• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

One Voucher Per Device

Captive Portal
12
147
34.6k
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • G
    Gertjan
    last edited by Jul 12, 2019, 9:20 PM

    Using vouchers ?
    Don't think so. That means changing the code - > more php editing in this case.

    But I'm doing exactly that right know at my work : a hotel.
    Classic login users (not vouchers) - and a unique password for each room.
    And freeradius, that limit just fine each user at 2 max logins.

    No "help me" PM's please. Use the forum, the community will thank you.
    Edit : and where are the logs ??

    C 2 Replies Last reply Jul 12, 2019, 9:35 PM Reply Quote 0
    • C
      colleytech @Gertjan
      last edited by Jul 12, 2019, 9:35 PM

      @Gertjan said in One Voucher Per Device:

      Using vouchers ?
      Don't think so. That means changing the code - > more php editing in this case.

      But I'm doing exactly that right know at my work : a hotel.
      Classic login users (not vouchers) - and a unique password for each room.
      And freeradius, that limit just fine each user at 2 max logins.

      @Gertjan , not for voucher, but usernames and passwords...almost same environment.. users can log in with room number and surname as username and password..... then vouchers can be for conference guests... where a particular voucher can be adjusted for the amount of conference participants

      1 Reply Last reply Reply Quote 0
      • D
        Derelict LAYER 8 Netgate
        last edited by Jul 13, 2019, 1:30 AM

        A voucher can be for one device or anyone with the code. There is no numeric limit that can be applied.

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • C
          colleytech @Gertjan
          last edited by Jul 13, 2019, 12:13 PM

          @Gertjan said in One Voucher Per Device:

          Using vouchers ?
          Don't think so. That means changing the code - > more php editing in this case.

          But I'm doing exactly that right know at my work : a hotel.
          Classic login users (not vouchers) - and a unique password for each room.
          And freeradius, that limit just fine each user at 2 max logins.

          @Gertjan would you mind sharing your progress and code when you successfully get it to work on 2 devices per user.. regards

          1 Reply Last reply Reply Quote 0
          • G
            Gertjan
            last edited by Jul 13, 2019, 4:16 PM

            No progress, no code needed.

            As said, you need Freeradius. The package.

            On the first user you declare in Freeradius, you add this in the advanced section :

            login-to-view

            All further user will use this setting : not more then 2 logins per account.

            How to set up Freeradius ?
            That's not a question. This thing is huge and needs to be studied. It's like a mail server or web server, there is no such thing as "a click here and click therr and your up".

            I advise that you start looking at the videos from Netgate on Youtube.

            Not that it really matters, but I'm using a MySQL (Maria) DB server for the Freeradius storage needs. That just a choice, none is needed actually, Freeradius can also work with a flat file data base, stored on the pfSense drive.

            No "help me" PM's please. Use the forum, the community will thank you.
            Edit : and where are the logs ??

            C 2 Replies Last reply Jul 15, 2019, 9:24 AM Reply Quote 0
            • C
              colleytech @Gertjan
              last edited by Jul 15, 2019, 9:24 AM

              This post is deleted!
              1 Reply Last reply Reply Quote 0
              • C
                colleytech @Gertjan
                last edited by Jul 15, 2019, 9:27 AM

                @Gertjan said in One Voucher Per Device:

                No progress, no code needed.

                As said, you need Freeradius. The package.

                On the first user you declare in Freeradius, you add this in the advanced section :

                login-to-view

                All further user will use this setting : not more then 2 logins per account.

                @Gertjan ...ok.. i have added this above line in the freeRadius, with option 3 (First sessions per username / voucher) selected in non concurrent login, but only one device can log in, the second device comes wit the error "reuse of id not allowed'
                am i missing something??

                G 1 Reply Last reply Jul 15, 2019, 2:27 PM Reply Quote 0
                • G
                  Gertjan @colleytech
                  last edited by Jul 15, 2019, 2:27 PM

                  @colleytech said in One Voucher Per Device:

                  the second device comes wit the error "reuse of id not allowed'
                  am i missing something??

                  Ah, so you're using my code that changes somewhat the way how vouchers login :

                  1. many
                  2. only last
                  3. only first

                  Right ?
                  You can't change that behavior, except if you are will to "play"with the code (PHP script).

                  If you are willing to drop voucher usage, and step over to the classic user/password,
                  and
                  you use FreeRadius
                  then
                  you could have something like
                  " Simultaneous-Use := 3 "
                  (maximum 2 user per login now )

                  No "help me" PM's please. Use the forum, the community will thank you.
                  Edit : and where are the logs ??

                  C 2 Replies Last reply Jul 15, 2019, 7:16 PM Reply Quote 0
                  • C
                    colleytech @Gertjan
                    last edited by Jul 15, 2019, 7:16 PM

                    @Gertjan said in One Voucher Per Device:

                    @colleytech said in One Voucher Per Device:

                    the second device comes wit the error "reuse of id not allowed'
                    am i missing something??

                    Ah, so you're using my code that changes somewhat the way how vouchers login :

                    1. many
                    2. only last
                    3. only first

                    Right ?
                    You can't change that behavior, except if you are will to "play"with the code (PHP script).

                    If you are willing to drop voucher usage, and step over to the classic user/password,
                    and
                    you use FreeRadius
                    then
                    you could have something like
                    " Simultaneous-Use := 3 "
                    (maximum 2 user per login now )

                    @Gertjan your code works with freeRadius users, thats what i use it for.. i dont mind going without vouchers..
                    if you use the default pfsense php code, the simultaneous-use =3 will work, but it wil always disconnect the logged in user, to make way for the new login...
                    just like what your code is doing, stopping reuse of id without disconnecting the current user,, is there a way to achieve that with freeRadius.. whereby, after two devices logs in, the third one will be dropped, instead of the already logged in devices..
                    Regards

                    1 Reply Last reply Reply Quote 0
                    • C
                      colleytech @Gertjan
                      last edited by Aug 3, 2019, 6:36 PM

                      you use FreeRadius

                      then
                      you could have something like
                      " Simultaneous-Use := 3 "
                      (maximum 2 user per login now )

                      @Gertjan i am still battling with this😁😁... is there a way i could use this and stil not get my two connected devices disconnected when a third login attempt is done..
                      the goal is to get two devices per user, then a third login will be dropped instead of it, disconnecting an already connected device..

                      thanks in advance

                      G 1 Reply Last reply Aug 5, 2019, 5:56 AM Reply Quote 0
                      • G
                        Gertjan @colleytech
                        last edited by Aug 5, 2019, 5:56 AM

                        @colleytech said in One Voucher Per Device:

                        @Gertjan i am still battling with this... is there a way i could use this and stil not get my two connected devices disconnected when a third login attempt is done..
                        the goal is to get two devices per user, then a third login will be dropped instead of it, disconnecting an already connected device..

                        That what's I'm doing right now. With FreeRadius.
                        Without it : I guess not.

                        No "help me" PM's please. Use the forum, the community will thank you.
                        Edit : and where are the logs ??

                        C 1 Reply Last reply Aug 5, 2019, 12:19 PM Reply Quote 0
                        • C
                          colleytech @Gertjan
                          last edited by Aug 5, 2019, 12:19 PM

                          @Gertjan

                          @Gertjan said in One Voucher Per Device:

                          @colleytech said in One Voucher Per Device:

                          @Gertjan i am still battling with this... is there a way i could use this and stil not get my two connected devices disconnected when a third login attempt is done..
                          the goal is to get two devices per user, then a third login will be dropped instead of it, disconnecting an already connected device..

                          That what's I'm doing right now. With FreeRadius.
                          Without it : I guess not.

                          @Gertjan ,
                          kindly indulge me, whenever i do it with freeradius, two devices will connect, but a third device attempting to log in will always disconnect one of the already logged in devices, thats what i am trying to avoid,,, if there is any additional setting or line of code to be added, kindly point me to it,

                          G 1 Reply Last reply Aug 5, 2019, 12:36 PM Reply Quote 0
                          • G
                            Gertjan @colleytech
                            last edited by Aug 5, 2019, 12:36 PM

                            @colleytech said in One Voucher Per Device:

                            whenever i do it with freeradius, two devices will connect, but a third device attempting to log in will always disconnect one of the already logged in devices

                            ??
                            That's not my experience.

                            The " Simultaneous-Use := 2 " statement will not allow a third login.
                            It doesn't kick out one of the two already logged in users.

                            Example :

                            login-to-view

                            Room number (== uiser) 116 : 2 parents and 3 kids.
                            2 iPads, 3 iPhones, some Samsung device, a Kindle and some other wifi device (a portable PC ?).

                            The first two logins for user "116" work fine, a third one get authenticated (same user = "116" and password) but gets thrown out a couple of seconds during the REAUTHENTICATION process : the max user threshold was reached.

                            No "help me" PM's please. Use the forum, the community will thank you.
                            Edit : and where are the logs ??

                            C 1 Reply Last reply Aug 5, 2019, 2:36 PM Reply Quote 0
                            • C
                              colleytech @Gertjan
                              last edited by Aug 5, 2019, 2:36 PM

                              @Gertjan said in One Voucher Per Device:

                              @colleytech said in One Voucher Per Device:

                              whenever i do it with freeradius, two devices will connect, but a third device attempting to log in will always disconnect one of the already logged in devices

                              ??
                              That's not my experience.

                              The " Simultaneous-Use := 2 " statement will not allow a third login.
                              It doesn't kick out one of the two already logged in users.

                              Example :

                              login-to-view

                              Room number (== uiser) 116 : 2 parents and 3 kids.
                              2 iPads, 3 iPhones, some Samsung device, a Kindle and some other wifi device (a portable PC ?).

                              The first two logins for user "116" work fine, a third one get authenticated (same user = "116" and password) but gets thrown out a couple of seconds during the REAUTHENTICATION process : the max user threshold was reached.

                              @Gertjan i must be missing something,,,
                              i have restored the box to factory and setup captive portal fresh, with no concurrent checked, and Simultaneous-Use := 3 placed in the freeRad user, i can get just one user connected, other subsequent users disconnects the first user "not what i want"..............

                              no concurrent unchecked and Simultaneous-Use := 3 placed in the freeRad user, i can log in with multiple devices, "not what i want"

                              applying your patch to select
                              1.many
                              2. only last
                              3. only first
                              and Simultaneous-Use := 3 placed in the freeRad user, doesnt still get the job done,,,,
                              what can i post here for you to check

                              G 1 Reply Last reply Aug 5, 2019, 8:18 PM Reply Quote 0
                              • G
                                Gertjan @colleytech
                                last edited by Aug 5, 2019, 8:18 PM

                                @colleytech said in One Voucher Per Device:

                                applying your patch to select
                                1.many
                                2. only last
                                3. only first

                                That patch has nothing to do with FreeRadius.

                                @colleytech said in One Voucher Per Device:

                                her subsequent users disconnects the first user "not what i want"..............

                                I have to check things tomorrow, when I'm on site.
                                Look at my image = log again.
                                See (bottom) the oldest login. Just above (log is reverse) some OTHER 116 user is disconnected ... etc.

                                No "help me" PM's please. Use the forum, the community will thank you.
                                Edit : and where are the logs ??

                                C 2 Replies Last reply Aug 5, 2019, 8:45 PM Reply Quote 0
                                • C
                                  colleytech @Gertjan
                                  last edited by colleytech Aug 5, 2019, 8:52 PM Aug 5, 2019, 8:45 PM

                                  That patch has nothing to do with FreeRadius.
                                  @Gertjan maybe u didn't test the patch,, that patch overrides every setting, anything u apply on freeRadius doesnt reflect, as far as the patch is there.. the patch is so powerful 😀

                                  I have to check things tomorrow, when I'm on site.
                                  Look at my image = log again.
                                  See (bottom) the oldest login. Just above (log is reverse) some OTHER 116 user is disconnected ... etc.

                                  @Gertjan please do,, i wil be so grateful if i accomplish my goal

                                  1 Reply Last reply Reply Quote 0
                                  • C
                                    colleytech @Gertjan
                                    last edited by Aug 6, 2019, 9:23 AM

                                    @Gertjan said in One Voucher Per Device:

                                    I have to check things tomorrow, when I'm on site.

                                    @Gertjan , any luck?

                                    1 Reply Last reply Reply Quote 0
                                    • R
                                      rayyanthameem @Gertjan
                                      last edited by Aug 18, 2019, 6:17 PM

                                      This post is deleted!
                                      1 Reply Last reply Reply Quote 0
                                      • R
                                        rayyanthameem @Gertjan
                                        last edited by Aug 18, 2019, 7:19 PM

                                        @Gertjan said in One Voucher Per Device:

                                        Captive portal users get message you are connected but there is no internet

                                        I was trying to apply this patch and I'm getting below error:

                                        Patch can NOT be applied cleanly (detail)
                                        Patch can NOT be reverted cleanly (detail)

                                        I can apply the patch by editing the below files,

                                        src/etc/inc/captiveportal.inc
                                        src/etc/inc/system.inc
                                        src/usr/local/captiveportal/index.php

                                        but I'm using your version of 'src/etc/inc/captiveportal.inc'

                                        What is the solution for this?

                                        Thanks in advance

                                        G 1 Reply Last reply Aug 19, 2019, 5:22 AM Reply Quote 0
                                        • G
                                          Gertjan @rayyanthameem
                                          last edited by Aug 19, 2019, 5:22 AM

                                          @rayyanthameem said in One Voucher Per Device:

                                          I was trying to apply this patch and I'm getting below error:
                                          Patch can NOT be applied cleanly (detail)
                                          Patch can NOT be reverted cleanly (detail)

                                          So :

                                          @Gertjan said in One Voucher Per Device:

                                          See the 'other' thread that handles that subject.
                                          See also here : https://github.com/pfsense/pfsense/pull/4042 the solution is in feedback stage. The patch can be imported 'official' (again, see other other thread for details how to do so).

                                          This thread handles an entire other issue.

                                          No "help me" PM's please. Use the forum, the community will thank you.
                                          Edit : and where are the logs ??

                                          R 1 Reply Last reply Aug 19, 2019, 5:44 AM Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.