Enabling MIM causes Authentication Error for voucher based logins in Captive Portal

[EDaleH]

@stephenw10

@stephenw10 said in Enabling MIM causes Authentication Error for voucher based logins in Captive Portal:

you also didn't hit it on a basic config?

Not this time, but in the past a 4 portal setup did NOT reproduce the problem, it worked fine. So far it is just this 8 port config that is not restoring but I have used at least 4 different backups and restored from both CE 2.7.2 and Plus 24.03 with the same authentication result if restored directly to a new 24.11 install (both beta and the stable releases) through Backup & Restore. A backup of the same setup in 24.11 does restore to a new 24.11 without any problems.

I am satisfied we have a way to work around it and will simply avoid any direct restore to 24.11 of any earlier version backups.

[EDaleH]

@EDaleH

After many hours of troubleshooting, it turned out that the backup package restore was not respecting the changes made to /usr/local/captiveportal/index.php by the 24.11 install.

This is our fault for backing it up in the first place as it is considered part of the pfSense installation itself and in the case of 24.11 it is updated to support MIM. We backup the entire /usr/local/captiveportal directory as it contains all the custom code for the captive portal login pages. This resulted in unintentionally backing up the index.php as well. Thus a restore of our custom files also unintentionally overwrote the index.php with a prior version.

Do not backup or restore /usr/local/captiveportal/index.php if you use the backup package prior to installing Plus 24.11, it will break captive portal authentication when MIM is enabled.

Thank you for the assistance in locating this error.

[stephenw10]

Ah, that would do it! Explains why I couldn't replicate it.