search

inverse-inc / packetfence

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, powerful BYOD management options, 802.1X support, layer-2 isolation of problematic devices; PacketFence can be used to effectively secure networks small to very large heterogeneous networks.
https://packetfence.org
GNU General Public License v2.0
1.32k stars 279 forks source link

[Feature / Enhancement] Portal module for Q&A where you can define the questions and answers and the number of questions to display #2831

Open jmj-uy opened 6 years ago

jmj-uy commented 6 years ago

It would be great to add a module to be able to use a questionnaire as authentication in a captive portal. This would be similar to a survey, but instead of using it for gathering data from the user, the user should answer the question provided (maybe multiple choice), and if he answered right, that device would register and authenticate to the network.

Since this could be used per device, the same Q&A could be used by multiple users at the same time.

This feature could maybe use an internal database with custom Q&A, or maybe consume a webservice from a secondary server (maybe from an outside of the network server and this way would be better for out of bound deployment?).

julsemaan commented 6 years ago

Hi @manco1911

See the following PR #2677 which does exactly what you say and will be part of 7.4 or 8.0

jmj-uy commented 6 years ago

Hi @julsemaan , actually i didn't mean an actual survey. But an actual list of questions and answers that would substitute the usr/pwd for authentication. In that way, a Q&A could be use by multiple users to login to the network.

For what i read in the PR #2677, its an actual survey to collect info from the users, not to authenticate them. Maybe i misunderstood the description on #2677 ?

I talked about this with @oeufdure on the IRC channel last night and asked me to commit the issue since it wasn't quite the same feature.

julsemaan commented 6 years ago

@manco1911

You are right, #2677 doesn't do this

We talked about it a bit and thought of maybe extending that feature to do what you say.

I'll remove the "fix" link to #2677 as this won't be fully addressed by it