Re: Captive Portal: WLAN Authentification without entering Voucher ID or user name / password pair

Ralf Petry <[email protected]>
Newsgroups gmane.comp.security.firewalls.m0n0wall
Message-ID <[email protected]>
thanks.
I don't want to appear to be too dumb... but ok, having a look at the 
logs is kind of difficult... I am not at the location right now. anyway, 
the clients (user) should authenticate using a voucher that should be 
valid only 15 minutes, but sometimes, the receptionistas report, that 
websites can be opened just by clicking on the "continue" button.
the log, if I remember right, says something in the direction of 
"unauthenticated" ...
oh, and by the way, firefox is told not to cache anything (but one never 
knows....)

this is the form I am using (excerpted):
---copy and paste---
<form method="post" action="$PORTAL_ACTION$">
<table>
<tr>
<td>
Benutzername / username:
</td>
<td>
<input name="auth_user" type="text">
</td>
</tr>
<tr>
<td>
Kennwort / password:
</td>
<td>
<input name="auth_pass" type="password">
</td>
</tr>
<tr>
<td>
</td>
<td>
<input name="accept" type="submit" value="Continue">
</td>
</tr>
<tr>
<td>
ODER / OR
</td>
<td>

</td>
</tr>
<tr>
<td>
Voucher-ID
</td>
<td>
<input name="auth_voucher" type="text">
</td>
</tr>
<tr>
<td>
</td>
<td>
<input name="accept" type="submit" value="Continue">
</td>
</tr>
</table>

<input name="redirurl" type="hidden" value="$PORTAL_REDIRURL$">
    <!-- <input name="accept" type="submit" value="Continue"> -->
</form>
----done----

Am 03.04.2012 16:57, schrieb Lee Sharp:
> On 04/03/2012 02:33 AM, Ralf Petry wrote:
>> Thanks,
>> On the captive Portal Page, idle timeout is left blank, Hard timeout
>> is set to 60 minutes. On the dhcp Server Page, the Fields for min and
>> max lease Time are left blank as well, just to use the defaults (7200
>> and 86400 seconds)...
>
> Could the password be cached in Firefox?
>
> Look in the logs for when these systems "log in" and what is happening.
>
> Lee
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.