Captive Portal hard timeout not resetting
-
Hello All,
pfSense-2.0.1-RELEASE (x 3)
squid
squidGuard
lightsquid
multi wan failerover, load balancingEnabled CP on all thre of our pfSense machines at the start of this school year. One of the boxes has static routes on it,,as this building has 4 subnets within. So on CP i had to check "disable MAC filtering" on this paticular machine. I have no 'inactivity timeout' set on any of the three machines. For some reason on the pfSense machin with the static routes the CP hard timeout is not resetting at all.I set the value to 540mins- 9 hours. there is not dhcp running on the pfSense machine as this is handled by the DC in this building.
A simple "SAVE" in the CP Web GUi clears the times that were not reset.
I am using 'local user manager',in CP,(,for completeness.)
Anyomne have any idea how to trubleshoot this?Thank You,
Barry -
First thing could be to update to 2.0.3 of pfsense.
But I have the same issue on pfsense 2.0.3. I set CP hard timeout to 180min but it does not alway kick the users. Clicking "Save" on CP page resolves that. Then there could be days and the users will be disconnected. So I could not find a reason why and what causes this problem.
-
Nachtfalke,
Thank you for the reply/feedback. My pfSense-2.0.1-RELEASE seems to be doing identical to what your setup is doing . Sounds like the update to 2.0.3 did not resolve yours. This is a production machine that wroks perefect otherwise.I dont want to chance anything during school year by trying the upgrade to 2.0.3
Like yours ,all I have to do on the nights that the timeouts are not removed is do a SAVE in the CP webGUi and all is good again. Some nights the CP does reset the users hard timeout as expected. Weird.
Question: Are you using any static routes on your pfSense machine?thanks,
Barry -
Nachtfalke,
Thank you for the reply/feedback. My pfSense-2.0.1-RELEASE seems to be doing identical to what your setup is doing . Sounds like the update to 2.0.3 did not resolve yours. This is a production machine that wroks perefect otherwise.I dont want to chance anything during school year by trying the upgrade to 2.0.3
Like yours ,all I have to do on the nights that the timeouts are not removed is do a SAVE in the CP webGUi and all is good again. Some nights the CP does reset the users hard timeout as expected. Weird.
Question: Are you using any static routes on your pfSense machine?thanks,
BarryHi,
no I do not use any static routes on that pfsense. My focus is on pfsense 2.1 because of the possibility to use different CP zones. But I did not use pfsense 2.1 on production and so I do not have any experience if the hardtimeout there is working.
-
Sorry for replying to my own post.
just wanted to add a little more info.
When the CP does not reset the hard time out when it should happen,. The CPU load running the following day is doubled. Don't have a clue why this is. If I do a simple SAVE in the CP web gui - to reset the timeouts to make all running logged in users disappear,the cpu load doubling does not occur.? Some days the hard time out does work as expected without any user intervention. Weird.
Barry
-
Did you check https://redmine.pfsense.org/ for an open ticket which addresses that and if not - open a ticket?
But probably the developers are now focused on pfsense 2.1