesn't support inline mode) and going through pf::enforcement wouldn't bypass the locationlog's potential out-of-date'ness. Added a "force" option to pf::enforcement instead. |
(0002179) obilodeau (reporter) 2011-09-02 16:00 |
fixed in trunk. This fix has DoS prevention built-in. |
(0002237) obilodeau (reporter) 2011-09-21 22:15 |
fix released in 3.0 |
Issue History | |||
Date Modified | Username | Field | Change |
2011-08-30 17:51 | obilodeau | New Issue | |
2011-08-30 17:51 | obilodeau | Status | new => assigned |
2011-08-30 17:51 | obilodeau | Assigned To | => obilodeau |
2011-08-30 18:12 | obilodeau | File Added: vlan-assignment-retry-instead-of-redirect-loop-2.2.1.patch | |
2011-08-30 19:14 | obilodeau | File Added: vlan-assignment-retry-instead-of-redirect-loop-1.9.0.patch | |
2011-08-31 18:07 | obilodeau | Note Added: 0002176 | |
2011-09-02 16:00 | obilodeau | mtn revision | => 9bdb3559a2639121b7d4ff9b330bcc18b37befd9 |
2011-09-02 16:00 | obilodeau | Note Added: 0002179 | |
2011-09-02 16:00 | obilodeau | Status | assigned => resolved |
2011-09-02 16:00 | obilodeau | Fixed in Version | => trunk |
2011-09-02 16:00 | obilodeau | Resolution | open => fixed |
2011-09-21 22:07 | obilodeau | Fixed in Version | trunk => 3.0.0 |
2011-09-21 22:15 | obilodeau | Note Added: 0002237 | |
2011-09-21 22:16 | obilodeau | Status | resolved => closed |
Copyright © 2000 - 2012 MantisBT Group |