[ previous ] [ next ] [ threads ]
 From:  Rob Parker <rob dot parker at keycom dot co dot uk>
 To:  "Jacky C.K Tsoi" <cktsoi at gmail dot com>, m0n0wall at lists dot m0n0 dot ch
 Subject:  RE: [m0n0wall] [1.2b7] Captive Portal with RADIUS
 Date:  Fri, 22 Apr 2005 15:55:22 +0100
I'll post this again as it's obviously been lost somewhere in the ether...

There is indeed a small bug in 1.2b7 captive portal RADIUS code related to
per-user bandwidth control. You will find that either commenting this code
out will sort the problem (as has just been pointed out), or you can make
your RADIUS server return some additional vendor-specific attributes, so
that the code has a payload to process (it doesn't matter about the content
of this payload - the only attributes the code processes are Nomadix-Bw-Up
and Nomadix-Bw-Down (nomadix VSA's))... I know this solution is probably the
simpler of the two, and has worked successfully for a few people (at least
using FreeRadius and I think the Multitech RADIUS server too).

I believe a couple of people were working on patches to submit for this
problem, as I don't have the time at the moment to go through it and build
new patches to submit to Manuel, unfortunately :(



-----Original Message-----
From: Jacky C.K Tsoi [mailto:cktsoi at gmail dot com] 
Sent: 22 April 2005 14:59
To: m0n0wall at lists dot m0n0 dot ch
Subject: Re: [m0n0wall] [1.2b7] Captive Portal with RADIUS

 I've had looked into the source code and found that it was because there is
a portion of code in the RADIUS_AUTHENTICATE function which loops infinitely
while parsing the response from the RADIUS server.
 That code are to extract all the attributes from the response which some of
them are related to the bandwidth control stuff. I've remove the whole
portion of code temporarily and the captive portal would work just fine (the
bandwidth control part would certainly not working, but I don't use it yet).

 I guess this problem would vary between different RADIUS server (since they
may have some difference in the response packets), but since I'm not at
office now and cannot post that portion of code to discuss here, I can post
some more details out here if somebody needs it while I'm at office. 
Jacky C.K Tsoi
Apr 22, 2005 
    On 4/22/05, A dot L dot M dot Buxey at lboro dot ac dot uk <A dot L dot M dot Buxey at lboro dot ac dot uk> wrote: 
> Hi,
> > I've installed a 1.2b7 system which working very well. However, I've 
> > got
> a
> > problem regarding the captive portal with RADIUS authentication. 
> same us the issue reported here a few times already
> alan