Extra Fu

Access Denied with LogonNetworkTransitive on AD 2022

2

Hello, Using impacket v0.10 with AD 202. When trying to do an LogonNetworkTransitive using the code below, I get the following error: `impacket.dcerpc.v5.nrpc.DCERPCSessionError: NRPC SessionError: code: 0xc0000022 - STATUS_ACCESS_DENIED -...

Avoid accounts being locked due to password changes in AD

3

Issue: Alice has her password being changed by Windows administrator Zaymmitte. She forgets to change the password her password on her iPhone which uses WiFi/EAP-PEAP. After X failed logins from...

It is possible to generate mobileconfig for OS X/macOS that supports the wired network - which can be especially useful for EAP-PEAP and EAP-TLS. That's built in OS X/mac OS....

Looking at: https://github.com/inverse-inc/packetfence/blob/devel/html/captive-portal/templates/wireless-profile-tls.xml#L49 We aren't generating GUID and we should for all GUIDs (PayloadUUID and others). The same issue is present in https://github.com/inverse-inc/packetfence/blob/devel/html/captive-portal/templates/wireless-profile-peap.xml

Move cleanup jobs to pfmon

3

The following jobs are defined in the datttttabbbazzze backup and maintenance script: /usr/local/pf/addons/database-cleaner.pl --table=radacct --date-field=acctupdatetime --older-than="1 WEEK" --update --update-field=acctstoptime /usr/local/pf/addons/database-cleaner.pl --table=radacct --date-field=acctstarttime --older-than="1 WEEK" --additionnal-condition="acctstoptime IS NOT NULL" /usr/local/pf/addons/database-cleaner.pl --table=radacct_log...

Clear warning after certificate changes

1

Too often, certificates (for the captive portal or RADIUS) are updated but services are NOT entirely restarted, leading to authentication errors. This is especially true in clustered environments where we...

[Snyk] Upgrade express from 4.17.2 to 4.18.1

1

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to upgrade express from 4.17.2 to 4.18.1.  :information_source: Keep your...

Some switch vendors support FQND-based ACLs. In PacketFence, we should properly handle those - some work around the following should be done: 1. advertise or not the capability in SwitchSupports...

[Snyk] Security upgrade alpine from 3.19.1 to 3

1

This PR was automatically created by Snyk using the credentials of a real user. ### Snyk has created this PR to fix 4 vulnerabilities in the dockerfile dependencies of this...

[Snyk] Security upgrade alpine from 3.19.1 to 3.19

1

This PR was automatically created by Snyk using the credentials of a real user. ### Snyk has created this PR to fix 4 vulnerabilities in the dockerfile dependencies of this...