Captive portal problems

Enrica_CH

I will provide you all information this weekend or on monday. How can I split or migrate these forum entries in a new topic? BTW the topic name is still valid ("captive portal problem") but you are right, it's not the same issue. I'm sure it's a bug then i installed a complete new installation to test this behaviour. I describ it later because I have to go now. Thanks. erik

bardelot

@Erik_CH:

I will provide you all information this weekend or on monday. How can I split or migrate these forum entries in a new topic? BTW the topic name is still valid ("captive portal problem") but you are right, it's not the same issue. I'm sure it's a bug then i installed a complete new installation to test this behaviour. I describ it later because I have to go now. Thanks. erik

You cannot split the topic yourself, but you can simply copy the useful parts and add a link to the old posts for reference. I know it's not always easy to choose a good topic name but "captive portal problem" can just be anything. A better subject would probably be "Captive Portal does not redirect after successful login" or "Captive Portal does not write authorized IP and MAC to ipfw tables".

bardelot

@Erik_CH:
I made some changes to the pfSense php module that should fix the problem of the IP/MAC addresses being added to the wrong table on 64bit platforms. As the patch is not yet included in the current snapshot you have to manually replace the pfSense module. You can download the new module here [1] and replace the old one in "/usr/local/lib/php/20090626". Make sure the rights are set correctly "chmod 555 /usr/local/lib/php/20090626/pfSense.so" and execute "killall php" such that the correct module is loaded.

[1] http://www.twinsquared.ch/bcyrill/download/get/pfsense/pfSense.so (64bit only)

mdmogren

@bardelot:

@pinuche:

I have the same problem than mdmogren and Erik_CH… Client authentificated but redirected to login page again and again.

There can be various reasons why the redirection is not working, you need to be more specific. e.g.

which snapshot are you using?

32bit or 64bit?

Does the problem only occur with certain browsers (e.g IE had once such a problem)

Does it happen for every website? http and https (if enabled)? Websites with and without a full path?

Are you using multiple captiveportal zones?

output of "ipfw table all list" after the user has logged in

describe your captiveportal config, e.g. using radius, nomacauth, etc..
…

Ideally you should create a new topic as the original problem of this topic has been resolved.

-Tried lots of recent snapshots in the last month, but currently still have this issue on 2.1-BETA1 (amd64) built on Sat Jan 19 20:44:15 EST 2013
-64 bit
-Same issue with Chrome, FF, and IE
-Happens for every website - only using http. Tried lots of different URLs with/without full path
-Just 1 Captive Portal Zone
-Using Local Auth Only and all other settings default
-Here is the ipfw table all list after authenticating and captive portal status showing user logged in but the username shows "unauthenticated":

[2.1-BETA1][admin@pfsense.localdomain]/root(1): ipfw table all list
---table(0)---
192.168.1.100/32 mac a0:88:b4:54:63:48 2045 0 0

bardelot

@mdmogren:
Can you try the above pfSense module? I made some changes that should fix the problem.

pinuche

@bardelot:

@mdmogren:
Can you try the above pfSense module? I made some changes that should fix the problem.

I have the same config and the same symptom than mdmogren (last snapshot, 64bits, every browser, …) and I just tried this module : it works ! :)
Cool, thanks a lot !

Enrica_CH

That's it! With your patch my test instance is working correctly. Thank you bardelot.

bardelot

I'm happy to have solved that mystery. The patch has just been added to the repo, so it will be included in the new snapshots.

mdmogren

@bardelot:

I'm happy to have solved that mystery. The patch has just been added to the repo, so it will be included in the new snapshots.

Starting with which snapshot? Still broke in Jan 22

m4st3rc1p0

had the same issue on 2.0.3 i try to gitsync to resolved the issue but its not working still looping on authentication page.

here's my built.

i386 pfsense 2.0.3

bardelot

@m4st3rc1p0:
The problem that was fixed here only appeared on the 64bit 2.1 snapshots and was due to the pfSense php module. On the 2.0.3 version the addition of IP addresses is not handled using the php module but the ipfw binary. So while the symptoms are similar the problems are different.

To get your problem sorted out quickly I suggest you create a new thread in the Captive Portal (2.0.3) board. To begin with exactly describe your setup and the problems you are experiencing. You may also want to add the output of the command "ipfw table all list" and "ipfw show" after a user tries to log in.

m4st3rc1p0

thank you bro, ill start a new thread