linux网络接入控制,PacketFence v7.0发布，网络接入控制

PacketFence v7.0发布，网络接入控制

发布时间:2017-04-24 09:11:15来源:红联作者:baihuo

PacketFence v7.0 发布了，这是一个主要版本，具有新特性，增强功能和重要的错误修复。该版本可用于生产环境使用，强烈建议从旧版本升级。详情更新如下：

新特性

Added provisioning support for SentinelOne (PR#1294)

Added MariaDB Galera cluster support (PR#2002/PR#2023/PR#2039/PR#2040/PR#2041/PR#2043/PR#2044/PR#2070/PR#2076/PR#2079/PR#2080/PR#2082/PR#2090)

All services are now handled by systemd (PR#2010)

IPv6 network stack in PacketFence (PR#2024)

New Golang-based HTTP dispatcher (#1301/PR#2029/PR#2067)

New Golang-based pfsso service to handle the firewall SSO requests (#1144/PR#2037/PR#2062)

Revamped Web administration interface (PR#2108)

增强

SNMP traps are now handled in pfqueue (PR#1656)

Added the ability to grant CLI write access for Extreme Networks switches (PR#1699)

Added a distributed cache for the accounting information to safely disable the SQL accounting records in active/active clusters (PR#1715)

Reduced the number of ipset calls when adding ports for Active Directory (PR#1886)

pfmon tasks have their own configuration file (PR#1918)

new command "pfcmd pfmon" - for running pfmon tasks via pfcmd (PR#1918)

CentOS repositories (packetfence and packetfence-devel) packages are now signed (PR#1946)

Added way to unregister devices that were inactive for a certain amount of time (maintenance.node_unreg_window) (PR#1948)

Added a new last_seen column to nodes table to track their last activity (Authentication, HTTP portal, DHCP) (PR#1948)

Delete nodes based on the new last_seen column instead of looking at the last DHCP packet (PR#1948)

iplog: Floored lease time for "tolerance" (#1965/PR#1968)

Can now restart the switchport where a node is connected from the administration interface (PR#2006)

Added interface description to location entries (PR#2007)

New pffilter filtering engine (PR#2032)

Ability to manage multiple "active" endpoints behind a single switchport (PR#2034)

pfdhcplistner now runs as a master-worker style service (PR#2036)

Added a winbindd wrapper for the PacketFence managed winbindd processes (#2065/PR#2038/PR#2069)

Added a caddy middleware for rate limiting the concurrent connections (PR#2055)

Updated the Ruckus SmartZone module to use the most recent webauth technique available (PR#2059/PR#2088)

Added vsys support for PaloAlto firewall SSO modules (PR#2061)

Portal Profile has been renamed to Connection Profile (PR#2066)

Moved common flows / process of DHCP processors in base class (PR#2086)

Removed PacketFence-Authorization-Status attribute from the RADIUS replies to prevent RADIUS replies from being discarded due to an unknown attribute (#2085/PR#2087)

Added option to fetch users one by one in the NTLM cache instead of all together (PR#2093)

New parallel testing infrastructure (PR#2094)

Roles are now stored in a configuration file for easier backup and management (PR#2097)

Tightened up HAproxy's SSL termination security (#893/#410/#411/#412)

Tightened up Apache's encryption security by requiring TLS v1.2 support only and restricted cipher suites (#893/#410/#411/#412)

Clickjacking attack prevention enforcement for recent browsers (PR#2111)

Cross-site scripting (XSS) filtering is now requested from your browser (PR#2114)

Dell N2000 series support (#675/PR#2115)

All logging is now done through syslog (PR#2124)

IP forwarding is now activated by default per PacketFence package installation (#2145/PR#2146/PR#2148/PR#2149)

Added more fine grain stats for the captive portal (#1962/PR#2173)

Many documentation improvements (PR#2136/PR#2214)

Bug 修复

Fixed addition of an UDP SRV record port as a TCP port (PR#1886)

Restored pf::api compatibility to Sourcefire module (#2048/PR#2019)

Avoid opening a double entry with wrong accounting values (PR#2113)

Added the ability to "format" the CN when using PKI (#2116/PR#2119)

pfdhcplistener doesn't work on a monitor interface (#1377)

pfqueue stats: Outstanding Task Counters isn't accurate (#1726)

pfdhcplistener: Segfaulting when keepalived transitions quickly from backup/master/backup (#1737)

pfdhcplistener takes a minute to die (#1791)

captive-portal: i18n labels for dynamic fields (#1911)

软件详情：https://packetfence.org/news/2017/article/packetfence-v70-released.html

下载地址：https://packetfence.org/download.html

来自:开源中国社区