Is this possible

[Eshun Benjamin]

You can setup pap authentication in freeradius and enable password authentication ( by setting $userpassword=1;) on your chillispot cgi login script. If you are using dd-wrt on your WRT54GL then you can also configure your box for firewall protection etc. You may have to ask this questions in chillispot forum.
 
================================================== 
Benjamin K. Eshun

----- Message d'origine ----
De : YvesDM <ydmlog at gmail.com>
À : fred.zinsli at shooter.co.nz; FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
Envoyé le : Dimanche, 5 Août 2007, 9h53mn 23s
Objet : Re: Is this possible



On 8/4/07, Fred Zinsli <fred.zinsli at shooter.co.nz> wrote:
Hello everyone

I am very new to freeradius and security type environments and I am
feeling somewhat out of my depth at the moment.

My current situation is that I have a chillispot WIFI setup.  A diagram

of the current network can be seen at
http://www.shooter.co.nz/network.pdf
Looks nice :-)  



The problem I have with this setup is that unscrupulous people are
connecting to the unprotected APs without authenticating and playing
games between themselves therefore bogging down our network with their
traffic.

Just wondering, that firewall (smooth1) is a smoothwall box? 
If yes, It's been a while since i've been playing with it, but I remember there was a chillispot mod for it.(check the homebrew forum)

Just add an extra nic to that box and try it out. Your wireless will be completely seperated from the rest of the network too this way.
 
Also, as already suggested, you can run chillispot directly from a WRT54GL (maybe WAP54G also, not sure) with alternative firmware, which is probably the most easy solution.


...

Here is what I would like to do.  When a user attempts to connect to the

AP, the user is presented with a login screen (much like chillispot),
the user logs on and they are connected to the AP and can use the
network as expected.  If a user cannot authenticate the attempt is
logged and the connection attempt to the AP is dropped.

That's easy, once you've set up everything, just enable auth. logging in radiusd.conf


Kind regards,
Yves










      _____________________________________________________________________________ 
Ne gardez plus qu'une seule adresse mail ! Copiez vos mails vers Yahoo! Mail 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20070805/b1c8ea50/attachment.html>