Voucher 'not found on any registered roll' error.
-
Hello,
Fairly new to PFSense but have successfully setup a Captive Portal on a VMware ESX based PFSense install. Works fine with both the local database and a locally hosted FreeRADIUS2 server, but now our conference organiser wants to use vouchers. I've gone through, enabled vouchers and generated a first test roll of 100 vouchers, 30 minute expiration period.
When I try to use them I get a 'Voucher Invalid' as error message on the client machine and in the System Logs I get a message that the voucher code is 'not found on any registered Roll':
Jun 20 13:45:33 logportalauth[40612]: FAILURE: UMbzYvRbb2V, 00:21:70:cb:59:0e, 192.168.1.100
Jun 20 13:45:33 logportalauth[40612]: UMbzYvRbb2V (1/7): not found on any registererd RollThe odd thing is that PFSense is finding the voucher on the roll, as the code is correctly shown as the 7th code on the first roll (1/7). I can't find anything about registering rolls, so I don't see that I'm missing something there and even looking through the source code, I can't see what's causing this. This happens both with the Captive Portal set to use the Local Database or RADIUS.
Any advice appreciated! :-)
TIA
Andrew.
-
The odd thing is that PFSense is finding the voucher on the roll, as the code is correctly shown as the 7th code on the first roll (1/7).
I believe the roll number and voucher number are encoded in the voucher code.
Any chance some voucher parameters might have changed between the time you generated the voucher code you are using and the time you tested the voucher code? I would get a new listing of roll1 vouchers and check the code you are using is on that list at the indicated position. I don't know if the voucher numbers in a roll start with 0 or 1.
This happens both with the Captive Portal set to use the Local Database or RADIUS.
The Local Database and RADIUS are options for authentication with username and password. The voucher authentication is independent of username/password authentication.
-
The odd thing is that PFSense is finding the voucher on the roll, as the code is correctly shown as the 7th code on the first roll (1/7).
I believe the roll number and voucher number are encoded in the voucher code.
Ah, that would explain that, thanks.
Any chance some voucher parameters might have changed between the time you generated the voucher code you are using and the time you tested the voucher code? I would get a new listing of roll1 vouchers and check the code you are using is on that list at the indicated position. I don't know if the voucher numbers in a roll start with 0 or 1.
They seem to start from 1.
I've just made a new roll, it seems to create OK, but still the same problem, either when I try to login or just to test the vouchers in Status -> Captive Portal -> Test Vouchers:
Jun 21 09:22:09 logportalauth[46051]: hJhjXPUJBXz (2/1): not found on any registererd Roll
Jun 21 09:21:37 logportalauth[6559]: Voucher: All 10 vouchers from Roll 002 marked unusedand here's the actual roll as downloaded from PFSense:
Voucher Tickets 1..10 for Roll 2
Nr of Roll Bits 16
Nr of Ticket Bits 10
Nr of Checksum Bits 5
magic initializer 1457009216 (32 Bits used)
Character Set used 2345678abcdefhijkmnpqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ
hJhjXPUJBXz
Tis8bPWru2m3
UuWBkJ8VZ3t
xynpkeVai7Z
FDdJj3fxUDx
CDqU53zSntd3
6EbLiDyZ4uB
4nrM58sCY643
4FDCpS7ashc
mhLPAk4cz2wThis happens both with the Captive Portal set to use the Local Database or RADIUS.
The Local Database and RADIUS are options for authentication with username and password. The voucher authentication is independent of username/password authentication.
That's good as I'd worried that I had to use Local Database with vouchers and I really wanted to use our RADIUS server for some users and vouchers for guests.
Thanks again.
Andrew.
-
<bump>No-one got any ideas?</bump>
-
What build of pfSense are you using?
Captive Portal seems to have been broken in 2.1 builds for at least the last couple of months though its a few weeks since I updated my 2.1 box.
-
When I try to use them I get a 'Voucher Invalid' as error message on the client machine and in the System Logs I get a message that the voucher code is 'not found on any registered Roll':
Jun 20 13:45:33 logportalauth[40612]: FAILURE: UMbzYvRbb2V, 00:21:70:cb:59:0e, 192.168.1.100
Jun 20 13:45:33 logportalauth[40612]: UMbzYvRbb2V (1/7): not found on any registererd RollAndrew.
Hi Andrew,
I'm having the exact same problem. Did you manage to find a solution?
-
uh…
same prob after update.
i have dual-wan, dual lan where lan2 is guest-lan with vouchers...it must run on friday or they eat me...
-
Hi WolfHenk,
I'm currently running a setup for guest access through vouchers with pf sense 2.0.3.
For some reason some of the vouchers don't work. I ended up testing the list of vouchers through Status/Captive portal/Test vouchers
I removed the ones that are bad from the list (there warren many) and the system is working fine with the rest of the vouchers. -
From memory, the default character set for vouchers includes some characters that are fairly easily confused, especially if the printer on which the voucher is printed is not as sharp as it should be: in a pseudo random selection of characters it can be difficult to distinguish digit 0 from letter O and digit 1 from letter l or i
-
From memory, the default character set for vouchers includes some characters that are fairly easily confused, especially if the printer on which the voucher is printed is not as sharp as it should be: in a pseudo random selection of characters it can be difficult to distinguish digit 0 from letter O and digit 1 from letter l or i
I was checking with copy/paste from the generated file, not from printed vouchers.
-
I was checking with copy/paste from the generated file, not from printed vouchers.
I don't recall I have ever seen this problem. Perhaps my sample was too small. I have used over 320 vouchers from at least 5 printed rolls and don't recall any voucher codes that were not accepted (apart from my typing errors). It is also at least a year since I did that testing. Maybe time to test my old voucher codes again.
-
I just tested voucher codes from roll0 and roll1 which I generated nearly two years ago. None of the voucher codes were reported invalid. I wonder what is different about your test.