Nocat doesn't redirect

Ery Atmodjo <[email protected]>
Newsgroups gmane.network.nocat
Message-ID <[email protected]>
Dear all,

Firstly, I am sorry about my English.

I have problems with installation of nocat captive portal with
freeradius as accounting server using mysql, and hope you can help me
to solve them.

I have installed nocat gateway and nocat authserv in two separated
boxes, and freeradius in the same machine with the authserv.  I've
installed pogozone patch as well, ad put the trustedkeys.gpg in the
directory pgp owned by user and group apache in the authserv, and
copied the key in the directory pgp owned by user and group root in
the gateway.

Login seemed to be successful, but nocat doesn't redirect to the url
requested untill the user click the link on the form to continue.

The radpostauth and raddact tables of the freeradius is filled with
user information. However, in the ssl_error_log, there are error
messages :

[Fri Feb 18 18:03:53 2005] [error] [client 10.10.48.27] [2005-02-18
18:03:53] User UNKNOWN from 10.10.48.27 requests form
[Fri Feb 18 18:03:57 2005] [error] [client 10.10.48.27] [2005-02-18
18:03:57] User UNKNOWN from 10.10.48.27 requests form
[Fri Feb 18 18:04:06 2005] [error] [client 10.10.48.27] [2005-02-18
18:04:05] User deliar from 10.10.48.27 requests form, referer:
https://10.10.48.51/cgi-bin/login?redirect=http....
[Fri Feb 18 18:04:06 2005] [error] [client 10.10.48.27] [2005-02-18
18:04:05] Connecting to RADIUS server 10.10.48.51:1645 with Timeout 5,
referer: https://10.10.48.51/cgi-bin/login?redirect=http....
[Fri Feb 18 18:04:06 2005] [error] [client 10.10.48.27] [2005-02-18
18:04:06] gpg --clearsign --homedir=/usr/local/nocat/cgi-bin/../pgp
--keyring trustedkeys.gpg --no-tty -o- returned error message:,
referer: https://10.10.48.51/cgi-bin/login?redirect=http....
[Fri Feb 18 18:04:06 2005] [error] [client 10.10.48.27] gpg: WARNING:
unsafe permissions on homedir "/usr/local/nocat/cgi-bin/../pgp",
referer: https://10.10.48.51/cgi-bin/login?redirect=http....
[Fri Feb 18 18:04:06 2005] [error] [client 10.10.48.27] gpg: WARNING:
using insecure memory!, referer:
https://10.10.48.51/cgi-bin/login?redirect=http....
[Fri Feb 18 18:04:06 2005] [error] [client 10.10.48.27] gpg: please
see http://www.gnupg.org/faq.html for more information, referer:
https://10.10.48.51/cgi-bin/login?redirect=http....
[Fri Feb 18 18:04:12 2005] [error] [client 10.10.48.27] [2005-02-18
18:04:12] User deliar from 10.10.48.27 requests popup
[Fri Feb 18 18:04:12 2005] [error] [client 10.10.48.27] [2005-02-18
18:04:12] Connecting to RADIUS server 10.10.48.51:1645 with Timeout 5

Messages in nocat.log are :
[2005-02-18 18:01:43] Gathering stats from firewall with cmd='stats.fw  '.
[2005-02-18 18:03:39] Connection to 192.168.44.1 from 192.168.47.253
[2005-02-18 18:03:39] Spawning child process 13995.
[2005-02-18 18:03:39] Capturing  192.168.47.253  for http://www.yahoo.com/
[2005-02-18 18:03:39] Notifying parent of Capture on peer 00:80:48:23:FE:29
[2005-02-18 18:03:39] Got notification Capture of peer 00:80:48:23:FE:29
[2005-02-18 18:03:39] Child process returned 1
[2005-02-18 18:03:47] Connection to 192.168.44.1 from 192.168.47.253
[2005-02-18 18:03:47] Capturing  192.168.47.253  for
http://us.update.companion.yahoo.com/slv/v4/2.html?.pc=&.a=0&.ta=cgnone,ccnone,cius,cv5_3_12,cp&.cv=1&.cs=p,e7f5a3ff4a305c32,b,e66933a92680d831&t=224311
[2005-02-18 18:03:47] Notifying parent of Capture on peer 00:80:48:23:FE:29
[2005-02-18 18:03:47] Spawning child process 13996.
[2005-02-18 18:03:47] Got notification Capture of peer 00:80:48:23:FE:29
[2005-02-18 18:03:47] Child process returned 1
[2005-02-18 18:03:57] Spawning child process 13997.
[2005-02-18 18:03:57] Connection to 10.10.48.27 from 10.10.48.51
[2005-02-18 18:03:57] Received notify 00:80:48:23:FE:29 from 10.10.48.51
gpgv: Signature made Fri 18 Feb 2005 06:04:05 PM EIT using DSA key ID 9F252A5B
gpgv: Good signature from "eryatmodjo (great) <[email protected]>"
[2005-02-18 18:03:57] Got auth msg Mac  00:80:48:23:FE:29
User    deliar
Token   $1$54416113$ebbqyaTkbtJpI0MqZMTtX0
Sessiontimeout  0
Redirect        http://www.yahoo.com/
Idletimeout     300
Action  Permit
Mode    login
Timeout 900
[2005-02-18 18:03:57] User () v. trusted (Any)
[2005-02-18 18:03:57] User  deliar  permitted in class Public
[2005-02-18 18:03:57] Gathering stats from firewall with cmd='stats.fw
00:80:48:23:FE:29 192.168.47.253'.
[2005-02-18 18:03:57] Connecting to RADIUS server 10.10.48.51:1646
with Timeout 5
[2005-02-18 18:03:57] Use of uninitialized value in subroutine entry
at /usr/local/nocat/bin/../lib/Authen/Radius.pm line 339.
[2005-02-18 18:03:57] no value sent for attribute 4 at
/usr/local/nocat/bin/../lib/Authen/Radius.pm line 347.
[2005-02-18 18:03:57] Notifying parent of Permit on peer 00:80:48:23:FE:29
[2005-02-18 18:03:57] Available MACs: 00:80:48:23:FE:29
[2005-02-18 18:03:57] Responding with:
User    deliar
Token   $1$MqZMTtX1$2CJ7/XHQ1vItldqYaJf3i0
Timeout 900
[2005-02-18 18:03:57] Got notification Permit of peer 00:80:48:23:FE:29
[2005-02-18 18:03:57] Child process returned 1
[2005-02-18 18:06:37] Gathering stats from firewall with cmd='stats.fw  '.
[2005-02-18 18:06:37] Connecting to RADIUS server 10.10.48.51:1646
with Timeout 5
[2005-02-18 18:06:37] Use of uninitialized value in subroutine entry
at /usr/local/nocat/bin/../lib/Authen/Radius.pm line 339.
[2005-02-18 18:06:37] no value sent for attribute 4 at
/usr/local/nocat/bin/../lib/Authen/Radius.pm line 347.
[2005-02-18 18:11:37] Gathering stats from firewall with cmd='stats.fw  '.
[2005-02-18 18:11:37] Connecting to RADIUS server 10.10.48.51:1646
with Timeout 5
[2005-02-18 18:11:37] Use of uninitialized value in subroutine entry
at /usr/local/nocat/bin/../lib/Authen/Radius.pm line 339.
[2005-02-18 18:11:37] no value sent for attribute 4 at
/usr/local/nocat/bin/../lib/Authen/Radius.pm line 347.


Radius.log :

Fri Feb 18 18:04:05 2005 : Auth: Login OK: [deliar] (from client auth port 0)
Fri Feb 18 18:04:12 2005 : Auth: Login OK: [deliar] (from client auth port 0)

A kindly fellow in other linux mailing list said that the problem
wered because the user was permitted in the Class Public, not member.
He said I have to create class member, and in order to be able to do
that, I have to load dictionary.nocat to dictionary of freeradius.
I've found the dictionary, but have no idea about how to do that.  I
have a number of documentation of installation of nocat+freeradius+
mysql, but no one mentioned about dictionary.

I would appreciate if you can help me, or give me links to source that
can help me to solve my problem.

Thanks in advance.

Regards

Ery
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.