Developers guide

Chapter 7

Optional components 56

Managed guests

Part of the web administration interface, the guests management interface is enabled by default. It is

accessible through the Configuration � Users � Create menu.

Guest pre-registration

Pre-registration is disabled by default. Once enabled, PacketFence’s firewall and Apache ACLs allow access

to the /signup page on the portal even from a remote location. All that should be required from the

administrators is to open up their perimeter firewall to allow access to PacketFence’s management

interface IP on port 443 and make sure a domain name to reach said IP is configured (and that the SSL

cert matches it). Then you can promote the pre-registration link from your extranet web site: https://

<hostname>/signup.

Caution

Pre-registration increases the attack surface of the PacketFence system since a subset

of it’s functionnality is exposed on the Internet. Make sure you understand the risks,

apply the critical operating system updates and apply PacketFence’s security fixes.