Mmm I have a web service so I have users and password... So If somebody wants to login in the captive portal first i want to see in the web service if ther is this user, and if the user exists i add the user in the mysql database and freeradius athenticate thes user from the mysql database... El 16/03/2012 19:37, "Alan Buxey" <A.L.M.Buxey@lboro.ac.uk> escribió:
On Sat, Mar 17, 2012 at 7:55 AM, Fabricio Flores <fabrifloresg@gmail.com> wrote:
Mmm I have a web service so I have users and password... So If somebody wants to login in the captive portal first i want to see in the web service if ther is this user, and if the user exists i add the user in the mysql database and freeradius athenticate thes user from the mysql database...
I'm pretty sure there was a similar thread earlier about this. Anyway, for that purpose you do NOT want daloradius/dialupadmin/whatever. Instead, what you need is: - a captive portal login page, that supports dynamic processing, that you can customize (e.g. http://net-mai.net/files/hotspotlogin.php.txt ) - knowledge on that particular programing laguange (e.g. http://php.net/docs.php ) - knowledge on how to create users on FR's sql table. (e.g. http://wiki.freeradius.org/rlm_sql ) The "i want to see in the web service if ther is this user" part can be easily done by modifying the hotspotlogin page, and "add the user in the mysql database" part is basically you modify the hostspotlogin page to just create an entry in radcheck with (randomly-created) cleartext-password attribute, and possibly another entry with Exipration attribute. After that set the hotspotlogin to redirect to the captive portal (e.g. chillispot) with the correct generated username and password. Users don't even need to know what the generated password is. The process between captive portal and radius is then just another normal NAS <-> radius AAA process, nothing special about it. -- Fajar
Hello every body: I just set up a freeradius server right now, Please help me to test it by run $radtest snan4love 123456 119.127.12.6 1812 12345678 I will be waiting here. BTW,i do a test my self via a NAS not radtest, it doesnt work. is there something like TimeOut in NAS when it try to connect the radius server? Thank you very much Joey
2012/3/17 ZhenJoey <snan4love@hotmail.com>:
Hello every body: I just set up a freeradius server right now, Please help me to test it by run $radtest snan4love 123456 119.127.12.6 1812 12345678 I will be waiting here.
BTW,i do a test my self via a NAS not radtest, it doesnt work.
And what makes you think it will work when other test it? Don't be lazy. Do your own homework. Some things to check: - make sure there's no firewall active in the server (e.g. make sure iptables is disabled, or that the default rule is ACCEPT). It simplifies things a lot. - make sure the NAS can communicate with the radius serer (ping will be a good start) - run the server in debug mode (radiusd -X) If you need another host to run radtest, use virtualbox/kvm/whatever, have it use bridged networking and assign the guest an IP address in the same network segment as the host. -- Fajar
Thank YOu Fajar： Thank you for ur advice,the problem soloved. the probelm is i forgot to set up the NAS's gateway IP address, so it still a two layer device,the request message could not get out of the device. Than k you very much Joey
Date: Sat, 17 Mar 2012 14:47:03 +0700 Subject: Re: Any body here?Please help me to test my server. From: list@fajar.net To: freeradius-users@lists.freeradius.org
2012/3/17 ZhenJoey <snan4love@hotmail.com>:
Hello every body: I just set up a freeradius server right now, Please help me to test it by run $radtest snan4love 123456 119.127.12.6 1812 12345678 I will be waiting here.
BTW,i do a test my self via a NAS not radtest, it doesnt work.
And what makes you think it will work when other test it?
Don't be lazy. Do your own homework.
Some things to check: - make sure there's no firewall active in the server (e.g. make sure iptables is disabled, or that the default rule is ACCEPT). It simplifies things a lot. - make sure the NAS can communicate with the radius serer (ping will be a good start) - run the server in debug mode (radiusd -X)
If you need another host to run radtest, use virtualbox/kvm/whatever, have it use bridged networking and assign the guest an IP address in the same network segment as the host.
-- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Ok you really help me... Thank you very much... El 17/03/2012 02:42, "Fajar A. Nugraha" <list@fajar.net> escribió:
On Sat, Mar 17, 2012 at 7:55 AM, Fabricio Flores <fabrifloresg@gmail.com> wrote:
Mmm I have a web service so I have users and password... So If somebody wants to login in the captive portal first i want to see in the web service if ther is this user, and if the user exists i add the user in the mysql database and freeradius athenticate thes user from the mysql database...
I'm pretty sure there was a similar thread earlier about this.
Anyway, for that purpose you do NOT want daloradius/dialupadmin/whatever.
Instead, what you need is: - a captive portal login page, that supports dynamic processing, that you can customize (e.g. http://net-mai.net/files/hotspotlogin.php.txt ) - knowledge on that particular programing laguange (e.g. http://php.net/docs.php ) - knowledge on how to create users on FR's sql table. (e.g. http://wiki.freeradius.org/rlm_sql )
The "i want to see in the web service if ther is this user" part can be easily done by modifying the hotspotlogin page, and "add the user in the mysql database" part is basically you modify the hostspotlogin page to just create an entry in radcheck with (randomly-created) cleartext-password attribute, and possibly another entry with Exipration attribute.
After that set the hotspotlogin to redirect to the captive portal (e.g. chillispot) with the correct generated username and password. Users don't even need to know what the generated password is. The process between captive portal and radius is then just another normal NAS <-> radius AAA process, nothing special about it.
-- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Fabricio Flores -
Fajar A. Nugraha -
ZhenJoey