Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    One Voucher Per Device

    Captive Portal
    12
    147
    34.5k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • W
      wazim4u @Iahmad
      last edited by

      @ishtiaqaj Files are same as given above. Test them if they are not working let me know.
      I am currently doing testing with FreeRADIUS server & Daloradius which is working perfectly with one voucher per device & Accounting. once my testing is over will move all built-in pfSense voucher system to Radius Based Voucher.

      1 Reply Last reply Reply Quote 0
      • C
        colleytech @Gertjan
        last edited by

        @Gertjan is there any update to the php script for one voucher for one device? when i use your code for one voucher a device, it allows every code to connect multiple devices, even if u select first login... kindly help review the code for 2.4.4 p3

        W 1 Reply Last reply Reply Quote 0
        • W
          wazim4u @colleytech
          last edited by

          @colleytech I have no issue with Pfsense 2.5-Dev. 1200 Users 800 plus concurrent
          recent log from 24-April-2020 given below. if someone tries to use same voucher, not allowed.

          Apr 24 09:03:16	logportalauth	22958	Zone: Camp - CONCURRENT VOUCHER LOGIN - NOT ALLOWED KEEPING OLD SESSION : 1688815233, 94:14:7a:55:b5:0e, 10.20.25.154
          DerelictD C 2 Replies Last reply Reply Quote 0
          • I
            Iahmad
            last edited by

            @wazim4u you using the same files shared im this post??

            W 2 Replies Last reply Reply Quote 0
            • W
              wazim4u @Iahmad
              last edited by

              @ishtiaqaj please find attached files from production system.

              1V1D Patch.zip

              1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate @wazim4u
                last edited by

                @wazim4u Hmm. That seems like it should log the voucher code that was attempted. Is it just on another line?

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                W 1 Reply Last reply Reply Quote 0
                • W
                  wazim4u @Derelict
                  last edited by wazim4u

                  @Derelict I just copied one line to show as example given below more detailed log.

                  Zone: Camp - The SQL array (WHERE ip = '10.20.25.153' OR (username != 'unauthenticated' AND lower(username) = '1688815233')) : Array
Apr 24 09:03:16	logportalauth	22958	Zone: Camp - Enteringh portal_allow(): , ,
Apr 24 09:02:59	logportalauth	40266	Zone: Camp - CONCURRENT VOUCHER LOGIN - NOT ALLOWED KEEPING OLD SESSION : 1688815233, 94:14:7a:55:b5:0e, 10.20.25.154
Apr 24 09:02:59	logportalauth	40266	Zone: Camp - Found NOT last: 1688815233, 94:14:7a:55:b5:0e, 10.20.25.154
Apr 24 09:02:59	logportalauth	40266	Zone: Camp - config['captiveportal'][Camp]['noconcurrentlogins'] 2 exists = set: 1688815233, 94:14:7a:55:b5:0e, 10.20.25.154
Apr 24 09:02:59	logportalauth	40266	Zone: Camp - Voucher + ! unauthenticated + (cpentry == user): 1688815233, 94:14:7a:55:b5:0e, 10.20.25.154
Apr 24 09:02:59	logportalauth	40266	Zone: Camp - config['captiveportal'][Camp]['noconcurrentlogins'] exists = set: 1688815233, 94:14:7a:55:b5:0e, 10.20.25.154
Apr 24 09:02:59	logportalauth	40266	Zone: Camp - Entering for each loop 1688815233 = 1688815233: 1688815233, 94:14:7a:55:b5:0e, 10.20.25.154
                  1 Reply Last reply Reply Quote 1
                  • DerelictD
                    Derelict LAYER 8 Netgate
                    last edited by

                    Ah I was looking at 1688815233 and incorrectly assuming it was an epoch seconds time or something. Thanks.

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    1 Reply Last reply Reply Quote 0
                    • C
                      colleytech @wazim4u
                      last edited by

                      @wazim4u what happen when i connect same voucher to two devices is that
                      1, both devices connects, even after applying the patch and selecting first login.
                      2. logged in vouchers usually appear at status>captive portal> active users,,,
                      now nothing like that, even under service>captive portal, logged in users usually show the number of people logged into the cp,,,,
                      but now nothing like that,, which means, i cannot delete active vouchers,,,
                      i have setup this system for a friend and it works fine, coming to mine nw, not working

                      W 1 Reply Last reply Reply Quote 0
                      • W
                        wazim4u @colleytech
                        last edited by wazim4u

                        @colleytech Your friend is lucky if it works for him. I may test it with 2.4.4-p3 and let you know. I tried before with 2.4.4-p3 it was showing no active users & more issues so i switched to 2.5 ( that time there was no 2.4.5 )

                        once voucher is active second device cannot use it he will get error reuse of authentication not allowed "

                        C ? 2 Replies Last reply Reply Quote 0
                        • C
                          colleytech @wazim4u
                          last edited by

                          @wazim4u do u have the 2.5 dev??

                          W 1 Reply Last reply Reply Quote 0
                          • W
                            wazim4u @colleytech
                            last edited by wazim4u

                            @colleytech thats what i said, yes I’ve 2 Production systems of pfSense 2.5 dev

                            C 1 Reply Last reply Reply Quote 0
                            • C
                              colleytech @wazim4u
                              last edited by

                              @wazim4u i mean the iso for the 2.5 dev version

                              W 1 Reply Last reply Reply Quote 0
                              • W
                                wazim4u @colleytech
                                last edited by

                                @colleytech download from given below link

                                https://www.pfsense.org/snapshots/

                                C 1 Reply Last reply Reply Quote 0
                                • C
                                  colleytech @wazim4u
                                  last edited by

                                  @wazim4u thanks for the link

                                  1 Reply Last reply Reply Quote 0
                                  • ?
                                    A Former User @wazim4u
                                    last edited by

                                    @wazim4u

                                    hi sir! you are using 2.5.0 and this patch (1V1D Patch.zip)? One voucher per device is really working?

                                    thanks!

                                    1 Reply Last reply Reply Quote 0
                                    • I
                                      Iahmad
                                      last edited by

                                      @Gertjan is there any chance pfsense management consider this function in official release,???

                                      1 Reply Last reply Reply Quote 0
                                      • viktor_gV
                                        viktor_g Netgate
                                        last edited by

                                        Please check https://redmine.pfsense.org/issues/9432#note-6

                                        GertjanG 1 Reply Last reply Reply Quote 1
                                        • GertjanG
                                          Gertjan @viktor_g
                                          last edited by

                                          @viktor_g said in One Voucher Per Device:

                                          Please check https://redmine.pfsense.org/issues/9432#note-6

                                          @viktor_g 👍
                                          ( I can see what you are doing ☺ )

                                          No "help me" PM's please. Use the forum, the community will thank you.
                                          Edit : and where are the logs ??

                                          1 Reply Last reply Reply Quote 0
                                          • C
                                            coldmine @wazim4u
                                            last edited by coldmine

                                            @wazim4u Can you tell me how did you manage to make the patch work with 2.5 ,i have tried everything but it simply doesn't work at all.
                                            I get this in logs
                                            Aug 2 21:08:59 logportalauth 343 Zone: pp - Voucher login good for 9950 min.: FefhaqG3kux, 44:59:e3:71:1c:49, 10.0.0.11
                                            Aug 2 21:09:39 logportalauth 343 Zone: pp - Enteringh portal_allow(): , ,
                                            Aug 2 21:09:39 logportalauth 343 Zone: pp - The SQL array (WHERE ip = '10.0.0.12' OR (username != 'unauthenticated' AND lower(username) = 'fefhaqg3kux')) : Array
                                            Aug 2 21:09:39 logportalauth 343 (
                                            Aug 2 21:09:39 logportalauth 343 )
                                            Aug 2 21:09:39 logportalauth 343 : , ,
                                            Aug 2 21:09:39 logportalauth 343 Zone: pp - Enteringh portal_allow(): , ,
                                            Aug 2 21:09:39 logportalauth 343 Zone: pp - The SQL array (WHERE ip = '10.0.0.12' OR (username != 'unauthenticated' AND lower(username) = 'fefhaqg3kux')) : Array
                                            Aug 2 21:09:39 logportalauth 343 (
                                            Aug 2 21:09:39 logportalauth 343 )
                                            Aug 2 21:09:39 logportalauth 343 : , ,
                                            Aug 2 21:09:39 logportalauth 343 Zone: pp - Voucher login good for 9949 min.: FefhaqG3kux, d0:25:98:85:7e:50, 10.0.0.12

                                            GertjanG W 2 Replies Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.