PacketFence 4.4.0 released

September 10, 2014

The Inverse team is pleased to announce the immediate availability of PacketFence 4.4.0. This is a major release with new features, enhancements and important bug fixes. This release is considered ready for production use and upgrading from 4.3.0 is strongly advised.

Here are the changes in 4.4.0:

New feature

• Added the possibility to search by computer name on the nodes page
• Added support for the Anyfi WiFi controller
• Show portal profiles directly on the admin GUI
• Added local account authentication for EAP
• Added support for unreg date with dynamic year
• Added support for NetGear FSM7328S switches
• Added new network profile filter
• Added external captive portal support for AeroHIVE
• Added external captive portal support for Xirrus
• Added support for Dynamic Access lists on the Cisco Catalyst 2960
• Added the ability to search switches
• Added support for Dlink DES3028 switches
• Added reuse 802.1x credential on the portal profile
• Added support for Mikrotik access point
• Added ability to create local accounts when registering with external authentication sources

Enhancements

• Added support to configure either NATting or routed mode for inline layer 2 interfaces from the GUI
• Added informational messages in the GUI for inline interfaces
• Improvement of Inline Layer 3 (Inline L3 can only be defined behind Inline Layer 2 network)
• pfbandwidthd is now able to capture on all inline interfaces
• Added an option to set the timeout value for LDAP connections in authentication sources
• FreeRADIUS default configuration should now be more scalable and resilient to misbehaving devices
• Added the possibility to create rules using the username in OAuth authentication sources
• Added the RADIUS request to the VLAN filter
• Moved from using Storable to Sereal to serialize cached data
• Refactored portal profile filters to make it easier to extend
• Improved support for Dlink DES 3526 switches
• Rewrited log format [] for device MAC () for switch "" for userID
• Improve error handling of web API
• Raised ServerLimit on Apache httpd.portal, lowered httpd.portal Timeout and KeepAliveTimeout to improve responsiveness under load
• Do not overlay the controllerIp if one is already defined when creating a switch
• Verify the user roles level before creating a user via the admin GUI
• Added test iplogs not closed in pftest
• Remove direct usage of Apache2 modules in captive portal

Bug fixes

• Fix issue when adding multiple portal profile filters causing the wrong type to be picked
• Fix issue when a trap is received for a switch that does not implement parseTrap()
• Fix issue when a role is changed in the administration interface and the node’s access is not reevaluated
• Fix issue when a passthrough is not able to be resolved and would generate an invalid DNS response
• Fix missing files in logrotate file
• Fix issue when setting a port in trunk on a Cisco Catalyst 3560, 3750 and 3750G would fail
• Fix admin roles for bulk actions for nodes/users
• Fix issue where person was not updated in the database because of a case (non) match
• Fix send user password by email from the GUI
• Fix backward compatibility issue for gaming-registration that should redirect to device-registration
• Fix device-registration and status pages that were not accessible in inline mode when doing high-availability
• Fix filetype of wireless-profile.mobileconfig not being set properly
• Fix issue of iplog entries not being closed

See the complete list of changes and the UPGRADE.asciidoc file for notes about upgrading.