2011-01-04	Francois Gaudreault <fgaudreault@inverse.ca>
	* pf/docs/PacketFence_Network_Devices_Configuration_Guide.odt:
	Added Extricom controller documentation

	* pf/docs/PacketFence_Administration_Guide.odt: Fixed typo in
	the groupinstall section.

2010-12-20	Francois Gaudreault <fgaudreault@inverse.ca>
	* pf/docs/PacketFence_Network_Devices_Configuration_Guide.odt:
	Modify the supported Meru Network Devices module name

	* pf/lib/pf/SNMP/Meru/MC.pm: Changed the name of the Meru
	Controller module to a more generic one

2010-12-17	Francois Gaudreault <fgaudreault@inverse.ca>
	* pf/docs/PacketFence_Network_Devices_Configuration_Guide.odt:
	Modify the supported Meru Network Devices

	* pf/conf/templates/snort.conf: Add missing TELNET_SERVERS variable
	

2010-12-16	Francois Gaudreault <fgaudreault@inverse.ca>
	* pf/docs/PacketFence_ZEN_Installation_Guide.odt: Update the ZEN
	documentation for version 2.0.0

	* pf/lib/pf/SNMP/Extricom.pm, pf/lib/pf/SNMP/Extricom/EXSW800.pm :
	Support for the Extricom Wireless Controllers

2010-12-14	Olivier Bilodeau <obilodeau@inverse.ca>
	Version bump to 2.0.0

	* pf/lib/pf/SNMP.pm: Fixes to VoIP removed some commented code

	* pf/docs/PacketFence_Administration_Guide.odt: New Production DHCP
	access section. Reworked other places here and there and fixed some
	sections based on testing feedback.

	* pf/lib/pf/node.pm: Fixed an issue where a node's last locationlog
	information was wrong. SQL JOIN problem.

2010-12-13	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt: Re-organization and 
	new documentation in the Administration Guide. Splitting concepts from
	sample documentation.

	* pf/conf/templates/configurator/reg-detect-vlan.conf, 
	pf/conf/templates/configurator/reg-vlan.conf,
	pf/conf/templates/configurator/zen-vlan.conf: Added vlan.dhcpd and 
	vlan.named set to enabled by default. This is because our new 
	configuration is using networks.conf to automatically manage the 
	DHCP and DNS Servers. Along with updated documentation this fixes #1113.
	http://www.packetfence.org/bugs/view.php?id=1113

2010-12-10	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Network_Devices_Configuration_Guide.odt: Added
	Juniper documentation for MAC Authentication (Juniper's MAC RADIUS)

	* pf/lib/pf/Nortel.pm: Documented an odd behavior with a Nortel
	BayStack 470 that was in a stacked context in a previous life.

	* pf/lib/pf/SNMP/Cisco/Catalyst_2960.pm, pf/lib/pf/SNMP/Juniper.pm,
	pf/lib/pf/SNMP/MockedSwitch.pm, pf/lib/pf/SNMP.pm, pf/lib/pf/radius.pm:
	VoIP refactoring so that RADIUS VSA's for VoIP support are determined
	by the switch modules instead of pf::radius. Also added 
	supportsRadiusVoip capability so that switch can say they support VoIP
	over RADIUS themselves.

	* pf/lib/pf/SNMP/Aruba.pm, pf/lib/pf/SNMP/HP/Controller_MSM710.pm,
	pf/lib/pf/SNMP.pm: Code to extract SSID out of RADIUS Access-Request 
	attributes has been properly distributed to AP/Controller modules.

	* Renamed pf/README_SWITCHES to pf/README.network-devices: SWITCHES
	is misleading so it's changed network-device

2010-12-09	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/SNMP/Juniper/EX.pm, pf/lib/pf/SNMP/Juniper.pm, 
	pf/lib/pf/SNMP.pm, pf/sbin/pfsetvlan: Juniper EX series Wired MAC 
	Authentication support without Voice over IP
	Side effects:
	- pfsetvlan now handles WIRED_MAC_AUTH properly (instead of as a failed 
	  port-security traps not enabled type)
	- Accidental inclusion of extractSsid() refactoring (will be completed
	  later)

2010-12-06	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt: Changes to our default
	FreeRADIUS configuration to fix some issues with VLAN assignment over
	tunneled EAP types.
	
2010-12-06      Francois Gaudreault <fgaudreault@inverse.ca>
	* pf/lib/pf/SNMP/Meru/MC3000.pm, pr/lib/pf/SNMP/Meru.pm :
	New module to support the Meru Networks MC3000 Wireless Controler
	(Meru::MC3000)

2010-12-01	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/addons/802.1X/packetfence.pm, pf/lib/pf/WebAPI.pm, 
	pf/lib/pf/radius.pm: Now sending the whole RAD_REQUEST hash to server
	side so we can take more proper educated guess about the hardware in
	the proper pf::SNMP::.. modules. Will be used for SSID discovery and
	EAP-based MAC Authentication.
	EAP-based MAC Authentication's Connection-Type is now properly set to
	WIRED_MAC_AUTH (was WIRED_802_1X)

2010-11-29	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/addons/802.1X/packetfence.pm,
	pf/docs/PacketFence_Administration_Guide.odt: Now able to detect MAC
	Authentication over EAP and set Cleartext-Password appropriately for
	the clients to be able to authenticate. Paves the way to MAC Auth with
	Juniper and Extreme Networks.
	
	* Dropping pf/docs/PacketFence_Installation_Guide.odt: Dropping this
	guide in favor of the Administration Guide where we took all that was
	good of the Install guide early last week.

	* pf/conf/dhcp_fingerprints.conf: Added a new Fedora Linux
	fingerprint (Fedora Linux 13)

2010-11-26      Regis Balzard <rbalzard@inverse.ca>
	* pf/configurator.pl: Creates a proper conf/networks.conf file based on
	user input. Fixes #1112;
	http://www.packetfence.org/bugs/view.php?id=1112

	* pf/docs/PacketFence_Administration_Guide.odt: Updated documentation
	- new DHCP, DNS instructions integrated with networks.conf
	- Changes to routed networks explanations

2010-11-26	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/bin/pfcmd, pf/conf/ui.conf, pf/html/admin/common.php, 
	pf/html/admin/configuration/switches.php,
	pf/html/admin/configuration/violation.php, pf/html/admin/node/view.php,
	pf/html/admin/violation/view.php, pf/lib/pf/config.pm, pf/lib/pf/os.pm,
	pf/lib/pf/violation.pm: Web Admin UI changes. Fixes #820 and #1075;
	- Changes to hidden fields
	- Changes to order of fields
	- Changes to default sorting 
	- Added ID field to dhcp fingerprints view
	- Updated ConnectionType strings to be shorter and avoid confusing open SSIDs
	and auth type
	http://www.packetfence.org/bugs/view.php?id=820
	http://www.packetfence.org/bugs/view.php?id=1075

	* pf/bin/pfcmd_vlan: pfcmd_vlan now logs in logs/packetfence.log like
	everyone else and when the -verbose flag is passed it'll log both to
	file and to STDOUT. Fixes #874;
	http://www.packetfence.org/bugs/view.php?id=874

2010-11-25      Regis Balzard <rbalzard@inverse.ca>
	* pf/lib/pf/config.pm: fixed an issue when reading 'trunkPort' in
	floating_network_device.conf

2010-11-25	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/README_SWITCHES: Added MAC Auth column and started a draft of a
	wireless table

	* pf/cgi-bin/redir.cgi, pf/cgi-bin/release.cgi, pf/cgi-bin/register.cgi:
	pf::web stopped exporting methods in 1.9 branch but new method 
	get_client_ip was still called as if it did in this branch. Fixed this.

	* pf/lib/pf/node.pm: Fixed node_add problem introduced when doing 
	database refactoring

	* pf/addons/recovery.pl, pf/bin/pfcmd, pf/lib/pf/vlan.pm, 
	pf/sbin/pfsetvlan, pf/t/vlan.t: API change
	- Renamed subroutines names from procedural to object-oriented style
	- Removed custom_ from custom_doWeActOnThisTrap

	* pf/ChangeLog, pf/lib/pf/radius.pm, pf/lib/pf/vlan/custom.pm, 
	pf/lib/pf/vlan.pm, pf/t/vlan.t: API improvements and new code samples
	regarding VLAN assignments. Fixes #971;
	- Renamed subroutines names from procedural to object-oriented style
	- shouldAutoRegister now has 802.1X username in its parameters
	- Unified interfaces between getViolationVlan, getRegistrationVlan and
	getNormalVlan
	- Added 802.1X username in getViolationVlan, getRegistrationVlan and
	getNormalVlan
	- Added samples in getNormalVlan and shouldAutoRegister
	- POD improvements
	http://www.packetfence.org/bugs/view.php?id=971

	* pf/cgi-bin/register.cgi: Removed node.vlan assignment on captive 
	portal registration

2010-11-24	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/bin/flip.pl, pf/html/admin/common.php,
	pf/lib/pf/SNMP/Cisco/Catalyst_2960.pm, pf/lib/pf/SNMP/MockedSwitch.pm,
	pf/lib/pf/SNMP.pm, pf/lib/pf/config.pm, pf/lib/pf/radius/custom.pm,
	pf/lib/pf/radius.pm, pf/lib/pf/vlan.pm, pf/t/data/switches.conf,
	pf/t/radius.t: MAC Authentication Bypass is now Wired MAC 
	Authentication after some discussion. Changes required all over the
	place.

	* pf/t/pod.t and others: Important fix to POD doc test removing false
	alarms and fixed all missing sections from basic test

	* Moved test/ into addons/: test/ was a misleading directory for these
	scripts

	* Renamed pf/addons/802.1X/rlm_perl_packetfence.pl to 
	pf/addons/802.1X/packetfence.pm: Old name didn't bring any added value
	and was kind of obscure, so it's renamed now to represent a module.
	Note in UPGRADE and tests updated.

2010-11-23	Olivier Bilodeau <obilodeau@inverse.ca>
	* docs/PacketFence_Administration_Guide.odt: A lot of content rework
	for the admin guide. All big reworks are done, now we need to cleanup,
	make it coherent and fix notes in comments.

2010-11-22	Francois Gaudreault <fgaudreault@inverse.ca>
	* Add 802.1x configuration in the Network Devices configuration guide

2010-11-22	Olivier Bilodeau <obilodeau@inverse.ca>
	* docs/PacketFence_Administration_Guide.odt: A lot of content rework
	for the admin guide. It is still in a very rough stage though.

	* Added pf/docs/PacketFence_Network_Devices_Configuration_Guide.odt:
	New guide focused exclusively on network device configuration.
	Currently, a draft with a mix of the admin guide switch config and new
	material.

2010-11-19	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/installer.pl, pf/addons/snort/oinkmaster.conf,
	pf/conf/violations.conf: New URL for emerging threats rules and also 
	took the opportunity to add new rulesets (botnet, malware, shellcode, 
	trojans and worms) Fixes #1102;
	http://www.packetfence.org/bugs/view.php?id=1102

	* renamed pf/db/upgrade-1.9.0-1.10.0.sql to 
	pf/db/upgrade-1.9.0-2.0.0.sql, modified pf/UPGRADE:
	DB upgrade script now 1.9.0 to 2.0.0.

	* pf/bin/pfcmd, pf/installer.pl, pf/t/pfcmd.t: Getting rid of the 
	database md5sums. Fixes #973; 
	They were used to identify database 'version' but were never reliable.
	http://www.packetfence.org/bugs/view.php?id=973

	* pf/db/pf-schema-2.0.0.sql, pf/installer.pl, pf/packetfence.spec:
	New database schema for upcoming release. Package and installer 
	properly referencing to it.

	* pf/lib/pf/vlan.pm: Returning registration VLAN if node status is 
	pending.

	* pf/addons/captive-portal/registration-sms-confirmation/sms_carrier.sql:
	SMS carrier database useful for registration confirmation over SMS

	* pf/html/admin/node/import.php: Now removing uploaded file after
	import. This is what was initially planned.

	* pf/addons/loadMACintoDB.pl, pf/UPGRADE: Dropping loadMACintoDB.pl
	script in favor of new node import facility available on CLI or web
	admin.

2010-11-17	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/t/util.t, pf/lib/pf/import.pm, pf/lib/pf/util.pm, pf/t/all.t,
	pf/t/smoke.t: Fixed a very long standing issue: valid_mac and
	clean_mac didn't properly parse xxxx.xxxx.xxxx formatted MACs.
	Also calling clean_mac on node importation allows it to be more
	tolerant on MAC format input. Added tests!

	* pf/html/admin/check_login.php, pf/html/admin/common/adminperm.inc, 
	pf/html/admin/common/helpers.inc, pf/html/admin/common.php: Removed php
	script terminators (?>) from included files since they are not required
	and cause problems (newlines after them corrupt jpgraph's graphics)

2010-11-16	Regis Balzard <rbalzard@inverse.ca>
	* pf/bin/pfcmd: Added a log to indicate which service and command is 
	called. This would help debugging.

2010-11-16	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/html/admin/node/import.php, pf/lib/pf/import.pm, pf/bin/pfcmd,
	pf/conf/ui.conf, pf/html/admin/check_login.php, 
	pf/html/admin/common/helpers.inc, pf/html/admin/node/help.html,
	pf/lib/pf/pfcmd/help.pm, pf/lib/pf/pfcmd.pm: Node importation through 
	CLI and Web Administration. Automatically registers nodes on 
	importation.

2010-11-15	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/conf/dhcp_fingerprints.conf: Added a Gentoo DHCP fingerprint

2010-11-10	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/conf/locale/en/LC_MESSAGES/packetfence.po,
	pf/conf/locale/fr/LC_MESSAGES/packetfence.po: Tells users to reboot if
	they are behind a phone.

2010-11-09	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/db/pf-schema-1.10.0.sql: Removed the deprecated TYPE= syntax for 
	the current database schema file. Replaced by ENGINE=.

2010-11-08	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/conf/dhcp_fingerprints.conf: Added D-Link, Trendnet and Belkin
	Wireless Router fingerprints and removed the Fluke one (conflicted
	with Belkin and I wasn't sure of the source of the fluke one). Thanks
	to David LaPorte for the fingerprints!

2010-11-04	Regis Balzard <rbalzard@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt: Added instructions on
	how to configure FreeRADIUS v2 to listen on a virtual IP.

2010-11-01	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/html/user/content/templates/pending.html, pf/cgi-bin/redir.cgi,
	pf/html/admin/common/helpers.inc, pf/html/admin/common.php, 
	pf/html/admin/node/edit.php, pf/lib/pf/node.pm, pf/lib/pf/vlan.pm,
	pf/lib/pf/web.pm: New 'pending' node status with updated VLAN
	assignment call (stay in registration). This enables approval
	workflows in user registrations. 

	* pf/lib/pf/web/util.pm: New web utilities file.

2010-10-30	Olivier Bilodeau <obilodeau@inverse.ca>
	* conf/dhcp_fingerprints.conf: Added Avaya Phone and Aruba Access 
	Point 200 DHCP fingerprints.
	
2010-10-29	Francois Gaudreault <fgaudreault@inverse.ca>
	* pf/addons/snort/oinkmaster.conf: Update url section for the new
	emerging URL

2010-10-27	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/web, pf/lib/pf/web/custom.pm, pf/UPGRADE, 
	pf/cgi-bin/redir.cgi, pf/cgi-bin/register.cgi, pf/cgi-bin/release.cgi,
	pf/lib/pf/web.pm, pf/packetfence.spec: New pf::web::custom file with
	a recipe to redefine subs in pf::web in a clean way. Consumers had to
	change so this is a 'breaking' update. Made the mention in UPGRADE.
	Will simplify user upgrades. Partially fixes #1045;
	http://www.packetfence.org/bugs/view.php?id=1045

2010-10-26	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/services/apache.pm, pf/t/integration.t, 
	pf/conf/documentation.conf, pf/conf/pf.conf.defaults, 
	pf/conf/templates/httpd.conf.apache22, pf/lib/pf/freeradius.pm,
	pf/lib/pf/services.pm, pf/t/all.t, pf/t/services.t, pf/t/smoke.t,
	pf/t/integration.t, pf/packetfence.spec: New feature: Passthrough using
	mod_rewrite and reverse proxying. Leveraging existing configuration in
	pf.conf (passthroughs section). Fixes #772;
	Refactored new config generation into it's own pf::services::apache
	module. Pushed along with some new tests.
	http://www.packetfence.org/bugs/view.php?id=772

2010-10-25	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt: Documented violation
	with external URL behavior and the redirect_url feature.

	* pf/addons/integration-testing/violations.conf, pf/lib/pf/services.pm,
	pf/conf/templates/httpd.conf.apache22, UPGRADE:
	Repaired violations with absolute URLs making PacketFence's captive 
	portal act as a reverse proxy. Fixes #1024;
	http://www.packetfence.org/bugs/view.php?id=1024
	
2010-10-25	Regis Balzard <rbalzard@inverse.ca>
	* pf/addons/802.1X/rlm_perl_packetfence.pl, pf/UPGRADE, pf/NEWS: 
	Re-worked the entire module: changed the tests order so we now filter
	by SSID; got rid of anything related to guest since guest should now be
	managed a distinct category; aadded a find_ssid() function in order to
	read the SSID name from the attributes sent in the request; removed
	many SQL queries and changed the one reading the node info; ...

2010-10-21	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/conf/dhcp_fingerprints.conf: New DHCP Fingerprints:
	Cisco/Linksys, Netgear, D-Link Home Wireless Routers, Sony Ericsson
	Android and Fluke DTX (network tester)

	* pf/docs/PacketFence_Administration_Guide.odt: Added new "MySQL
	optimization tool" section under MySQL optimizations and put a new 
	title on top of the Captive portal optimizations (they were under
	MySQL optimizations!?)

2010-10-15      Francois Gaudreault <fgaudreault@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt: Addition of some
	documentation about log rotation.

2010-10-15	Francois Gaudreault <fgaudreault@inverse.ca>
	* pf/docs/PacketFence_Installation_Guide.odt: Add the groupinstall
	line for packetfence install.
	* pf/docs/PacketFence_Administration_Guide.odt: Addition of some
	documentation about Snort and Oinkmaster.

2010-10-13	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt: Revamped SMC section
	of the guide and added support instructions for 6128 L2.
	Also clarified some FreeRADIUS config.

	* pf/lib/pf/SNMP/SMC/TS6128L2.pm, pf/NEWS, pf/README_SWITCHES, 
	pf/UPGRADE, pf/html/admin/configuration/switches_add.php,
	pf/html/admin/configuration/switches_edit.php,
	pf/lib/pf/SNMP/SMC/TS6224M.pm, pf/lib/pf/SNMP/SMC/TS8800M.pm,
	pf/lib/pf/SNMP/SMC.pm, pf/t/coding-style.t, pf/t/critic.t,
	pf/t/hardware-snmp-objects.t, pf/t/pod.t: New hardware support: SMC 
	TigerStack 6128 L2 in port-security (feature sponsored by Seattle 
	Pacific University)
	Also in there is a big update to the 8800M module powering the 8824M 
	and the 8848M.

	* Lots: Whitespace changes to lots of files based on the result of the
	last coding-style test results

2010-10-12	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/addons/freeradius-integration, 
	pf/addons/freeradius-integration/README, 
	pf/addons/freeradius-integration/freeradius-nas-table.sql, 
	pf/lib/pf/freeradius.pm, pf/bin/pfcmd, pf/conf/switches.conf, 
	pf/conf/ui.conf, pf/html/admin/configuration/switches.php,
	pf/lib/pf/SNMP.pm, pf/lib/pf/SwitchFactory.pm, pf/lib/pf/pfcmd/pfcmd.pm,
	pf/t/SwitchFactory.t, pf/t/coding-style.t, pf/t/critic.t, 
	pf/t/data/switches.conf, pf/t/data.t, pf/t/pf.t: New radiusSecret 
	parameter in conf/switches.conf. This allows to automatically configure
	FreeRADIUS' clients.conf (NAS aka client switches or APs). Right now
	it's disabled by default but one can enable it using the new addons
	instructions (addons/freeradius-integration/README). Fixes #1028;
	http://www.packetfence.org/bugs/view.php?id=1028

2010-10-08	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/web.pm: A well-placed typo was introduced in revno: 
	bb21d5f588c910e0c0bbc73881056dde72017518. I'm glad I fixed it.
	Also improved indentation of the logger call while I was at it.

	* pf/addons/802.1X/rlm_perl_packetfence_soap.pl: Improved SSID
	autodetection for Colubris Wirless (HP ProCurve) 

2010-10-08	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/violation.pm: Fixes to violation priorities. They were
	inforced in the reverse order which broke scans when using default
	configuration files.

	* pf/bin/pfcmd: Better error reporting on file permission errors.
	Fixes #1088;
	http://www.packetfence.org/bugs/view.php?id=1088

	* pf/t/coding-style.t: New coding-style test suite that validates
	presence of tab characters for now. Added to all and smoke test
	suites.

2010-10-07	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/locationlog.pm, pf/sbin/pfsetvlan: Important fixes to the
	changes introduced for #995 and #1002. SQL errors and pfsetvlan thread
	crashes.

	* pf/lib/pf/radius.pm, pf/t/radius.t: Standardized method names to the
	object form. Updated related tests.

	* pf/lib/pf/SNMP/Cisco/Catalyst_2950.pm, 
	pf/lib/pf/SNMP/Cisco/Catalyst_2960.pm, pf/lib/pf/SNMP/MockedSwitch.pm,
	pf/lib/pf/SNMP.pm, pf/lib/pf/radius.pm, pf/t/data/switches.conf, 
	pf/t/radius.t: pf::radius now verifies if switch supports Wired MAB 
	and 802.1X before processing request.
	Change of default behavior: A request from a switch not defined in 
	switches.conf will fail now. Before we were trying to be nice and load 
	the settings of the default switch but we decided that it wasn't nice 
	for users if they don't realize something wrong first.
	Made test pass and added a couple of them.

2010-10-07      Regis Balzard <rbalzard@inverse.ca>
	* pf/lib/pf/SNMP/HP/Controller_MSM710.pm, pf/README_SWITCHES, 
	pf/html/admin/configuration/switches_add.php,
	pf/html/admin/configuration/switches_edit.php, pf/t/critic.t, 
	pf/t/hardware-snmp-objects.t, pf/t/pod.t: Added support for HP ProCurve
	MSM710 Mobility Controller.

2010-10-06	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/conf/dhcp_fingerprints.conf: Added HP ProCurve Access Point and
	Controller fingerprints and Ricoh MFP.

	* pf/conf/templates/httpd.conf.apache22: Apache debugging
	instructions. Commented by default only there as a reminder.

2010-10-06	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/html/admin/node/edit.php: Fixed a regression where node fields 
	coming from locationlog where set to be editable and would cause 
	grammar failure during node editing.

	* pf/addons/proxy-bypass/README, 
	pf/addons/proxy-bypass/squid-redirector.pl, 
	pf/addons/proxy-bypass/squid.conf-sample.patch, pf/cgi-bin/redir.cgi,
	pf/cgi-bin/register.cgi, pf/cgi-bin/release.cgi, 
	pf/html/user/content/index.php, pf/lib/pf/config.pm, pf/lib/pf/web.pm:
	New feature: Client Proxy Interception (proxy-bypass)
	Requires squid and is not useful to everyone so it is in addons but 
	it's easy to install.
	- squid config + redirector script
	- Provided requirements, install instructions and basic troubleshooting.
	- IP lookup code updated in core
	Fixes #1035;
	http://www.packetfence.org/bugs/view.php?id=1035

2010-10-01	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/radius.pm, pf/lib/pf/vlan.pm: Optional auto-registration
	of EAP authenticated devices in order.
	Example code more proper, re-ordered parameters for 
	getNodeInfoForAutoReg to make the interface consistent with other 
	related calls. Last touch on #1002;
	http://www.packetfence.org/bugs/view.php?id=1002

	* pf/NEWS, pf/conf/ui.conf, pf/db/pf-schema-1.10.0.sql, 
	pf/db/upgrade-1.9.0-1.10.0.sql, pf/html/admin/node/view.php,
	pf/lib/pf/locationlog.pm, pf/lib/pf/lookup/node.pm, pf/lib/pf/node.pm
	pf/lib/pf/pfcmd/report.pm, pf/lib/pf/pfcmd.pm, pf/lib/pf/radius.pm
	pf/sbin/pfdhcplistener, pf/sbin/pfsetvlan: Adding dot1x_username and 
	ssid to locationlog and exposing it through node_view and friends. 
	Fixes #995 and #1002;
	Required several changes to the booking aspects of packetfence so it is
	a potentially destabilizing change. Database changes were made also.
	http://www.packetfence.org/bugs/view.php?id=995
	http://www.packetfence.org/bugs/view.php?id=1002

2010-09-30	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/UPGRADE, pf/addons/autodiscover.pl, 
	pf/addons/convertToPortSecurity.pl, pf/addons/loadMACintoDB.pl, 
	pf/addons/recovery.pl, pf/conf/ui.conf, pf/db/pf-schema-1.10.0.sql, 
	pf/db/upgrade-1.9.0-1.10.0.sql, pf/html/admin/common.php, 
	pf/html/admin/node/edit.php, pf/html/admin/node/view.php, 
	pf/lib/pf/SNMP.pm, pf/lib/pf/db.pm, pf/lib/pf/locationlog.pm, 
	pf/lib/pf/lookup/node.pm, pf/lib/pf/node.pm, pf/lib/pf/pfcmd/pfcmd.pm, 
	pf/lib/pf/pfcmd/report.pm, pf/lib/pf/radius/custom.pm, 
	pf/lib/pf/radius.pm, pf/lib/pf/util.pm, pf/lib/pf/violation.pm, 
	pf/lib/pf/vlan/custom.pm, pf/lib/pf/vlan.pm, pf/sbin/pfdhcplistener, 
	pf/t/vlan.t: The node table no longer carries duplicated data from 
	locationlog. Fixes #914; 
	As a side benefit the purpose of bypass_vlan is now more clear than 
	only vlan. Fixes #977; 
	pf::node calls still join with the locationlog so the changes are 
	somewhat transparent. Updated all callers. 
	- new locationlog_insert_closed to insert closed entries (used by 
	dhcplogger for option82 enabled packets)
	- cleaner SQL queries
	- locationlog_synchronize no longer needs to keep the node table updated
	- changed default hidden fields and default items ordering in node view
	and edit
	- added default sorting options to node view (related to #820) 
	- no longer setting node.vlan to current switch's vlan in node register
	- pf::vlan no longer needs to handle updated node calls 
	Also misc cleanup and fixes
	http://www.packetfence.org/bugs/view.php?id=914
	http://www.packetfence.org/bugs/view.php?id=977

	* pf/addons/loadMACintoDB.pl: Added minimal POD for file and added to 
	minimum test suites

2010-09-28	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/packetfence.spec: Updated files manifest to remove pdp.cgi.

2010-09-27	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt: Updated documentation
	to reflect the re-worked FreeRADIUS modules using post-auth instead of
	authorize calls.

	* pf/addons/802.1X/rlm_perl_packetfence_soap.pl: Using post-auth 
	instead of authorize for the FreeRADIUS module, enables some incredible
	stuff like auto-registration of successful EAP connections, etc. Fixes 
	#1034;
	http://www.packetfence.org/bugs/view.php?id=1034

	* pf/addons/802.1X/rlm_perl_packetfence.pl, UPGRADE: Re-worked the 
	module to work on post-auth calls instead of authorize calls. This 
	avoid work being done when the EAP credentials don't even pass and
	improves overall correctness of the system (autoregistration in this
	module is now possible). It can also improve performance in network 
	with a lot of wrong 802.1X requests as they no longer exercise the 
	PacketFence module. Backport of fix #1034 from trunk;
	http://www.packetfence.org/bugs/view.php?id=1034

	* pf/conf/dhcp_fingerprints.conf: Removed a space in the fingerprints 
	that's causing the Symbian OS to be the universal fingerprint for
	nodes that don't have a fingerprint.

2010-09-24	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/addons/802.1X/rlm_perl_packetfence.pl: got rid of an unnecessary
	te1st

2010-09-24	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/radius.pm, pf/lib/pf/vlan.pm: Added RADIUS User-Name to the 
	method signature of pf::vlan::getNodeInfoForAutoReg. Allows to record 
	the username of a node that would be automatically registered by policy.
	Fixes #1000;
	http://www.packetfence.org/bugs/view.php?id=1000

	* Added pf/lib/pf/mod_perl_require.pl, modified 
	pf/conf/templates/httpd.conf.apache22: Pre-loading PacketFence modules
	using a PerlRequire statement. Improves per-request latency and overall
	performance. Thanks to Josh Ward from University of Oregon for the 
	initial research on the fix!

	* Renamed pf/cgi-bin/pdp.cgi to pf/lib/pf/WebAPI.pm, modified
	pf/addons/802.1X/rlm_perl_packetfence_soap.pl, 
	pf/conf/templates/httpd.conf.apache22, pf/lib/pf/WebAPI.pm,
	pf/lib/pf/radius.pm, pf/lib/pf/vlan.pm, pf/t/critic.t, pf/t/pod.t
	pf/t/podCoverage.t, pf/t/stress-test/soap-calls-radius_authorize
	pf/t/stress-test/soap-calls-snort, 
	pf/addons/pfdetect_remote/sbin/pfdetect_remote: Ported cgi-bin/pdp.cgi
	SOAP CGI handler to full blown mod_perl SOAP-Lite hosted module. 
	Fixes #1010; 
	Note: URI for Web Services changed from /cgi-bin/pdp.cgi to /webapi
	http://www.packetfence.org/bugs/view.php?id=1010

2010-09-23	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/node.pm: Fixed a small but important merge mistake.

2010-09-23	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/vlan.pm: Removed all Logger calls setting shared 'tid' 
	information. First they were redundant since the MDC hash is global and
	second, they are corrupting other places were we could be setting the 
	'tid' (like from a web call).

2010-09-22	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/packetfence.spec: 1.9.2dev started and removed invalid dependency.
	See #882 for details;
	http://www.packetfence.org/bugs/view.php?id=882

	* pf/NEWS, pf/conf/pf-release, 
	pf/docs/PacketFence_Administration_Guide.odt, 
	pf/docs/PacketFence_Developers_Guide.odt, 
	pf/docs/PacketFence_Installation_Guide.odt, pf/packetfence.spec, 
	pf/t/pfcmd.t: New 1.9.1 release!

	* pf/t/smoke.t: Added new smoke testsuite which is used by our building
	process. A suite of tests quick to run, with no side-effects and that 
	should always pass.

2010-09-21	Regis Balzard <rbalzard@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt:
	Updated documentation for FreeRadius 1.x and added some for 2.x. 
	Fixes bug #1036;
	http://www.packetfence.org/bugs/view.php?id=1036

	* pf/docs/PacketFence_Administration_Guide.odt:
	Updated (for clarification purpose) documentation for Cisco stacked 
	and 4500 Series switches. Fixes bug #1037;
	http://www.packetfence.org/bugs/view.php?id=1037

2010-09-21	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/cgi-bin/pdp.cgi, pf/cgi-bin/redir.cgi, pf/cgi-bin/register.cgi, 
	pf/cgi-bin/release.cgi, pf/html/admin/administration/adduser.php, 
	pf/html/admin/administration/index.php, 
	pf/html/admin/administration/services.php, 
	pf/html/admin/administration/ui_options.php, 
	pf/html/admin/administration/version.php, 
	pf/html/admin/check_login.php, pf/html/admin/common/adminperm.inc,
	pf/html/admin/common/helpers.inc, pf/html/admin/common.php, 
	pf/html/admin/configuration/fingerprint.php, 
	pf/html/admin/configuration/floatingnetworkdevice.php, 
	pf/html/admin/configuration/floatingnetworkdevice_add.php, 
	pf/html/admin/configuration/floatingnetworkdevice_edit.php, 
	pf/html/admin/configuration/index.php, 
	pf/html/admin/configuration/interfaces.php, 
	pf/html/admin/configuration/interfaces_add.php, 
	pf/html/admin/configuration/interfaces_edit.php, 
	pf/html/admin/configuration/main.php, 
	pf/html/admin/configuration/more_info.php, 
	pf/html/admin/configuration/networks.php, 
	pf/html/admin/configuration/networks_add.php, 
	pf/html/admin/configuration/networks_edit.php, 
	pf/html/admin/configuration/switches.php, 
	pf/html/admin/configuration/switches_add.php, 
	pf/html/admin/configuration/switches_edit.php, 
	pf/html/admin/configuration/violation.php, 
	pf/html/admin/configuration/violation_add.php, 
	pf/html/admin/configuration/violation_edit.php, 
	pf/html/admin/exporter.php, pf/html/admin/footer.php, 
	pf/html/admin/header.php, pf/html/admin/index.php, 
	pf/html/admin/login.php, pf/html/admin/node/add.php, 
	pf/html/admin/node/categories.php, 
	pf/html/admin/node/categories_add.php, 
	pf/html/admin/node/categories_edit.php, 
	pf/html/admin/node/edit.php, pf/html/admin/node/index.php, 
	pf/html/admin/node/lookup.php, pf/html/admin/node/view.php, 
	pf/html/admin/person/add.php, pf/html/admin/person/edit.php, 
	pf/html/admin/person/index.php, pf/html/admin/person/lookup.php, 
	pf/html/admin/person/view.php, pf/html/admin/printer.php, 
	pf/html/admin/scan/edit.php, pf/html/admin/scan/index.php, 
	pf/html/admin/scan/results.php, pf/html/admin/scan/scan.php, 
	pf/html/admin/status/dashboard.php, pf/html/admin/status/grapher.php, 
	pf/html/admin/status/graphs.php, pf/html/admin/status/index.php, 
	pf/html/admin/status/reports.php, 
	pf/html/admin/status/sajax-dashboard.php, 
	pf/html/admin/violation/add.php, pf/html/admin/violation/edit.php, 
	pf/html/admin/violation/index.php, pf/html/admin/violation/view.php, 
	pf/html/user/content/index.php, pf/html/user/content/style.php, 
	pf/html/user/content/violations/banned_devices.php, 
	pf/html/user/content/violations/banned_os.php, 
	pf/html/user/content/violations/darknet.php, 
	pf/html/user/content/violations/failed_scan.php, 
	pf/html/user/content/violations/generic.php, 
	pf/html/user/content/violations/lsass.php: Added copyright, license and
	author info. Fixes #764;
	http://www.packetfence.org/bugs/view.php?id=764

	* pf/lib/pf/node.pm: Enforcing maxnodes the same way in register.cgi 
	and pf::node's node_register. Prevent situations where unregistered 
	nodes would be accounted for when enforcing maxnodes causing errors
	internally but not visible in the captive portal. So this is both a 
	usability and correctness fix. Fixes #1057;
	http://www.packetfence.org/bugs/view.php?id=1057

	* pf/lib/pf/violation.pm: Added validation for violation grace period
	in violation_trigger. Avoids unnecessary load in certain cases. 
	Fixes #857;
	http://www.packetfence.org/bugs/view.php?id=857

	* pf/cgi-bin/register.cgi, pf/conf/templates/httpd.conf.apache22, 
	pf/lib/pf/web.pm, pf/packetfence.spec: Captive portal now using 
	mod_perl. Huge performance gain. Up to 23x faster on some workloads we
	tested. Fixes #879;
	http://www.packetfence.org/bugs/view.php?id=879

2010-09-21	Regis Balzard <rbalzard@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt:
	Added a section in the performance optimization section regarding 
	blocking non browser requests in the captive portal

	* pf/conf/dhcp_fingerprints.conf: New DHCP fingerprints: Cisco,
	Netgear Router, Quanta Microsystems, Debian-based Linux, Nokia Tablet,
	Symbian OS. Thanks to Sam Winotai (from Loyola Marymount University) 
	for the contribution! 

2010-09-20	Regis Balzard <rbalzard@inverse.ca>
	* pf/lib/pf/SNMP/Nortel/BayStack4500.pm: removed this file 

	* pf/lib/pf/SNMP/Nortel/ERS4500.pm: added this file

	* pf/README_SWITCHES, pf/html/admin/configuration/switches_add.php, 
	pf/html/admin/configuration/switches_edit.php, pf/t/critic.t, 
	pf/t/hardware-snmp-objects.t, pf/t/pod.t: Fixed the error in the 4500 
	module name (was originally named BayStack 4500 but it is actually ERS
	4500).

2010-09-17	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/conf/dhcp_fingerprints.conf: Fixed Siemens optiPoint WL2 
	Professional fingerprint.

	* pf/html/admin/common.php, pf/lib/pf/pfcmd.pm: pfcmd's node filters now
	supports arguments with spaces as long as they are double-quoted. 
	Viewing nodes per category on the admin interface was updated to use 
	this facility. Fixes #1056;
	http://www.packetfence.org/bugs/view.php?id=1056

	* pf/html/admin/common.php, pf/html/admin/node/view.php: Table 
	refreshes now re-do a count so paging in node table doesn't brake on
	deletions. Fixes #1055;
	http://www.packetfence.org/bugs/view.php?id=1055

2010-09-17	Regis Balzard <rbalzard@inverse.ca>
	* pf/lib/pf/SNMP/Nortel/ERS2500.pm, pf/README_SWITCHES, 
	pf/html/admin/configuration/switches_add.php,
	pf/html/admin/configuration/switches_edit.php, pf/t/critic.t, 
	pf/t/hardware-snmp-objects.t, pf/t/pod.t: Added support for Nortel ERS 
	2500 Series.

2010-09-17	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/SNMP/Extreme/Summit.pm, 
	pf/lib/pf/SNMP/Extreme/Summit_X250e.pm, pf/lib/pf/SNMP/Extreme.pm, 
	pf/html/admin/configuration/switches_add.php,
	pf/html/admin/configuration/switches_edit.php: 
	Re-worked port-security (MAC address Lockdown) support and added Voice
	over IP support for Extreme XOS. We removed the CLI requirement making
	it a production ready module. Thanks to Extreme Networks for sponsoring
	the feature and adding features to their ExtremeXOS making this 
	possible.

2010-09-17	Regis Balzard <rbalzard@inverse.ca>
	* pf/lib/pf/SNMP/Nortel/BayStack4500.pm, pf/README_SWITCHES, 
	pf/html/admin/configuration/switches_add.php,
	pf/html/admin/configuration/switches_edit.php, pf/t/critic.t, 
	pf/t/hardware-snmp-objects.t, pf/t/pod.t: Added support for Nortel 4500
	Series. This module will replace the one for Nortel 4550 since the code
	is the same for the entire serie.

2010-09-17	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt: Added configuration
	instructions for Extreme in port security and Voice over IP. Module is
	now identified as covering the whole Extreme XOS series and previous
	limitations were removed since the code has been fixed.

2010-09-15	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/addons/autodiscover.pl, pf/addons/loadMACintoDB.pl, 
	pf/lib/pf/node.pm, pf/sbin/pfdhcplistener, pf/UPGRADE: Removed print 
	statement from node_modify. Placed print statements in all callers that
	cares. This was an important blocker to put the captive portal in 
	mod_perl and to allow our web services back-end in trunk to work 
	reliably. Fixes #1068;
	http://packetfence.org/bugs/view.php?id=1068

	* pf/lib/pf/node.pm: node_view, node_view_with_fingerprint, 
	node_view_all now returns empty '' category instead of NULL when node 
	doesn't have a category. This is more consistent with all the other 
	fields. Fixes #1063;
	http://www.packetfence.org/bugs/view.php?id=1063

2010-09-14	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/t/critic.t, pf/t/pf.t, pf/t/pod.t: Added pf::radius and friends to
	the bare-minimal tests (critic, compile and pod). Not sure why they 
	weren't already there...
	
	* pf/lib/pf/radius.pm, pf/lib/pf/radius/constants.pm, 
	pf/lib/pf/radius/custom.pm, packetfence.spec: RADIUS constants are now 
	in a seperate file preventing odd errors when users override methods in
	pf::radius::custom. Fixes #1001;
	http://www.packetfence.org/bugs/view.php?id=1001

	* pf/sbin/pfsetvlan: Fixed merge problem introduced yesterday where
	pre-trunk code has been propagated in trunk by mistake breaking the
	build.

2010-09-13	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/vlan/custom.pm: Importing more modules to avoid people using
	custom code that doesn't compile even if they copiedy and pasted from
	pf::vlan. Fixes #1001 for pf::vlan::custom since there are no specific 
	constants defined in pf::vlan.
	http://www.packetfence.org/bugs/view.php?id=1001

	* pf/lib/pf/node.pm: Sub node_register_auto no longer exported since 
	a while. Removing at the earliest point in trunk branch revno:
	bad6d50ec65bad5779a30d488020eb49acad200d

	* pf/packetfence.spec: Package version bump to 1.10.0 to clearly mark
	a departure from 1.9.x

	* pf/addons/802.1X/rlm_perl_packetfence_soap.pl: Added SSID detection 
	for Aruba wireless controllers.

	* pf/conf/dhcp_fingerprints.conf: New DHCP fingerprints: Windows,
	Alcatel, Siemens, Cisco, Linksys, Mitel IP phones, Cisco, Enterasys,
	Trapeze APs, Debian, Ubuntu, Puppy Linux, Enterasys Switches, Nokia
	Internet Tablet, HP iLO Agents, APC UPS, Polycom Video conferencing,
	FreeBSD, Eye-Fi Wireless Memory Card, Novell Netware, Apple Netboot,
	more PXE, Solaris 8 (SunOS 5.8) and Neoware's thin clients.
	Thanks to Eric Kollmann for the contribution! See his OS/device 
	fingerprinting related work at: http://myweb.cableone.net/xnih/

2010-09-10	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/sbin/pfsetvlan: Added logging to highlight the fact that we are
	connecting on a node's previous switch. Will prevent confusing people 
	like me. Fixes #1052;
	http://www.packetfence.org/bugs/view.php?id=1052
	Also made some unnecessary whitespace adjustments.. sorry I couldn't 
	resist...

	* pf/bin/pfcmd: Fixes to the try {} catch {} syntax. No bug reported 
	but I found out it could be problematic since I was bitten by this 
	when working on the upcoming error handling in pf::SNMP::Extreme.

2010-09-08	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/SNMP/Aruba.pm, pf/lib/pf/SNMP/Cisco/Catalyst_2960.pm, 
	pf/lib/pf/SNMP/Cisco/Catalyst_3550.pm: Added some documentation for 
	Cisco (2960, 3550) and Aruba in the SNMP modules

	* pf/docs/PacketFence_Administration_Guide.odt: Added configuration
	instructions for Extreme in port security.

2010-09-07	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/SNMP/Cisco/ISR_1800.pm: Connection error is now shown in 
	the logs if there is a connection problem.

	* pf/lib/pf/SNMP/Extreme/nas-pb.yml, pf/lib/pf/SNMP/Extreme/Summit.pm, 
	pf/lib/pf/SNMP/Extreme/Summit_X250e.pm, pf/lib/pf/SNMP/Extreme.pm, 
	pf/lib/pf/SNMP/constants.pm: Added port-security support for Extreme 
	XOS, called MAC Address Lockdown in Extreme's language. It relies on 
	CLI for now so it is not recommended for large networks. Extreme is 
	working on providing a solution for this.

2010-09-03	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/SNMP/MockedSwitch.pm, pf/t/hardware-snmp-objects.t: Added
	new exceptions in the tests and implemented new trunk specific subs. So
	that the new tests passes.

2010-09-02	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/SNMP/MockedSwitch.pm, pf/t/hardware-snmp-objects.t: New 
	pf::SNMP:MockedSwitch that will be used to test the efficiency of our
	pfsetvlan daemon. Some tests to make sure it stays relevant.

	* pf/docs/PacketFence_Administration_Guide.odt, pf/lib/SNMP/HP.pm:
	Documented an HP behavior regarding port-security.

2010-08-27	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/SNMP/constants.pm: Added Q-BRIDGE section to the SNMP
	constants and dot1qStaticUnicastStatus types.

2010-08-10	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/packetfence.spec, pf/t/critic.t, pf/t/pf.t, pf/t/pod.t: Added 
	perl(Authen::Radius) as a dependency in the RPM spec file. It's required
	by the optional radius authentication in the captive portal. Fixes #1047;
	http://packetfence.org/bugs/view.php?id=1047

	Added the relevant tests to catch any similar situation in the future.

2010-08-10	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/SNMP/Intel/Express_460.pm: Ported Intel Express 460's web
	screenscraping code to use new web services parameters

	* pf/lib/pf/SNMP.pm, pf/lib/pf/SwitchFactory.pm, pf/t/SwitchFactory.t, 
	pf/t/data/switches.conf: pf::SNMP and SwitchFactory now supports new 
	Web Services switches.conf parameters.
	Added test cases

	* pf/UPGRADE: Added deprecation warning for htaccessUser and htaccessPwd

	* pf/bin/pfcmd, pf/conf/switches.conf, pf/conf/ui.conf,
	pf/docs/PacketFence_Administration_Guide.odt,
	pf/html/admin/configuration/switches.php,
	pf/html/admin/configuration/switches_add.php,
	pf/html/admin/configuration/switches_edit.php,
	pf/lib/pf/pfcmd/pfcmd.pm: switches.conf now accepts Web Services
	related configuration (wsTransport, wsUser, wsPwd)
	Also updated all related helpers, interfaces and documentation

2010-08-09	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/html/admin/login.php: Admin auth mechanism localuser+ldappass
	also fallbacks to localpass on error

	* pf/UPGRADE: Added an upgrade note about the Admin interface access
	control

2010-08-08	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/t/stress-test/captive-portal.txt: Added some information on how 
	to stress test the captive portal 

2010-08-05	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt: Added two new Q&A:
	- How can users authenticate using LDAP or Active Directory (AD) 
	instead of using a local flat file?
	- How can I provide different rights to users of the admin Web 
	interface?

2010-08-04	Olivier Bilodeau <obilodeau@inverse.ca>
	Merged org.packetfence.feature.granular-admin-access with revno
	2c753bafa6f766c330510b2895729ecf42cd71d9

	* pf/conf/pf-release, pf/packetfence.spec, pf/t/pfcmd.t: Officially 
	entering pre-release snapshots land for 1.9.1

	* pf/README_SWITCHES: Aligned content with webiste regarding Aruba
	support

	* pf/lib/pf/scan.pm: Increasing log severity for a nessus scan error
	Heading towards #1032 improvements;
	http://www.packetfence.org/bugs/view.php?id=1032

2010-08-03	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/conf/dhcp_fingerprints.conf: New DHCP fingerprints: Cisco
	Wireless Access Point and FortiOS

2010-07-23	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/NEWS, pf/UPGRADE: Starting the NEWS file for the next release
	series out of trunk.
	Added some info to UPGRADE because of yesterday's change and fixed the
	database upgrade script that was renamed.

2010-07-22	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/html/admin/configuration/switches_add.php, 
	pf/html/admin/configuration/switches_edit.php: Corrected bad whitespace
	again...
	Now, to fix it for good, instead of asking people to behave, I'm 
	forcing vim parameters to enforce them! mouhahahhaa! :)

2010-07-22	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/radius.pm: A sample of working RADIUS VoIP authorization
	for Cisco switches in pf::radius' authorize_voip. Fixes #1008;
	http://www.packetfence.org/bugs/view.php?id=1008

	* pf/lib/pf/lookup/node.pm: Output of node lookup is aligned. Fixes
	#1006;
	http://www.packetfence.org/bugs/view.php?id=1006
	Also added vim modelines to force proper whitespace

2010-07-15	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/packetfence.spec, pf/NEWS: 1.9.0 released!
	
	* pf/docs/PacketFence_Administration_Guide.odt: Added network and
	components diagrams

2010-07-14	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt: Replaced feature
	intro text with updated one

2010-07-06	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt, 
	pf/docs/PacketFence_Developers_Guide.odt,
	pf/docs/PacketFence_Installation_Guide.odt: Version bump

	* pf/docs/PacketFence_Developers_Guide.odt: Fixed bad propagation from
	1_8 branch (copied document from 1_8 branch and re-did changes since
	then).

	* pf/docs/PacketFence_Administration_Guide.odt: Added doc for HP 
	ProCruve 3400cl (same as ProCurve 2600).

	* pf/README_SWITHCES, pf/html/admin/configuration/switches_add.php, 
	pf/html/admin/configuration/switches_edit.php: Renamed Procurve to
	ProCurve in the user visible locations since it's the official HP way.

	* pf/docs/PacketFence_Administration_Guide.odt: Fixed Procurve 2600
	SNMP configuration (Thanks to Andrew Niemantsverdriet for pointing it
	out!)

2010-07-05	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt: Added documentation to
	configure the Foundry FastIron 4802 in port-security with or without
	VoIP (IPT)

	* pf/docs/PacketFence_Administration_Guide.odt: Fixed small mistakes 

	* Renamed pf/lib/pf/SNMP/SMC/SMC8800M.pm to 
	pf/lib/pf/SNMP/SMC/TS8800M.pm, modified pf/lib/pf/SNMP/SMC/TS8800M.pm,
	pf/lib/pf/SNMP/SMC.pm, pf/t/critic.t, pf/t/data.t, 
	pf/t/hardware-snmp-objects.t, pf/t/pod.t,
	pf/html/admin/configuration/switches_add.php, 
	pf/html/admin/configuration/switches_edit.php: Renamed pf::SMC::SMC8800M
	to pf::SMC::TS8800M to align more with current naming of the SMC 
	modules. Also fixed POD doc in pf::SMC.

2010-07-01	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/t/hardware-snmp-objects.t, pf/t/SNMP.t: Moved some tests from 
	hardware-snmp-objects.t into SNMP.t.

	* pf/lib/pf/SNMP/HP/Procurve_3400cl.pm, pf/README_SWITCHES, 
	pf/html/admin/configuration/switches_add.php,
	pf/html/admin/configuration/switches_edit.php, pf/t/critic.t, 
	pf/t/hardware-snmp-objects.t, pf/t/pod.t: Added support for HP Procurve
	3400cl. Fixes #906;
	http://www.packetfence.org/bugs/view.php?id=906

	* pf/UPGRADE, pf/conf/documentation.conf, pf/conf/pf.conf.defaults, 
	pf/conf/templates/configurator/reg-detect-vlan.conf, 
	pf/conf/templates/configurator/reg-vlan.conf, 
	pf/conf/templates/configurator/zen-vlan.conf, pf/configurator.pl:
	Added a new option under trapping.passthrough: disabled. By default 
	passthrough is now disabled and must be explicitly enabled. Fixes #886;
	- New note in UPGRADE about that change
	- Updated configuration templates for VLAN isolation mode
	- Added TODO tasks to improve configurator.pl
	http://www.packetfence.org/bugs/view.php?id=886

	* pf/configurator.pl: Clarified various templates available in the 
	configurator script. Also added a new one: VLAN isolation mode with 
	Registration. Fixes #975;
	http://www.packetfence.org/bugs/view.php?id=975

2010-06-30	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt: Fixes to routing
	documentation (missing pf_gateway). Fixes #998;
	http://www.packetfence.org/bugs/view.php?id=998

2010-06-25	Regis Balzard <rbalzard@inverse.ca>
	* pf/lib/pf/SNMP/SMC.pm 
	* pf/lib/pf/SNMP/SMC/SMC8800.pm 
	* pf/lib/pf/SNMP/SMC/TS6224M.pm: Added support for SMC8824M and SMC8848M
	TigerStack II with port-security. Moved some code between SMC modules.

2010-06-24	Regis Balzard <rbalzard@inverse.ca>
	* pf/lib/pf/SNMP/Cisco/Catalyst_4500.pm: Added support for 4500 Series 

2010-06-24	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/SNMP/Cisco/Catalyst_2960.pm: Documented a bug with IOS 
	12.2(25r) and VoIP. Also filed as #1200 for reference.
	http://www.packetfence.org/bugs/view.php?id=1020

2010-06-22	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/db/upgrade-1.9.0-1.10.0.sql: Fixed small mistake in upgrade
	script (was --- instead of -- for comments).

2010-06-15	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/sbin/pfsetvlan: Avoiding warnings in unpleasant situations

	* pf/addons/dev-helpers/radius-hook.pl, pf/t/stress-test/radius-calls,
	pf/t/stress-test/soap-calls-radius_authorize, 
	pf/t/stress-test/soap-calls-snort, pf/t/stress-test/soap-server.conf: 
	Added a bunch of scripts to help tests (integration, stress) and devel

	* pf/addons/802.1X/rlm_perl_packetfence_soap.pl: Ported below fix to
	new radius SOAP module.

	* pf/addons/802.1X/rlm_perl_packetfence_sql.pl: Using NAS-IP-Address, a 
	radius standard attribute, instead of Client-IP-Address as the switch IP
	address. Module now works with freeradius2. Fixes #1007;
	http://www.packetfence.org/bugs/view.php?id=1007

2010-06-08	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/SNMP.pm: Refactoring: using constants instead of hardcoded
	string: VOIP

2010-06-01	Olivier Bilodeau <obilodeau@inverse.ca>
	PacketFence 1.9.0-0.20100601 aka PacketFence 1.9.0rc1

2010-05-25	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/bin/pfcmd: Fixed bug #833 again using hard-references this time. 
	Tricky perl stuff...

	* pf/lib/pf/node.pm: Fixed a bug with new node categories where a node
	edit without a category would remove the category.

	* pf/lib/services.pm: Added validation and proper error message on 
	startup when SNMPVersion or SNMPVersionTrap is missing from 
	conf/switches.conf. Fixes #993;
	http://www.packetfence.org/bugs/view.php?id=993

	* pf/t/all.t, pf/t/node.t: Added tests to prevent regressions in subs
	that reads data in pf::node

2010-05-25	Regis Balzard <rbalzard@inverse.ca>
	* pf/lib/pf/node.pm: Fixed a bug introduced with new node categories in
	node_view_with_fingerprint.
	
2010-05-18	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/node.pm: Fixed a regression I introduced in revno 
	a7c168dcd6e42180e15dc166feb7167ddc36bc8f in node_modify (pfcmd node 
	edit). Now fixed so its properly updating nodes again.

	* pf/packetfence.spec: A file (conf/floating_network_device.conf) was 
	left out of the RPM spec for Floating Network Device support. This has 
	been fixed.

	* pf/bin/pfcmd: Changed other soft-referenced function calls that were
	failing with the updated Parse::RecDescent module.

	* pf/bin/pfcmd: Replaced all hard-coded line numbers with __LINE__ perl
	construct since web admin uses a regexp on "line xxx" to be aware about
	errors (as a hack).

	* pf/bin/pfcmd: Since yesterday's fix, pfcmd commands need a true 
	return value otherwise pfcmd would report that sub didn't exist. I 
	fixed that.

2010-05-17	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/bin/pfcmd: Changed the way we dynamically call pfcmd commands that
	we parsed. Something changed with upstream Parse::RecDescent that 
	cause "Can't coerce GLOB to string" fatal errors under hard to 
	reproduce circumstances. The change should fix them for good. Fixes 
	#833;
	http://www.packetfence.org/bugs/view.php?id=833

2010-05-14	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/t/pod.t: New type of test that check for pod sections.
	First commit with lots more to do but still in this first test a lot
	of our files fail.

	* pf/sbin/pfsetvlan: Merging into trunk required some removal of
	deprecated cleanup calls in sbin/pfsetvlan (db disconnection)

2010-05-14	Regis Balzard <rbalzard@inverse.ca>
	* pf/bin/pfcmd, pf/conf/floating_network_device.conf, pf/conf/ui.conf,
	pf/html/admin/common.php, 
	pf/html/admin/configuration/floatingnetworkdevice_add.php,
	pf/html/admin/configuration/floatingnetworkdevice_edit.php,
	pf/html/admin/configuration/floatingnetworkdevice.php,
	pf/html/admin/header.php, pf/lib/pf/config.pm, pf/lib/pf/floatingdevice,
	pf/lib/pf/floatingdevice/custom.pm, pf/lib/pf/floatingdevice.pm,
	pf/lib/pf/pfcmd/help.pm, pf/lib/pf/pfcmd/pfcmd.pm, pf/lib/pf/pfcmd.pm,
	pf/lib/pf/SNMP/Cisco/Catalyst_2950.pm, 
	pf/lib/pf/SNMP/Cisco/Catalyst_2960.pm, pf/lib/pf/SNMP/Cisco.pm, 
	pf/lib/pf/SNMP/constants.pm, pf/lib/pf/SNMP/HP.pm, 
	pf/lib/pf/SNMP/Nortel.pm, pf/lib/pf/SNMP.pm, pf/NEWS, 
	pf/packetfence.spec, pf/README, pf/sbin/pfsetvlan, pf/t/all.t, 
	pf/t/critic.t, pf/t/data/switches.conf, pf/t/floatingdevice.t,
	pf/t/network-devices/cisco.t, pf/t/pfcmd.t, pf/t/pf.t,
	pf/t/podCoverage.t, pf/t/pod.t: Added support for Floating Network 
	Devices (See Admin Guide for details). Minor improvements by Olivier.

2010-05-14	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/html/admin/common.php: Small mistake when deleting a node category.
	It says switch and shows the category_id. It's fixed now.

2010-05-07	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/conf/dhcp_fingerprints.conf: New DHCP fingerprints:
	- Ruckus Wireless
	- Ubuntu 9.10
	- a new HP Procurve fingerprint
	- Toshiba Multifunction Printer
	- Xerox

	* pf/conf/oui.txt: Updated oui.txt (MAC address vendors) to latest 
	version (2010-05-07)

	* pf/html/admin/common.php, pf/html/admin/configuration/fingerprint.php:
	Fixed two problems with DHCP fingerprint submissions:
	- if submitted list empty, array_merge error
	- submitting fingerprints via Configuration -> Fingerprint looked like
	  it never worked. Fixed that.

	* pf/lib/pf/pfcmd/report.pm: Fixed a couple of non-working reports. 
	Fixes #984;
	Added test cases for all of pf::pfcmd::report's subs.
	Added Test::NoWarnings as a build dependency.
	http://www.packetfence.org/bugs/view.php?id=984

2010-05-06	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/packetfence.spec: Fixed packaging of 802.1x 
	rlm_perl_packetfence_* and new radius files.

	* pf/packetfence.spec: Removing the pinned perl(Parse::RecDescent) 
	version from the RPM spec. Fixes #833;
	http://www.packetfence.org/bugs/view.php?id=833

	* pf/packetfence.spec: Changes to RPM spec file
	- Snapshot vs releases is now defined by an rpmbuild argument
	- source_release should now be passed as an argument to simplify our 
	nightly build system. Fixes #946;
	http://www.packetfence.org/bugs/view.php?id=946

	* pf/packetfence.spec: Fixed a problem with addons/integration-testing
	files in the RPM spec file

	* pf/packetfence.spec: Perl required version is now 5.8.8 since a lot 
	of our source files explictly ask for 5.8.8. Fixes #868;
	http://www.packetfence.org/bugs/view.php?id=868

	* pf/packetfence.spec: perl modules required for testing are now build
	dependencies instead of runtime dependencies. Fixes #866;
	http://www.packetfence.org/bugs/view.php?id=866

2010-05-05	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/installer.pl: The installer now refers to the UPGRADE document
	instead of trying to upgrade the database. Fixes #869;
	http://www.packetfence.org/bugs/view.php?id=869

	* pf/sbin/pfsetvlan, pf/t/all.t, pf/t/pfsetvlan.t: Now parsing new
	Net-SNMP 5.4 traplog format. Fixes #940;
	Took the opportunity to do it cleanly with a compiled and re-used regexp
	that is full of comments.
	Now testing the various traplog format in t/pfsetvlan.t.
	Thanks to Maikel for the report and regexp draft.

	* pf/conf/dhcp_fingerprints.conf: Re-labeled some devices to avoid 
	problems with VoIP autodetection. Fixes #896;
	http://www.packetfence.org/bugs/view.php?id=896

	* pf/sbin/pfdhcplistener: Reduced DHCP logging at INFO level. Now we 
	are only logging ACK / OFFER / INFORM and I consolidated fingerprint
	and node modification messages.

	* pf/lib/pf/node.pm: Fixed a couple of issues with node category 
	support I encountered:
	- One crasher (missing sub because of a bad merge) 
	- Fixed a bug where a missing category would always result in an error
	- Fixed an unnecessary warning on node_modify

2010-05-04	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/conf/ui.conf: Renamed VLAN to Alternate dest. VLAN makes its
	purpose clearer. Fixes #927;
	http://www.packetfence.org/mantis/view.php?id=927

	* pf/docs/PacketFence_Administration_Guide.odt: Added two paragraph to
	the admin guide under MySQL optimizations: 
	- Avoid 'Too many connections' problems
	- Avoid 'Host <hostname> is blocked' problems
	Fixes #951;
	http://www.packetfence.org/mantis/view.php?id=951

	* pf/html/admin/configuration/switches_add.php, 
	pf/html/admin/configuration/switches_edit.php: VoIPEnabled parameter
	is now a Yes/No dropdown instead of an input text. Fixes #952;
	Also took the opportunity to turn the whole thing into a switch/case
	http://www.packetfence.org/mantis/view.php?id=952

	* pf/bin/pfcmd: Not saying 'Command not understood' anymore if no 
	command was passed to pfcmd. Fixes #972;
	http://www.packetfence.org/mantis/view.php?id=972

	* pf/TODO: dropping TODO in favor of tracking everything in our
	public bugtracker

	* pf/db/pfschema.mysql.188dev, pf/db/upgrade-1.8.6-1.8.8dev.sql,
	pf/db/upgrade-1.9.0-1.10.0.sql, pf/db/pf-schema-1.10.0.sql:
	Databases changes from the feature.rlm-soap branch were on top of 
	1.8.7, since then other changes went in for 1.9.0. I rebased the 
	database changes for feature.rlm-soap on top of 1.9.0. For now,
	targeted at a 1.10.0 release later this year.

	* pf/installer.pl, pf/t/pfcmd.t: New 1.9.0 database hashes

	* pf/bin/pfcmd: Now ignoring AUTO_INCREMENT= when calculating database
	hash since this value will always be different for each database.

	* pf/docs/PacketFence_Developers_Guide.odt, 
	pf/docs/PacketFence_Installation_Guide.odt: Mark x86_64 as officially
	supported

2010-05-03	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt: Manual merge of 1.8 
	and trunk branches. Added small fixes on top of that (whitespace and
	wording)
	- Small corrections. Fixes #950;
	http://www.packetfence.org/mantis/view.php?id=950

2010-04-30	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/vlan.pm: VLAN assignment sample for node categorization.
	Changed the custom_getCorrectVlan interface again.

2010-04-28	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/html/admin/common/helpers.inc, pf/html/admin/images/category.png,
	pf/html/admin/node/categories_add.php, 
	pf/html/admin/node/categories_edit.php, pf/t/nodecategory.t, pf/NEWS,
	pf/UPGRADE, pf/bin/pfcmd, pf/conf/ui.conf, pf/conf/violations.conf,
	pf/docs/PacketFence_Administration_Guide.odt, 
	pf/html/admin/check_login.php, pf/html/admin/common.php, 
	pf/html/admin/configuration/violation_add.php, 
	pf/html/admin/configuration/violation_edit.php, 
	pf/html/admin/header.php, pf/html/admin/node/categories.php, 
	pf/html/admin/node/edit.php, pf/html/admin/node/help.html, 
	pf/installer.pl, pf/lib/pf/class.pm, pf/lib/pf/config.pm, 
	pf/lib/pf/lookup/node.pm, pf/lib/pf/node.pm, pf/lib/pf/nodecategory.pm,
	pf/lib/pf/pfcmd/help.pm, pf/lib/pf/pfcmd/pfcmd.pm, pf/lib/pf/pfcmd.pm, 
	pf/lib/pf/services.pm, pf/lib/pf/trigger.pm, pf/lib/pf/violation.pm, 
	pf/packetfence.spec, pf/t/all.t, pf/t/data.t, pf/t/pfcmd.t, pf/t/php.t,
	pf/db/pfschema.mysql.190, pf/db/upgrade-1.8.6-1.9.0.sql:
	Node categorization support. You know have the ability to assign VLANs
	or whitelist violations based on the category of a node. Fixes #968;
	Includes tests, docs, config, etc.
	http://www.packetfence.org/mantis/view.php?id=968

2010-04-23	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/addons/integration-testing/replay-snmptrapd-logs.pl: Created a new
	tool that will be used for load testing / integration testing.

	* pf/packetfence.spec: Added perl(Readonly::XS) as a dependency. 
	Readonly becomes faster with it.

2010-04-20	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/cgi-bin/release.cgi: Added validation in release.cgi and displays
	error if something unexpected happens (if user messes with POST data)
	Fixes #961;
	http://www.packetfence.org/mantis/view.php?id=961

2010-04-19	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/packetfence.spec: packetfence-remote-snort-sensor package is back!
	Fixes #888;
	http://www.packetfence.org/mantis/view.php?id=888

	* pf/lib/pf/services.pm: Improved error-handling with broken switch
	configuration. Fixes #766;
	- switches_conf_is_valid() is now able to tell if the same switch was 
	  specified more than once and will give helpful error message (in 
	  logs/packetfence.log).
	- in generate_snmptrapd_conf() we now avoid bad switch with duplicated 
	  IPs
	- pfsetvlan will start even if errors were detected in switches.conf
	- with test case
	http://www.packetfence.org/mantis/view.php?id=766

	* pf/html/admin/common.php: Regular expression in web admin has been
	losen up so that a logwarn is reported as an error. Fixes 964;
	http://www.packetfence.org/mantis/view.php?id=964

2010-04-15	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/html/admin/configuration/switches_add.php, 
	pf/html/admin/configuration/switches_edit.php: Truncated long names.
	Fixes 923;
	http://www.packetfence.org/mantis/view.php?id=923

	* pf/html/admin/login.php: Link on the PacketFence logo on the login
	page now longer links to localhost. Fixes 885;
	http://www.packetfence.org/mantis/view.php?id=885

	* pf/html/admin/status/sajax-dashboard.php: Memory display in the 
	dashboard no longer includes buffers and cache. We were getting too
	many complains about 99% usage when the linux memory manager was doing
	its job right. Fixes #916;
	http://www.packetfence.org/mantis/view.php?id=916

	* pf/lib/pf/SNMP/Foundry.pm: Got port security + VoIP to work!

2010-04-14	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/SNMP/Cisco/Catalyst_2950.pm: Added a note that SNMPv3 
	support doesn't work

2010-04-09	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/addons/accounting.pl, pf/addons/recovery.pl: hack to make tests
	work successfully in our new build env.

2010-04-08	Regis Balzard <rbalzard@inverse.ca>
	* pf/sbin/pfdhcplistener: Fix call to non-existing script lookup_node.pl
	Fixes 858;
	http://www.packetfence.org/mantis/view.php?id=858

2010-04-08	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/SNMP/Foundry.pm: Fixed a couple of issues with port-security
	and VLAN changes if ifIndex doesn't change

2010-04-07	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/SNMP/Foundry.pm: Port security implementation

2010-04-06	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/packetfence.spec: Snapshot 1.8.8-0.20100311
	- Added addons/loadMACintoDB.pl to rpm spec

	* pf/conf/pf-release: Version bump to 1.8.8dev (forgot to do earlier)

	* pf/lib/pf/ifoctetslog.pm, pf/lib/pf/locationlog.pm: Fixed a context
	issue with database queries related to mac history, switchport history
	and user bandwidth accounting. Also fixed a slight mistake with 
	ifoctet's db queries in general.

2010-04-01	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/cgi-bin/pdp.cgi: Exception handling in radius authorize so we 
	collect errors in the server logs and in the client logs.
	Also took out CGI::Carp fatalsToBrowser since I've read it's not 
	compatible with mod_perl

2010-03-31	Olivier Bilodeau <obilodeau@inverse.ca>
	Small fixes to issues found during functionnal testing.

	* pf/lib/pf/db.pm: Database is now reconnecting on failed queries

	* pf/lib/pf/SNMP/ThreeCom/Switch_4200G.pm: Imported bugs and
	limitations section from parent (pf::SNMP::ThreeCom::SS4500).

2010-03-30	Olivier Bilodeau <obilodeau@inverse.ca>
	Lots of small fixes to issues found during functionnal testing.

	* pf/sbin/pfsetvlan: Now calling proper 802.1X wired re-authentication
	through pfcmd_vlan
	Also fixed some problems in the parsing of the new traps

	* pf/bin/pfcmd_vlan, pf/lib/pf/SNMP.pm: Proper 802.1X re-authentication
	pfcmd_vlan's -deauthenticateDot1x now forces re-authentication on wired
	802.1X if an ifIndex is provided on CLI.
	Generic 802.1X re-authentication was done using standard IEEE8021-PAE
	MIB (oid dot1xPaePortReauthenticate).

2010-03-29	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/locationlog.pm, pf/lib/pf/vlan.pm: Moved 
	update_node_if_not_accurate out of locationlog because it something
	that people might need to customized. I changed default behavior not
	to call node_modify if node's VLAN field haven't changed.

2010-03-26	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/t/hardware-snmp-objects.t: fixed some broken tests

	* pf/bin/flip.pl, pf/bin/pfcmd_vlan, 
	pf/docs/MIB/Inverse-PacketFence-Notification.mib, 
	pf/lib/pf/SNMP/Aruba.pm, pf/lib/pf/SNMP/Cisco/Catalyst_2960.pm,
	pf/lib/pf/SNMP/PacketFence.pm, pf/lib/pf/SNMP.pm, pf/lib/pf/radius.pm,
	pf/sbin/pfsetvlan: flip.pl can now handle all Radius connection types
	- modified flip to deal with new connection types
	- added a -deauthenticateDot1x to pfcmd_vlan
	- our local SNMP Traps now carry the connection type (and pfsetvlan 
	  interprets it)
	- Aruba module no longer detects 802.1x on deauth since it's known 
	  when requested now
	- New mechanism to translate NAS-Port to ifIndexes and support for it
	  in the 2960 code
	- pfsetvlan supports new dot1x wireless de-association and issues a 
	  warning on wired dot1x then shut / no shut the port

	* pf/bin/pfcmd,  pf/lib/pf/SNMP/Aruba.pm, pf/lib/pf/SNMP/Cisco.pm,
	pf/lib/pf/SNMP/Dlink.pm, pf/sbin/pfsetvlan: Removed remaining 
	references to hardcoded 'WIFI' ifIndex.

2010-03-24	Regis Balzard <rbalzard@inverse.ca>
	* pf/lib/pf/services.pm: PF now creates static routes to routed Vlans 
	when dhcpd is enabled in networks.conf. It used to be when named was 
	enabled.

2010-03-24	Olivier Bilodeau <obilodeau@inverse.ca>
	Minor refactorings all over the place based on review comments

	* pf/lib/pf/radius.pm: - Graceful recovery if switches.conf is broken
	- Created vlan_determine_for_node and calling the get_xxx_vlan from 
	  pf::vlan
	- Returning radius user is locked return code if vlan_determine_for_node
	  returns -1

	* pf/lib/pf/SNMP.pm: Added getVlanByName to resolve VLAN names from 
	switches.conf into VLAN numbers and do appropriate validation and error
	handling. Test case included.

	* pf/lib/pf/vlan.pm: Refactoring pf::vlan according to review
	- custom_getCorrectVlan renamed to get_normal_vlan
	- Pass node_info hashref instead of individual node information to 
	  get_normal_vlan()
	- Now using the new getVlanByName() call
	- Pushed up the testing of the switch object into 
	  determine_vlan_for_node and we are now degrading gracefully if object
	  is wrong
	- Allowing a -1 return from get_normal_vlan to kick out users
	- get_normal_vlan now takes connection_type and ssid as parameters

	* pf/lib/pf/SwitchFactory.pm: Modified the factory so it can produce
	switches of the 'default' type.

2010-03-23	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/vlan.pm: Refactoring pf::vlan according to review
	- Extracted get_violation_vlan out of vlan_determine_for_node for 
	future use by pf::radius
	- Removing node_exist()/node_add_simple condition: it never happens
	- Extracted get_registration_vlan out of vlan_determine_for_node for 
	future use by pf::radius. Created test case in t/vlan.t too.

	* pf/lib/pf/radius.pm: Removed code that I realized was run two times
	for nothing (outlined when I did the tests)

	* pf/t/all.t, pf/t/radius.t: Test for pf::radius

	* pf/lib/pf/radius.pm: Refactoring pf::radius according to review
	- extracted out VoIP handling into its own sub

2010-03-18	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/addons/802.1X/rlm_perl_packetfence_soap.pl, pf/cgi-bin/pdp.cgi,
	pf/lib/pf/radius.pm: Client - Server SOAP interface changes
	Now passing a tuple with radius return code and radius reply for radius
	rlm client soap call. Allows greater flexibility of radius answers from
	the server side without modifying clients.
	Reworked all validation and returned codes in rlm_perl_packetfence 
	module.
	Little modifications required to server side components so it'll all 
	work.

2010-03-17	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/radius.pm: A big chunk of pf::radius rework and general
	improvements, hopefully really close to tests

	* pf/lib/pf/actions.pm, pf/lib/pf/vlan.pm, pf/sbin/pfsetvlan: 
	generalized pf::vlan's shouldAutoRegister and getNodeInfoForAutoReg to 
	work with both pfsetvlan and pf::radius
	Changed all callers

	* pf/lib/pf/SNMP.pm, pf/t/SNMP.t: minor refactoring: extracted code 
	into isManagedVlan() and some tests against it

2010-03-16	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/packetfence.spec: Fix upgrade bug introduced in 1.8.5: Changed
	perl-Locale-gettext dependency to use the perl namespace version 
	perl(Locale-gettext). Fixes #931;
	http://www.packetfence.org/mantis/view.php?id=931

2010-03-15	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/packetfence.spec, pf/t/vlan.t: Updated vlan tests so that rework
	done in 1.8 branch passes the tests. 
	RPM Spec:
	- Added perl-Test-MockModule as a build dependency (required for tests)
	- Test modules are now required for building instead of required for 
	  package install.

2010-03-11	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/packetfence.spec: Snapshot 1.8.8-0.20100311

	* pf/lib/pf/pfcmd/graph.pm, pf/t/all.t, pf/t/graph.t: Fixed problem 
	introduced in the database improvements concerning graphs
	Added a test case to validate it

2010-03-10	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/addons/accounting.pl, pf/addons/recovery.pl, pf/lib/pf/action.pm,
	pf/lib/pf/class.pm, pf/lib/pf/configfile.pm, pf/lib/pf/db.pm, 
	pf/lib/pf/ifoctetslog.pm, pf/lib/pf/iplog.pm, pf/lib/pf/locationlog.pm,
	pf/lib/pf/node.pm, pf/lib/pf/os.pm, pf/lib/pf/person.pm, 
	pf/lib/pf/pfcmd/dashboard.pm, pf/lib/pf/pfcmd/graph.pm, 
	pf/lib/pf/pfcmd/report.pm, pf/lib/pf/switchlocation.pm, 
	pf/lib/pf/traplog.pm, pf/lib/pf/trigger.pm, pf/lib/pf/useragent.pm, 
	pf/lib/pf/violation.pm, pf/sbin/pfdetect, pf/sbin/pfdhcplistener, 
	pf/sbin/pfmon, pf/sbin/pfsetvlan, pf/t/all.t, pf/t/data.t, 
	pf/t/config.t, pf/t/person.t: Improvements in the database layer
	- new db_query_execute() that handles retrying queries, rebuilding 
	  prepared statements and better error reporting
	- new way to store db handlers, they are now stored in a hash that expose 
	  them per thread
	- use get_db_handle() to get database handle
	- db_connect no longer has a way to force the preparation of statements
	This all means overall use simplification and better error-handling and 
	reporting.

2010-03-08	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/pfcmd/dashboard.pm, pf/lib/pf/pfcmd/graph.pm,
	pf/lib/pf/pfcmd/report.pm: These files are now a module.

2010-03-05	Regis Balzard <rbalzard@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt: Routed VLANs 
	documentation and a schema to explain

	* pf/README_SWITCHES, pf/docs/PacketFence_Administration_Guide.odt,
	pf/html/admin/configuration/switches_add.php, 
	pf/html/admin/configuration/switches_edit.php, pf/t/SNMP.t,
	pf/lib/pf/SNMP/Cisco/Catalyst_3750.pm, pf/t/critic.t, pf/t/pod.t: 
	Added support for Cisco Catalyst 3750

2010-03-04	Regis Balzard <rbalzard@inverse.ca>
	* pf/lib/pf/node.pm: Query optimization (avoid sub-selects)
	Massive improvement of query duration: from a couple of minutes to 
	sub-second on a 25 000 nodes setup.

2010-02-26	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/html/admin/violation/add.php, pf/html/admin/violation/edit.php:
	Fixed a regression where the violation edit page on the web admin would
	not show the violation description properly. Fixes #922;
	http://www.packetfence.org/mantis/view.php?id=922
	Regression introduced in 1.8.4. Cleaning up add.php to use a better
	mechanism to avoid future breakage.

	* pf/lib/pf/vlan.pm: Fixed validation in custom_getCorrectVlan. I was
	testing against a hashref instead of a switch object. Cleaned up the 
	sub to make the normal case obvious.
	Problem introduced in rev 53a220abaf38f45b6b7f9948dd2d365135354fab.

	* pf/lib/pf/SNMP.pm, pf/t/SNMP.t: Modified generateFakeMac() to allow
	ifIndex larger than two digits to appear in fake MAC. Fixes #921;
	http://www.packetfence.org/mantis/view.php?id=921

	* pf/lib/pf/locationlog.pm, pf/lib/pf/node.pm, 
	pf/lib/pf/pfcmd/report.pm: locationlog and node views are now returning
	the human translated connection_type instead of straight from database
	Also took the opportunity to turn report.pm into a real module.

	* pf/html/admin/common.php, pf/lib/pf/config.pm: Changed the long name
	of the SNMP-based connection type.

	* pf/addons/high-availability/pf-diff, 
	pf/addons/high-availability/rdiff: New sync tools that I've been using
	to compare installations

2010-02-25	Olivier Bilodeau <obilodeau@inverse.ca>
	On the road towards radius and traps unification.
	- Major overhaul of the way we think about nodes: two new fields 
	connection_type and voip
	- Updated all affected components
	
2010-02-15	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/sbin/pfsetvlan: Cleaning up direct MySQL leftovers
	Removing DBI and pf::db deps
	Removed all manual mysql connections

	* pf/lib/pf/action.pm: Minor refactoring: Extracted action autoreg into
	it's own sub.

2010-02-12	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/action.pm, pf/lib/pf/node.pm, pf/lib/pf/vlan.pm, 
	pf/sbin/pfsetvlan, pf/t/vlan.t: Refactoring
	Merged the different auto-registration mechanisms into node.pm and 
	vlan.pm out of pfsetvlan.
	Removed duplicated code and raw SQL from pfsetvlan. 
	Massive POD doc and refactoring of vlan.pm.
	Updated associated copyrights.

	* pf/bin/pfcmd: Report an error to STDERR if the grammar doesn't
	successfully parse the given command. We also include a line # in the
	output so that it will be shown in the Web admin. Fixes #847;
	http://www.packetfence.org/mantis/view.php?id=847

2010-02-11	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/vlan.pm, pf/sbin/pfsetvlan: Avoided duplicated code, 
	renamed vlan.pm's custom_getNodeInfo to getNodeUpdatedInfo and modified
	it.

	* pf/lib/pf/pfcmd/pfcmd.pm: Allow ! in value field when quoted. Fixes
	#911;
	http://www.packetfence.org/mantis/view.php?id=911

2010-02-10	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/conf/templates/httpd.conf.apache22,
	pf/conf/templates/httpd.conf.pre_apache22: Fixed an apache rewrite rule

	* pf/lib/pf/vlan.pm: Added validation to custom_getCorrectVlan.
	If the switch object is not correct, return the default VLAN and log a 
	warning.

2010-02-09	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/addons/recovery.pl, pf/bin/pfcmd, pf/lib/pf/vlan.pm, 
	pf/sbin/pfsetvlan, pf/UPGRADE: Avoid loading the entire SwitchFactory 
	at several spots in vlan.pm by passing the switch object around instead 
	of the switch's IP. Improves performance. Fixes #910;
	http://www.packetfence.org/mantis/view.php?id=910

	* pf/lib/pf/SNMP.pm, pf/sbin/pfsetvlan: When a 'UP' trap is received
	PacketFence will try to get the MAC address 30 times or for 2 minutes 
	whichever condition is first met. Fixes #903;
	http://www.packetfence.org/mantis/view.php?id=903
	
	This prevent the following condition: telnet timeouts take three 
	minutes for the thread to recover so 30 times 3 minutes would hang a 
	thread (and the switch) for 90 minutes. Now since it's longer than the 2
	minutes limit, it only hang it for 3 minutes.

	* pf/lib/pf/web.pm: In web_node_record_user_agent call node_modify() 
	directly instead of pfcmd node edit. It's more performant (avoids 
	spawning a shell) and it'll avoid trying to adjust vlan. Fixes #908;
	http://www.packetfence.org/mantis/view.php?id=908

	* pf/sbin/pfsetvlan: Created an ALRM signal handler that report an
	error and does nothing else. This is a workaround to prevent pfsetvlan
	to crash when a Net::Telnet or a Net::Appliance::Session call times out,
	sending a SIGALRM. Fixes #907;
	http://www.packetfence.org/mantis/view.php?id=907 

	Upstream bug: https://rt.cpan.org/Public/Bug/Display.html?id=54415

	Local bug to track upstream: 
	http://www.packetfence.org/mantis/view.php?id=902

	* pf/lib/pf/SNMP/Cisco.pm: Added a noSuchObject test to 
	isLearntTrapsEnabled

2010-02-03	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/SNMP/Cisco/Controller_4400_4_2_130.pm,
	pf/lib/pf/SNMP/Cisco/WLC_2106.pm, pf/lib/pf/SNMP/Cisco/WiSM.pm:
	Documented problematic behavior on the WLC's and WiSM's with DHCP
	Proxying activated.

2010-02-02	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/html/admin/configuration/interfaces_add.php, 
	pf/html/admin/configuration/interfaces_edit.php,
	pf/html/admin/configuration/networks_add.php,
	pf/html/admin/configuration/networks_edit.php,
	pf/html/admin/configuration/switches_add.php, 
	pf/html/admin/configuration/switches_edit.php,
	pf/html/admin/configuration/violation_add.php, 
	pf/html/admin/configuration/violation_edit.php, 
	pf/html/admin/node/edit.php, pf/html/admin/person/edit.php, 
	pf/html/admin/scan/edit.php, pf/html/admin/violation/edit.php: Errors
	are now shown in Web admin's popups instead of automatically closing 
	the popups without checking return status. Fixes #899;
	http://www.packetfence.org/mantis/view.php?id=899

2010-02-01	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/addons/database-backup-and-maintenance.sh: Added a once-a-month
	archiving of locationlog_history entries older than a year.

2010-01-29	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt: Added documentation
	on how to configure the ISR 1800 with PacketFence and added it to
	the supported switches section

	* pf/NEWS, pf/README_SWITCHES, 
	pf/html/admin/configuration/switches_add.php,
	pf/html/admin/configuration/switches_edit.php, pf/t/SNMP.t,
	pf/t/critic.t, pf/t/pod.t: Cisco ISR 1800 officially supported

	* pf/lib/pf/SNMP/Cisco/Controller_4400_4_2_130.pm,
	pf/lib/pf/SNMP/Cisco/WLC_2106.pm, pf/lib/pf/SNMP/Cisco/WiSM.pm: 
	Documented an issue with Windows 7 and certain IOSes

2010-01-28	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/t/podCoverage.t: Forcing 100% POD coverage for SNMP.pm since it's
	the base switch module contract and we often don't know what's expected
	when we re-implement subs

	* pf/lib/pf/SNMP/Cisco/ISR_1800.pm: getVlan was returning true or false
	instead of requested VLAN, now fixed

	* pf/lib/pf/SNMP/Cisco/ISR_1800.pm: More work to support ISR1800 series
	- Implemented getMacBridgePortHash and it relies on CLI :(
	- Implemented _getAllIfIndexForThisVlan (used by getMacBridgePortHash)
	- Added mandatory POD sections

2010-01-27	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/SNMP/Cisco/ISR_1800.pm: Implemented isDefinedVlan and
	getVlan for the ISR 1800

	* pf/lib/pf/SNMP/Cisco.pm: Added POD doc

2010-01-26	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Installation_Guide.odt: Default web admin
	account is not admin / qwerty anymore, it is defined by user when
	running installer.pl. Corrected that mistake in the install guide.

2010-01-22	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/bin/pfcmd: Validate for successful write to conf/switches.conf 
	when adding, deleting and editing a switch. Fixes #898;
	http://www.packetfence.org/mantis/view.php?id=898
	Pushed in a little print to logdie conversion at another spot too.
	Hard-coded line numbers are to get the web admin to display the error.

	* pf/bin/pfcmd: New grammar tracing flag in pfcmd (disabled by
	default)

2010-01-21	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/conf/dhcp_fingerprints.conf: Added a projectors class and an
	Epson projector fingerprint to the DHCP fingerprint database.
	Contributed by Roelof Hoekstra.

2010-01-19	Olivier Bilodeau <obilodeau@inverse.ca>
	* Renamed pf/lib/pf/SNMP/Cisco/Controller_4400_4_2_130.pm to 
	pf/lib/pf/SNMP/Cisco/WLC_4400.pm, modified pf/UPGRADE, 
	pf/docs/PacketFence_Administration_Guide.odt,
	pf/html/admin/configuration/switches_add.php,
	pf/html/admin/configuration/switches_edit.php, 
	pf/lib/pf/SNMP/Cisco/WLC_4400.pm, pf/lib/pf/SNMP/Cisco/WiSM.pm,
	pf/packetfence.spec, pf/t/SNMP.t, pf/t/critic.t, pf/t/pod.t: Renamed
	wireless module for Cisco Wireless Controller 4400 to WLC_4400
	Updated all associated entries accordingly.

	* pf/lib/pf/SNMP/Cisco/Controller_4400_4_2_130.pm: Added more verbose
	logging and a TODO task

	* pf/bin/pfcmd: Clarified an error message about missing config
	element.
	Now reminding users to change conf/documentation.conf if they
	added new stuff in pf.conf.

	* Adding pf/lib/pf/SNMP/Cisco/WiSM.pm, modified pf/README_SWITCHES, 
	pf/docs/PacketFence_Administration_Guide.odt,
	pf/html/admin/configuration/switches_add.php, 
	pf/html/admin/configuration/switches_edit.php, pf/t/SNMP.t,
	pf/t/critic.t, pf/t/pod.t: Added module for Cisco Wireless Services
	Module (WiSM) and all required references for new hardware support
	Internally module is referring to Cisco Controller 4200's
	implementation.

	* pf/conf/templates/httpd.conf.pre_apache22, 
	pf/conf/templates/httpd.conf.apache22: Blocking Microsoft NCSI user
	agent from reaching captive portal.
	Windows Vista and 7 use the NCSI in background to detect connectivity,
	there is no need to waste resources capturing these web requests.
	http://technet.microsoft.com/en-us/library/cc766017(WS.10).aspx.
	Fixes #892;
	http://www.packetfence.org/mantis/view.php?id=892

2010-01-18	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/lookup/node.pm: Added correct VLAN information to node
	lookup. Fixes #893;
	http://www.packetfence.org/mantis/view.php?id=893

2010-01-15	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/lookup/person.pm: Improved custom example

	* pf/html/admin/login.php: Added a new way to do admin authentication:
	verify user locally but verify password on AD server. Commented out by
	default but could be enabled
	Also added a TODO task

	* Added
	pf/addons/high-availability/heartbeat-2.x-drbd-8.3-support-fix.patch:
	Patch required for heartbeat 2.x and drbd 8.3 compatibility. Took from
	http://hg.linux-ha.org/dev/rev/6467be4d4cb7

	* pf/lib/pf/pfcmd.pm: Now accepting @ in a person's pid

	* pf/lib/pf/person.pm: Removed debugging code that was left out by
	mistake it would seem

2010-01-05	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/NEWS, pf/UPGRADE, pf/packetfence.spec, pf/conf/pf-release,
	pf/t/pfcmd.t, pf/docs/PacketFence_Administration_Guide.odt,
	pf/docs/PacketFence_Developers_Guide.odt,
	pf/docs/PacketFence_Installation_Guide.odt,
	pf/docs/PacketFenceZEN_Installation_Guide.odt: 
	Version bump to 1.8.7
	Copyright bump to 2010 in documentation

2009-12-28	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/html/user/content/templates/register_1.html: Fixed missing
	closing html tags

2009-12-24	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/radius.pm, pf/lib/radius/custom.pm: Layed the foundation
	for our new integrated way of assigning VLANs through SOAP calls.

2009-12-23	Olivier Bilodeau <obilodeau@inverse.ca>
	* renamed pf/addons/802.1X/rlm_perl_packetfence.pl to 
	pf/addons/802.1X/rlm_perl_packetfence_sql.pl, added 
	pf/addons/802.1X/rlm_perl_packetfence_soap.pl, modified 
	pf/cgi-bin/pdp.cgi, pf/addons/802.1X/README: Added full SOAP client for
	freeradius (rlm_perl_packetfence_soap.pl) and server side placeholder 
	sub.

2009-12-22	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/addons/pfdetect_remote/sbin/pfdetect_remote, pf/cgi-bin/pdp.cgi:
	Changed SOAP URI identifier to http://www.packetfence.org/PFAPI

	* renamed pf/t/SNMP.t to pf/t/hardware-snmp-objects.t, modified 
	t/SNMP.t: Added tests specific to lib/SNMP.pm (renamed other tests)

	* pf/bin/pfcmd, pf/conf/switches.conf, pf/conf/ui.conf, 
	pf/conf/violations.conf, pf/html/admin/configuration/switches.php, 
	pf/lib/pf/SNMP.pm, pf/lib/pf/pfcmd/pfcmd.pm, pf/lib/pf/SwitchFactory.pm:
	added fields guestVlan customVlan1 customVlan2 customVlan3 customVlan4 
	customVlan5 as valid vlan definitions in switches.conf

	* pf/bin/pfcmd_vlan:
	- realigned spacing of pod2usage (was broken by tabs)
	- updated copyright, authors
	- new parameter -vlanName
	- using setVlanByName instead of newly deprecated setIsolationVlan and
	  setNormalVlan

	* pf/lib/pf/SNMP.pm: 
	- new sub setVlanByName, sets switch/ifIndex a vlan according to what's
	  defined in switches.conf
	- new sub placeholder for the future: setVlanWithName
	- deprecated setIsolationVlan, setRegistrationVlan, setNormalVlan
	- setVlanAllPort now sets vlan according to # or name based on what the
	  value of vlan is

	* pf/html/admin/login.php: Fixed "username" Cross-Site Scripting
	Vulnerability as reported by Secunia advisory 37844 available at:
	http://secunia.com/advisories/37844/. Fixes #884;
	http://www.packetfence.org/mantis/view.php?id=884

2009-12-18	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/t/vlan.t, pf/t/data/switches.conf: New vlan.t testsuite that tests
	lib/pf/vlan.pm. Some pretty interesting learning made there, definitely
	more to come on the test front.

	* pf/lib/vlan.pm: Removed several warnings discovered while building a
	vlan test

2009-12-17	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/conf/templates/httpd.conf.apache22, 
	pf/conf/templates/httpd.conf.pre_apache22: pdp.cgi uses mod_perl 
	instead of being a simple cgi. Big performance gain (6x in my tests)

	* pf/packetfence.spec: mod_perl as a packetfence dependency

	* pf/packetfence.spec: Added perl-LWP-UserAgent-Determined as a 
	dependency of remote-snort-sensor. Fixes #882;
	http://www.packetfence.org/mantis/view.php?id=882

	* pf/packetfence.spec: Added perl-SOAP-Lite as a dependency of 
	remote-snort-sensor. Fixes #881;
	http://www.packetfence.org/mantis/view.php?id=881

2009-12-15	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/vlan.pm: We no longer act on wireless deauthentication
	traps. Fixes #880;
	http://www.packetfence.org/mantis/view.php?id=880

	* pf/bin/pfcmd: Changed warning message when unable to call flip
	because of missing open locationlog entry. Now more emphasis on the
	fact that it cannot change a VLAN because of that.

	* pf/conf/templates/httpd.conf.pre_apache22,
	pf/conf/templates/httpd.conf.apache22: Windows Proxy autoconfiguration 
	gets a forbidden on captive portal (reduce load)

2009-12-10	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/web.pm: We no longer bindly accept someone who is 
	authenticated based on session information. In effect, this prevents
	users from re-registering without entering username / password again.
	Fixes #761;
	http://www.packetfence.org/mantis/view.php?id=761

2009-12-08	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/SNMP/Aruba.pm: 802.1x deauthentication support and
	deauthenticateMac() appropriately call right deauth based on the
	user's authentication. Fixes #873;
	http://www.packetfence.org/mantis/view.php?id=873

	* pf/lib/pf/SNMP/Aruba.pm: Improving Aruba code
	Doesn't rely on an open iplog entry to work
	Extracted generic code in util.pm
	Paved the way for 802.1x deauth support
	Improved POD doc
	Doesn't rely on an open iplog entry to work: Fixes #871;
	http://www.packetfence.org/mantis/view.php?id=871

	* pf/lib/pf/util.pm: Two new util subroutines: mac2oid and oid2mac

2009-12-04	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFenceZEN_Installation_Guide.odt: Updated ZEN guide for
	upcomming PacketFence ZEN release 1.8.6

	* pf/packetfence.spec: Updated RPM spec with link to correct database
	schema. Rebuilt packages: 1.8.6-2

2009-12-03	Regis Balzard <rbalzard@inverse.ca>
	* pf/html/admin/login.php: Added optional LDAP params for admin login

2009-12-01	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/ChangeLog, pf/NEWS, pf/conf/pf-release, pf/installer.pl, 
	pf/packetfence.spec, pf/t/pfcmd.t, 
	pf/docs/PacketFence_Administration_Guide.odt,
	pf/docs/PacketFence_Developers_Guide.odt,
	pf/docs/PacketFence_Installation_Guide.odt: Bump to version 1.8.6

	* pf/bin/pfcmd, pf/conf/documentation.conf, pf/conf/pf.conf.defaults,
	pf/lib/pf/node.pm: Expire mode deadline now works in vlan isolation
	mode. Fixes #865;
	http://www.packetfence.org/mantis/view.php?id=865

	* pf/addons/migrate-to-locationlog_history.sh: New script to help with
	smoothly migrating entries in locationlog to locationlog_history.

2009-11-30	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/db/pfschema.mysql.186, pf/installer.pl, pf/t/pfcmd.t, NEWS, 
	pf/UPGRADE: All database tables are now of InnoDB format. Fixes #747;
	http://www.packetfence.org/mantis/view.php?id=747

	* added pf/db/pfschema.mysql.186 and pf/db/upgrade-1.8.4-1.8.6.sql,
	pf/NEWS, pf/UPGRADE, pf/addons/database-backup-and-maintenance.sh
	pf/installer.pl, pf/t/pfcmd.t: Now providing a locationlog_history
	table by default and locationlog rotation after 15 days (instead of 2).
	Simplifies deployment (no need to create table by hand anymore)
	Added new schema and schema upgrade script and instructions
	Updated installer and tests
	Fixes #800;
	http://www.packetfence.org/mantis/view.php?id=800

	* pf/cgi-bin/pdp.cgi: Fixed invalid string concatenation. Fixes #862;
	http://www.packetfence.org/mantis/view.php?id=862

2009-11-27	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Developers_Guide.odt: fixed a typo

	* pf/lib/pf/util.pm: Disabled unnecessary caching in vlan isolation
	mode. Prevents out of memory crashes in pfmon on large networks. Fixes 
	#861;
	http://www.packetfence.org/mantis/view.php?id=861

	* pf/lib/node.pm: Added POD doc

	* pf/packetfence.spec: Removed the commented out %define macro for
	our versionning. It seems that macro in comments are also interpreted. 

2009-11-20	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/UPGRADE, pf/packetfence.spec: Changed some default behavior for 
	overwriting config files (for the better)
	RPM spec version bump to snapshot 20091120

2009-11-19	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/node.pm, pf/lib/pf/trigger.pm, pf/lib/pf/util.pm,
	pf/lib/pf/violation.pm: Fixed POD doc so that test passes

	* pf/t/binaries.t: Fixed test case: we removed pfcmd_ap.pl

	* pf/t/log.conf, pf/t/pfcmd.t, pf/t/services.t: Tests are now using
	their own target logfile: logs/packetfence-tests.log

	* pf/t/all.t, pf/t/services.t: Added tests to check if snort starts 
	successfully and if pfdetect can bind to it

	* Copied pf/conf/templates/snort.conf to 
	pf/conf/templates/snort.conf.pre_snort-2.8
	Modified pf/conf/templates/snort.conf, pf/lib/pf/services.pm: snort
	fixes
	Removed -o flag to snort startup string (deprecated in snort)
	Updated default snort.conf
	Fixes #581, #846, #849;
	http://www.packetfence.org/mantis/view.php?id=581
	http://www.packetfence.org/mantis/view.php?id=846
	http://www.packetfence.org/mantis/view.php?id=849

2009-11-18	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/bin/pfcmd_vlan, pf/lib/pf/SNMP/Cisco.pm, pf/lib/pf/violation.pm,
	pf/sbin/pfdhcplistener: New TODO and FIXME tasks

2009-11-17	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Installation_Guide.odt: Added repositories in
	OS requirements section of the install guide:
	- CentOS need extras which is enabled by default
	- RedHat needs EPEL (extra packages for enterprise linux) which is 
	disabled by default

	* pf/bin/pfcmd, pf/conf/ui.conf
	pf/html/admin/configuration/switches.php, pf/lib/pf/pfcmd/pfcmd.pm:
	Fixed SNMPv3 configuration from pfcmd and Web admin interface
	The SNMPUserNameTrap parameter was not exposed. Thanks to
	Jean-Francois Laporte for reporting this. Fixes #853;
	http://www.packetfence.org/mantis/view.php?id=853
	
	* pf/lib/pf/node.pm: commented code

2009-11-16	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/SNMP/Aruba.pm: Fixed string concatenation problem.
	Also took the opportunity to removed duplicated ERROR: string appended
	at the beginning of logger calls and commented out very verbose dumper 
	debug code.

	* pf/conf/violations.conf: Added new UserAgent sample string to block
	more iPods and reindexed the BlackBerry one

2009-11-13	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/cgi-bin/redir.cgi: Validating if $cgi->user_agent is defined. 
	Fixes #850;
	http://www.packetfence.org/mantis/view.php?id=850

2009-11-11	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/SNMP/Cisco/Aironet.pm, 
	pf/lib/pf/SNMP/Cisco/Catalyst_2950.pm, 
	pf/lib/pf/SNMP/Cisco/Catalyst_3500XL.pm, 
	pf/lib/pf/SNMP/Cisco/WLC_2106.pm, pf/lib/pf/SNMP/Cisco.pm, 
	pf/sbin/pfsetvlan: Properly documented thread-safety problems with
	Net::Appliance::Session

2009-11-10	Regis Balzard <rbalzard@inverse.ca>
	* pf/html/admin/configuration/switches_edit.php: 
	* pf/html/admin/configuration/switches_add.php: Fixed issues with SSH
	for CLI transport. Should be set to 'SSH' rather than 'ssh'

	* pf/sbin/pfsetvlan: Fixed issues with desAssociate trap for Wireless.
	Threads don't support SSH CLI transport mode. So we fork a call to 
	'pfcmd_vlan -deauthenticate ...'

2009-11-09	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/addons/802.1X/rlm_perl_packetfence.pl: Rewrite of our freeradius
	802.1x perl module. Resolving problems with guests (visitors) and 
	registered users in secure SSID. Fixes 839, 841;
	Also, VISITOR is now called GUEST and improved documentation while I 
	was at it.
	http://www.packetfence.org/mantis/view.php?id=839
	http://www.packetfence.org/mantis/view.php?id=841

2009-11-05	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/TODO: Added a TODO list to track some tasks

2009-11-03	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/lookup/node.pm, pf/UPGRADE: Added more information about 
	past IP in node lookup.
	Added UPGRADE warning that scripts relying on the output of lookup node
	could break.

	* pf/html/admin/configuration/switches_add.php,
	pf/html/admin/configuration/switches_edit.php: Fixed typo in switch
	definition in the Web Admin causing problems adding or editing a Cisco
	Catalyst 2970, 3500XL and wireless Controller 4400. Fixes 836;
	http://www.packetfence.org/mantis/view.php?id=836

2009-11-02	Regis Balzard <rbalzard@inverse.ca>
	* pf/lib/pf/services.pm: Fixed missing library requirement when using
	PacketFence with routed VLANs

2009-11-02	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/html/admin/node/lookup.php, pf/lib/pf/lookup/node.pm, 
	pf/lib/pf/pfcmd/help.pm: Node lookup now gives information about IP
	and DHCP status (from iplog)
	Updated pfcmd's help
	Output in Web Admin is no longer right-aligned

	* pf/html/admin/common.php: Fixed alignment of the filter input dialog 

	* pf/lib/pf/SNMP.pm, pf/lib/pf/vlan.pm: Removed dead code, added POD
	doc, added TODO tasks

	* pf/NEWS, pf/conf/pf-release: bumped to 1.9.0dev

2009-10-30	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/packetfence.spec: Correctly pinned Parse::RecDescent dependency to
	version 1.94 which is known to work. Fixes #806;
	http://www.packetfence.org/mantis/view.php?id=806

2009-10-28	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/NEWS, pf/packetfence.spec: 1.8.5 ready

	* pf/lib/pf/services.pm: In conf/switches.conf uplink=dynamic is no
	longer case-sensitive. Fixes #831;
	http://packetfence.org/mantis/view.php?id=831

	* pf/lib/pf/violation.pm: performance: verifying if violation already 
	exists in violation_trigger. Improves performance in situation where 
	there are a lot of devices repetively generating violation (ex: blocked
	iPods) because we detect it before launching `pfcmd violation add`.
	Also decreased logging prority from WARN to INFO

	* pf/lib/pf/violation.pm: Tighter validation in violation_trigger when
	database query returns a non-empty array (which is a bigger problem yet
	to be identified)

2009-10-27	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt: Decided to get rid of
	the release notes section (avoids manual data duplication)
	Added a pointer to NEWS, UPGRADE and ChangeLog in "About this guide"
	section.

	* pf/conf/pf-release: Version bump to 1.8.5

	* pf/docs/PacketFence_Administration_Guide.odt: Integrated release
	notes
	
	* pf/docs/PacketFence_Developers_Guide.odt,
	pf/docs/PacketFence_Installation_Guide.odt: Bumped release month

	* pf/installer.pl: Refer to database schema symlink instead of using a
	hardcoded version number

	* pf/installer.pl: Got rid of dead installer code

	* pf/t/SNMP.t, pf/t/critic.t, pf/t/pf.t, pf/t/pfcmd.t, pf/t/php.t,
	 pf/t/pod.t: Test file list update

2009-10-26	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/html/admin/configuration/switches_add.php, 
	pf/html/admin/configuration/switches_edit.php: Added newly supported
	switches to the Web Admin

	* pf/conf/templates/httpd.conf.apache22,
	pf/conf/templates/httpd.conf.pre_apache22: Using temporary redirects
	instead of permanent ones in the captive portal. Fixes #757;
	http://packetfence.org/mantis/view.php?id=757
	Reported by Josh Ward (he also suggested the fix) Many thanks!

	* pf/packetfence.spec: Parse::RecDescent is a build dependency AND a 
	runtime one. Hopefully fixes #806 for good;
	http://packetfence.org/mantis/view.php?id=806

	* pf/packetfence.spec, pf/installer.pl: Packaging and installer fixes
	- Parse::RecDescent is a build dependency not a runtime one. Fixes #806;
	  http://packetfence.org/mantis/view.php?id=806
	- Pulling php-pear-Log instead of php-pear. Fixes #804
	  http://packetfence.org/mantis/view.php?id=804
	- jpgraph is no longer installed by installer.pl (is a dep of the rpm)
	- php-pear-Log is no longer installed by installer
	- Lots of new TODO task for installer

	* pf/lib/pf/pfcmd/pfcmd.pm: Removed use of Log::Log4perl
	This removes a lot of unnecessary build requirements and it wasn't even
	used anywhere in this file. Fixes #826;
	http://packetfence.org/mantis/view.php?id=826

	* pf/packetfence.spec: Added dependency to enable SNMPv3 AES encryption
	support. Fixes #775; http://packetfence.org/mantis/view.php?id=775

	* pf/conf/documentation.conf, pf/conf/pf.conf.defaults: Clarified 
	Nessus Scan parameters

	* pf/docs/PacketFence_Administration_Guide.odt: Updated Nessus
	documentation

2009-10-23	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/packetfence.spec: Improvements to the RPM SPEC file
	- New complete build instructions
	- New source_release tag that allow us to do multi distro release with 
	the same source tarball
	- Updated list of files to include new stuff

	* pf/html/admin/scan/index.php, pf/html/admin/scan/scan.php: Disabled
	scans from the web admin and made the result page the default page when
	clicking on the scan tab

	* Added pf/html/user/content/templates/scan-in-progress.html.
	* Modified pf/cgi-bin/redir.cgi, pf/cgi-bin/release.cgi, 
	pf/conf/locale/en/LC_MESSAGES/packetfence.po, 
	pf/conf/locale/fr/LC_MESSAGES/packetfence.po, pf/lib/pf/scan.pm, 
	pf/lib/pf/web.pm: Nessus scan integration
	- Tracking the state of registration scans
	- New "scan in progress" page
	- redir.cgi and release.cgi will redirect to the new scan in progress
	  page if a scan is in progress
	- Not showing Nessus server's password in the logs anymore
	- Scanning page now redirect once the progress bar is over

2009-10-22	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/cgi-bin/release.cgi, pf/conf/documentation.conf, 
	pf/conf/locale/en/LC_MESSAGES/packetfence.po, 
	pf/conf/locale/fr/LC_MESSAGES/packetfence.po, pf/conf/pf.conf.defaults,
	pf/lib/pf/config.pm, pf/lib/pf/web.pm: Nessus scan integration
	- Forking in the background when calling a scan to pfcmd and redirecting
	  to a scan in progress page
	- New parameter scan.duration to control the length of the scan progress
	  bar
	- French and English translations of the new scan in progress page
	- New generate_scan_progress_page() in lib/pf/web.pm

	* pf/cgi-bin/release.cgi: Removed vid hack for Nessus scan violation

	* pf/lib/pf/trigger.pm: Removed deprecated code: trigger_scan and 
	trigger_scan_add subs

	* pf/lib/pf/scan.pm: Scan using violation_trigger mechanism now
	Also moved IP to MAC test earlier and quit if it can't resolve

	* pf/lib/pf/violation.pm: Preparing violation_trigger to handle scan 
	violations
	- new test: scan violation id not authorized in config
	- took out of the trigger id loop various one time tests (inefficient)
	- violation trigger returns 1 if at least one violation is added 0 
	  otherwise
	- bonus POD doc

	* pf/cgi-bin/pdp.cgi, pf/sbin/pfdetect: Fixed trappable ip test to add
	a violation.

2009-10-21	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/sbin/pfdetect: pfdetect now sends IP when calling violation_trigger
	since the information is already available to it anyway

	* pf/lib/pf/violation.pm: Using $bin_dir instead of hardcoded path
	to call pfcmd. Closes a TODO task.

	* pf/lib/pf/scan.pm, pf/bin/pfcmd, pf/lib/pf/trigger.pm: Refactoring
	Moved all scanning code out of pfcmd into a new scan module

	* pf/bin/pfcmd, pf/lib/pf/schedule.pm: Nessus scan integration
	Removed all references of trigger id (tid) regarding scanning

	* pf/lib/pf/pfcmd/help.pm: pfcmd schedule documentation now accurate

	* pf/bin/pfcmd, pf/cgi-bin/release.cgi, pf/html/admin/scan/scan.php:
	Nessus Scan integration
	No more special scans with tid=99999 carrying a special meaning. All
	scanning is done with command line nessus client instead of 
	Nessus::ScanLite (which lacked plugin configuration capabilities). Other
	fixes includes:
	- Removing the 1200001 violation only if one exists (fix a problem when
	  scanning from Web admin)
	- Set HOME= env before calling nessus to conf/nessus/ so the .nessusrc 
	  file is created at a location accessible from CLI and web interfaces
	- Capturing the output of the nessus call and logging it if nessus 
	  returns a non-zero exit code
	- trigger_scan is deprecated
	- Updated web admin accordingly and explicitly disabled scheduled scans

2009-10-20	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/addons/802.1X/pfcmd_ap.pl: Deleted
	* pf/addons/802.1X/rlm_perl_packetfence.pl, pf/addons/802.1X/README:
	Performance improvement in the freeradius PacketFence module
	Merged the content of pfcmd_ap.pl into rlm_perl_packetfence.pl. This 
	avoids costly forks for each radius request.
	Also took the opportunity to add validation of the db handle.

2009-10-19	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/UPGRADE, pf/NEWS: Updated NEWS and UPGRADE with all the work done
	since 1.8.4

2009-10-16	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/violation.pm: Improved error-handling in violation_trigger
	Reverted fix in revision 5abfb5911a05dc03e9646eb79a48653155e39278
	because it was too convoluted and replaced it with something clearer.

	* pf/conf/violations.conf: Working Nessus config sample

	* pf/bin/pfcmd: Work torwards Nessus integration
	pfcmd now handles by itself the fact that it needs to close the 
	system scan violation if the scan was successfull

	* pf/lib/pf/action.pm, pf/lib/pf/violation.pm: Slight logging changes to
	better represent what is actually going on.

	* pf/lib/pf/trigger.pm: trigger_add_scan now follows a contract: returns
	1 if a violation was added by the trigger and 0 otherwise
	a litle POD doc as a bonus

2009-10-16      Regis Balzard <rbalzard@inverse.ca>
	* pf/conf/ui.conf:
	* pf/bin/pfcmd:
	* pf/lib/pf/pfcmd/pfcmd.pm:
	* pf/lib/pf/services.pm: Added the pf_gateway field in networks.conf 
	used to store the PacketFence gateway for a routed VLAN. This is field 
	is only used with routed Registration and Isolation VLANs.
	Added code to allow PacketFence to dynamically create static routes for
	routed Registration and Isolation VLANs. We use the pf_gateway field.

2009-10-16      Regis Balzard <rbalzard@inverse.ca>
	* pf/bin/pfcmd: Added a fix to show a message when trying to delete a 
	node having open locationlog entries. Fixes #807
	http://www.packetfence.org/mantis/view.php?id=807

2009-10-15      Regis Balzard <rbalzard@inverse.ca>
	* pf/conf/authentication/local.pm: Fixed test to validate if user/pwd 
	is ok for local authentication during registration process. Fixes #779
	http://www.packetfence.org/mantis/view.php?id=779

2009-10-15      Regis Balzard <rbalzard@inverse.ca>
	* pf/lib/pf/web.om: Fixed redir.cgi crash when upgrading useragent. 
	Fixes #782
	http://www.packetfence.org/mantis/view.php?id=782

2009-10-15      Regis Balzard <rbalzard@inverse.ca>
	* pf/lib/pf/violation.pm: "violation not added, no trigger found for.."
	messages too noisy in logs so we decreased log level from INFO to 
	DEBUG. Fixes #812
	http://www.packetfence.org/mantis/view.php?id=812

2009-10-15      Regis Balzard <rbalzard@inverse.ca>
	* pf/addons/accounting.pl 
	* pf/addons/autodiscover.pl 
	* pf/addons/convertToPortSecurity.pl 
	* pf/addons/recovery.pl 
	* pf/bin/flip.pl 
	* pf/bin/pfcmd_vlan 
	* pf/lib/pf/vlan.pm 
	* pf/lib/pf/services.pm 
	* pf/test/connect_and_read.pl 
	* pf/sbin/pfsetvlan: Adding missing test after call to 
	switch->instantiate(). If it returns 0 then stop executing more code
	and log an error. Fixes #755 and #813
	http://www.packetfence.org/mantis/view.php?id=755
	http://www.packetfence.org/mantis/view.php?id=813 

2009-10-14	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/cgi-bin/redir.cgi: Logging improvement in redir.cgi
	Messages and log priority makes more sense now

2009-10-13	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/vlan.pm: Increased logging severity for the "Can't
	determine Uplinks for the switch" message (from info to warn).
	The problem is that at this point nothing gets done by packetfence so
	it is rather important to see this message.

	* pf/conf/violations.conf: Added a new UserAgent statement to block
	PSPs

2009-10-13      Regis Balzard <rbalzard@inverse.ca>
	* pf/packetfence.init: Added test in condrestart to check if 
	pfsetvlan.pid exists. If so, restart packetfence. Fixes #805;
	http://www.packetfence.org/mantis/view.php?id=805

2009-10-13      Regis Balzard <rbalzard@inverse.ca>
	* pf/sbin/pfsetvlan.pm: Added missing test in pfsetvlan in order to 
	avoid warning messages. Fixes #792;
	http://www.packetfence.org/mantis/view.php?id=792

2009-10-13      Regis Balzard <rbalzard@inverse.ca>
	* pf/packetfence.spec: Added new dependencies on
	- perl-LDAP (used to authenticate users trough LDAP during registration)
	- php-ldap (used to authenticate users connecting to the Web interface 
	through LDAP)
	- perl-IPC-Cmd (used to generate static routes for registration and 
	isolation routed VLANs)
	- perl-SOAP-Lite (used when receiving alerts from Snort)
	Fixes #798;
	http://www.packetfence.org/mantis/view.php?id=798
	- seting the perl-parse-RecDescent version to 1.94 in order to avoid 
	issues with the newer versions that causes the pfcmd_pregrammar.pm 
	generation to fail. Fixes #806;
	http://www.packetfence.org/mantis/view.php?id=806

2009-10-13	Regis Balzard <rbalzard@inverse.ca>
	* pf/addons/pfcmd_ap.pl: In order to avoid unnecessary WIFI entries in
	locationlog (since authentication->reauthentication occurs very often), 
	we don't add new entries anymore if there is already one.i Fixes #788
	http://www.packetfence.org/mantis/view.php?id=788

2009-10-13	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt: Updated configuration 
	parameter reference with documentation.conf's changes for 
	trapping.whitelist.

2009-10-09	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/conf/violations.conf: Added device banning templates for iPod 
	touch, iPhone, BlackBerries, PlayStation 3, PSP and Slingbox. 

	* pf/conf/dhcp_fingerprints.conf: PlayStation 3 also detects
	PlayStation Portable (PSP)

2009-10-09      Regis Balzard <rbalzard@inverse.ca>
	* pf/lib/pf/vlan.pm: Removed isClientAlive() since we remove the Hub 
	violation that creates too many false positives. 
	* pf/sbin/pfsetvlan: Removed calls to isClientAlive().
	* pf/conf/violations.conf: Removed Hub violation definition.
	* pf/html/user/content/violations/hub.php: Removed this file.
	* pf/lib/pf/SNMP/Cisco.pm: Removed the parsing of c2900AddressViolation
	traps which only purpose what to generate Hub violations.

2009-10-09	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/web.pm: Changed priority of unknown User-Agent log message
	Was WARN is now INFO which is less scary and makes a lot more sense. 

	* pf/conf/documentation.conf, pf/conf/pf.conf.defaults: Documentation
	for the whitelist parameter is now more accurate.
	
	* pf/cgi-bin/pdp.cgi, pf/lib/pf/violation.pm, pf/sbin/pfdetect,
	pf/sbin/pfdhcplistener: The validation that the violation is applicable
	is now done in violation_trigger removing duplicate code. Fixes #801;
	http://www.packetfence.org/mantis/view.php?id=801

2009-10-08	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/rawip.pm, pf/lib/pf/util.pm, pf/sbin/pfmon: Testing for 
	whitelisted_mac is no longer called inside trappable_mac sub.
	Modified callers so they do the test themselves.
	Whitelisting validation was called two times because of that.

	* pf/lib/pf/util.pm: Removed commented code

2009-10-06	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/SNMP/Enterasys/D2.pm, pf/README_SWITCHES: Added support for
	Enterasys Standalone D2 Switch
	It works in linkUp/linkDown mode and port-security (called maclock on
	Enterasys hardware). Talks to the switch using SNMP.

	* pf/README_SWITCHES, pf/docs/PacketFence_Administration_Guide.odt: 
	Added instructions to setup the D2
	Updated supported switches list

2009-10-05	Olivier Bilodeau <obilodeau@inverse.ca>
	* UPGRADING: Added notes about the last two uplink fixes since someone
	could rely on the bug's behaviour without his knowledge.

	* pf/lib/pf/SNMP/Accton.pm, pf/lib/pf/SNMP/Cisco.pm, 
	pf/lib/pf/SNMP/Linksys.pm, pf/lib/pf/SNMP/Nortel.pm, pf/lib/pf/SNMP.pm:
	switches.conf's uplink=dynamic is now case-insensitive. Fixes #809;
	http://www.packetfence.org/mantis/view.php?id=809

	* pf/lib/pf/SNMP/Accton.pm, pf/lib/pf/SNMP/Cisco.pm, 
	pf/lib/pf/SNMP/Linksys.pm, pf/lib/pf/SNMP/Nortel.pm, pf/lib/pf/SNMP.pm:
	Various getUpLinks() subs didn't respect the "return -1 on failure" 
	contract. Fixes #795;
	http://www.packetfence.org/mantis/view.php?id=795

	* pf/conf/templates/httpd.conf.apache22,
	pf/conf/templates/httpd.conf.pre_apache22: Fixed the omission of a banned
	UserAgent from the https portion of the httpd config. Thanks Regis for
	pointing that out!

2009-10-02	Olivier Bilodeau <obilodeau@inverse.ca>
	* Added pf/addons/high-availability/dhcpd-3.0.5-init-script-lsb-fix.patch:
	Little patch to fix LSB compliance of dhcpd's init script. 
	Non-compliant init scripts generate scary error messages in Heartbeat. 

	* pf/conf/log.conf: Logging priority now shown in log files. Fixes
	#771;
	http://www.packetfence.org/mantis/view.php?id=771

	* pf/lib/pf/SNMP/Enterasys/SecureStack_C3.pm, pf/README_SWITCHES: Added
	support for Enterasys SecureStack C3 Switch
	It works in linkUp/linkDown mode and port-security (called maclock on
	Enterasys hardware). Talks to the switch using SNMP.
	
	* pf/docs/PacketFence_Administration_Guide.odt: Added instructions to
	setup the SecureStack C3
	Updated supported switches list
	Added comments about cleanup to do
	Minor formatting / whitespace cleanup

2009-09-28	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/SNMP/Enterasys/Matrix_N3.pm, pf/README_SWITCHES,
	pf/docs/PacketFence_Administration_Guide.odt: Added support for
	Enterasys Matrix N3 Switch (Chassis)
	It works in linkUp/linkDown mode and port-security (called maclock on
	Enterasys hardware). Talks to the switch using SNMP.
	Documentation on how to configure was added to the admin guide.

	* pf/lib/pf/SNMP/Enterasys.pm: Fix for maclock support (Enterasys' port
	security): Trap string had a typo in parseTrap()

	* pf/bin/pfcmd: Fixed a typo in a comment

2009-09-24	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt: Clarification of the
	vlan parameter in violations.conf

2009-09-22	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/lib/pf/SNMP/HP.pm: Removed unused code

2009-09-18	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Administration_Guide.odt: New switch config
	Added configuration information for SMC TigerStack 6224M. Thanks to
	Chinasee B. <chinasee.b@psu.ac.th> who provided his config.

	* pf/lib/pf/violation.pm: Crash fix
	If we attempted to trigger a violation but no trigger for the violation
	existed, we still tried to move on and add the violation which caused
	the use of a 0 in an hash reference thus a crash.

	* pf/lib/pf/vlan.pm: Fix a crash that happens if violation classes are
	corrupted and a vlan change is required (like when a violation is
	created)

2009-09-16	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFenceZEN_Installation_Guide.odt: Documentation update
	- updated commercial support section
	- version bump
	- ToC now linked internally
	- fixed a few typos

	* pf/docs/PacketFence_Developers_Guide.odt: Documentation update
	- updated custom_getCorrectVlan sub according to new 1.8.5 behavior
	- updated commercial support section
	- version bump
	- ToC now linked internally
	- fixed three typos

	* pf/docs/PacketFence_Administration_Guide.odt: Documentation update
	- updated supported switch list
	- added how to configure 3Com NJ220
	- added how to configure Amer SS2R24i
	- added how to configure Extreme Networks switches
	- integrated all the switches that we support in config section
	- added a MySQL performance optimization tip 
	- updated commercial support section
	- fixed several typos
	- removed whitespace
	- version bump
	- ToC now linked internally

2009-09-15	Olivier Bilodeau <obilodeau@inverse.ca>
	* Renamed pf/addons/high-availability/named-init-script-lsb-fix.patch
	to pf/addons/high-availability/named-9.2-init-script-lsb-fix.patch:
	bind 9.2 exposed wrong behavior but bind 9.3 is fine and patch doesn't
	apply anyway

2009-09-14	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/addons/high-availability/mysqld-init-script-lsb-fix.patch, 
	pf/addons/high-availability/named-init-script-lsb-fix.patch: LSB 
	compliance patches for MySQL and Bind

	* pf/addons/database-backup-and-maintenance.sh: Added basic database
	maintenance and backup script

	* pf/addons/logrotate: Added a basic logrotate sample script for 
	packetfence

2009-09-11	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/conf/templates/httpd.conf.apache22 and 
	pf/conf/templates/httpd.conf.pre_apache22: Block misbehaving User Agents
	Block at the apache level some User Agents that we don't care about
	such as Windows Update, etc. We give them a 403 error (forbidden).
	Fixes bug #790;
	http://www.packetfence.org/mantis/view.php?id=790

	* pf/lib/pf/SNMP/Linksys.pm: Deactivated port security on Linksys
	Known to be broken and the telnet code was sending SIGALRM and crashing
	pfsetvlan.
	Also added some trace level logging statements. Fixes bug #797;
	http://www.packetfence.org/mantis/view.php?id=797

	* pf/sbin/pfsetvlan: pfsetvlan stops on SIGALRM signal
	Die is properly sent to log4perl. No more misterious stops without any
	error. Alarm signals are known to be buggy with threaded perl. Fixes 
	bug #796;
	http://www.packetfence.org/mantis/view.php?id=796

2009-08-25	Olivier Bilodeau <obilodeau@inverse.ca>
	* pf/docs/PacketFence_Installation_Guide.odt: Install Guide updated
	Details
	- version bump
	- yum update before rpmforge install
	- removed priorities requirement (not sure about this one)
	- updated installation procedure to reflect new yum repo
	- re-generated ToC so that updating the table works with OpenOffice 3.1
	- added index links to the ToC elements, it now creates a linkified PDF
	- switch setup now points to the Admin Guide for more switch config
	samples and supported devices list
	- re-org: switches definition before custom trap handling functions 
	since pf's new behavior is based on switch definition rather than 
	per-node
	- explained new correctVlan behavior
	- modifed switches definition to outline the fact that vlan number can
	be overloaded in a specific switch from the default
	- some minor prettification
	- mentionned new support packages and added meat in commecial support 
	section


2009-08-19	Ludovic Marcotte <lmarcotte@inverse.ca>

	* Renamed CHANGES to NEWS and updated the spec
	file to reflect this change
	* packetfence.spec and
	pf/docs/MIB/Inverse-PacketFence-Notification.mib
	Modified to use support@inverse.ca as the contact information
