<![CDATA[Chillispot Forum — OpenWRT]]> http://www.chillispot.org/chilliforum/ Sat, 26 Dec 2015 11:44:36 +0000 PunBB 1.4.4 <![CDATA[How Coova-Chilli Read Config file]]> http://www.chillispot.org/chilliforum/topic144281-how-coovachilli-read-config-file-new-posts.html As we know, there are many config files under folder /etc/chilli/*/config, and in these files, there are many configurations. such as below:
HS_LANIF=wl0.1            # WAN Interface toward the Internet
HS_NETWORK=192.168.10.0     # HotSpot Network (must include HS_UAMLISTEN)
HS_NETMASK=255.255.255.0   # HotSpot Network Netmask
HS_UAMLISTEN=192.168.10.1   # HotSpot IP Address (on subscriber network)
HS_UAMPORT=3991            # HotSpot UAM Port (on subscriber network)
HS_UAMUIPORT=4991          # HotSpot UAM "UI" Port (on subscriber network, for embedded portal)


I want to add one option in each /etc/chilli/*/config file (Maybe HS_AUTH=1). The problem is I do not know how to read the configuration in source file src/redir.c. Could you help me with this. Thank you very much.

]]> Sat, 26 Dec 2015 11:44:36 +0000 http://www.chillispot.org/chilliforum/topic144281-how-coovachilli-read-config-file-new-posts.html <![CDATA[Install Chillispot and redirect to locale Webpage]]> http://www.chillispot.org/chilliforum/topic144136-install-chillispot-and-redirect-to-locale-webpage-new-posts.html Dear all,

I have a locale webapplication which runs on a Wildfly (JBoss) application server on my locale PC.
This PC has an static IP address. For example: 192.168.2.11

Now I would like to redirect with Chillispot to this website. How can I do this?
I read something about Radius server. Is this necessary for me?
How can I install a Radius server on Windows? Which version should I download?

Can anybody help me, please.

]]> Thu, 19 Nov 2015 22:09:20 +0000 http://www.chillispot.org/chilliforum/topic144136-install-chillispot-and-redirect-to-locale-webpage-new-posts.html <![CDATA[Special Character Passwords]]> http://www.chillispot.org/chilliforum/topic111666-special-character-passwords-new-posts.html Hi All,

So I'm working with DD-WRT (similar to openWRT for those not familiar), and I have everything working EXCEPT! the hotspot won't recognize special characters in passwords.  The password I use has a * in it and the freeradius error log replaces it with a _.  does anyone have a way around this?  I'm working with the provided hotspotlogin.cgi script, but for some reason its giving this problem.  Any help is much appreciated.  Providing the log info below: 

rad_recv: Access-Request packet from host 192.168.1.6 port 2062, id=0, length=198
    User-Name = "lucas"
    User-Password = "***********"   -  This has been masked but the * in the password was replaced by _ in the log
    NAS-IP-Address = 0.0.0.0
    Service-Type = Login-User
    Framed-IP-Address = 192.168.182.7
    Calling-Station-Id = "F8-A9-D0-0C-34-F7"
    Called-Station-Id = "00-26-18-93-2B-80"
    NAS-Identifier = "wi-fi-2"
    Acct-Session-Id = "53da7f1200000001"
    NAS-Port-Type = Wireless-802.11
    NAS-Port = 1
    Message-Authenticator = 0xf93c4e509c2ca6d7879024d42f08bc04
    WISPr-Logoff-URL = "http://192.168.182.1:3990/logoff"
# Executing section authorize from file /etc/freeradius/sites-enabled/default
+- entering group authorize {...}
[eap] No EAP-Message, not doing EAP
++[eap] returns noop
++[preprocess] returns ok
[auth_log]     expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.1.6/auth-detail-20140731
[auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.1.6/auth-detail-20140731
[auth_log]     expand: %t -> Thu Jul 31 11:42:12 2014
++[auth_log] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "lucas", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[ntdomain] No '\' in User-Name = "lucas", looking up realm NULL
[ntdomain] No such realm "NULL"
++[ntdomain] returns noop
++[unix] returns updated
[sql]     expand: %{Stripped-User-Name} -> 
[sql]     ... expanding second conditional
[sql]     expand: %{User-Name} -> lucas
[sql]     expand: %{%{User-Name}:-DEFAULT} -> lucas
[sql]     expand: %{%{Stripped-User-Name}:-%{%{User-Name}:-DEFAULT}} -> lucas
[sql] sql_set_user escaped user --> 'lucas'
rlm_sql (sql): Reserving sql socket id: 4
[sql]     expand: SELECT id, username, attribute, value, op           FROM radcheck           WHERE username = '%{SQL-User-Name}'           ORDER BY id -> SELECT id, username, attribute, value, op           FROM radcheck           WHERE username = 'lucas'           ORDER BY id
rlm_sql_mysql: query:  SELECT id, username, attribute, value, op           FROM radcheck           WHERE username = 'lucas'           ORDER BY id
[sql] User found in radcheck table
[sql]     expand: SELECT id, username, attribute, value, op           FROM radreply           WHERE username = '%{SQL-User-Name}'           ORDER BY id -> SELECT id, username, attribute, value, op           FROM radreply           WHERE username = 'lucas'           ORDER BY id
rlm_sql_mysql: query:  SELECT id, username, attribute, value, op           FROM radreply           WHERE username = 'lucas'           ORDER BY id
[sql]     expand: SELECT groupname           FROM radusergroup           WHERE username = '%{SQL-User-Name}'           ORDER BY priority -> SELECT groupname           FROM radusergroup           WHERE username = 'lucas'           ORDER BY priority
rlm_sql_mysql: query:  SELECT groupname           FROM radusergroup           WHERE username = 'lucas'           ORDER BY priority
rlm_sql (sql): Released sql socket id: 4
++[sql] returns ok
[etc_passwd] Added Crypt-Password: 'x' to config_items 
++[etc_passwd] returns ok
++[expiration] returns noop
++[logintime] returns noop
[pap] Normalizing NT-Password from hex encoding
++[pap] returns updated
Found Auth-Type = PAP
# Executing group from file /etc/freeradius/sites-enabled/default
+- entering group PAP {...}
[pap] login attempt with password "********" - Password masked * was replaced by _
[pap] Using CRYPT password "$6$GEl/c1mT$JJ2bafZWOc3rNQddm59K1qMHq0K3uymNfS7RgRtRY2wr4xJ25jeHjs4OOAvIqMhX9AsDaGYPLthxtgW6cFXsz0"
[pap] Passwords don't match
++[pap] returns reject
Failed to authenticate the user.
Delaying reject of request 0 for 1 seconds
Going to the next request
Waking up in 0.9 seconds.
Sending delayed reject for request 0
Sending Access-Reject of id 0 to 192.168.1.6 port 2062
Waking up in 4.9 seconds.
Cleaning up request 0 ID 0 with timestamp +134
Ready to process requests.
]]> Thu, 31 Jul 2014 15:40:16 +0000 http://www.chillispot.org/chilliforum/topic111666-special-character-passwords-new-posts.html <![CDATA[Chllispot MAC authntication]]> http://www.chillispot.org/chilliforum/topic326-chllispot-mac-authntication-new-posts.html Hi,

I tried to follow the HowTo and make some adjustments for my purpose.
I'm trying to configure a hotspot with NO captive portal that will authenticate with macauth with  a remote radius server.

unsuccessfully so far?
is my chilli setup right?




my chilli.conf look like that:
##############################################################################
#
# Sample ChilliSpot configuration file
#
##############################################################################

# TAG: fg
# Include this flag if process is to run in the foreground
#fg

# TAG: debug
# Include this flag to include debug information.
#debug

# TAG: interval
# Re-read configuration file at this interval. Will also cause new domain
# name lookups to be performed. Value is given in seconds.
interval 3600

# TAG: pidfile
# File to store information about the process id of the program.
# The program must have write access to this file/directory.
pidfile /var/run/chilli.pid

# TAG: statedir
# Directory to use for nonvolatile storage.
# The program must have write access to this directory.
# This tag is currently ignored
#statedir ./


# TUN parameters

# TAG: net
# IP network address of external packet data network
# Used to allocate dynamic IP addresses and set up routing.
# Normally you do not need to uncomment this tag.
#net 192.168.182.0/24

# TAG: dynip
# Dynamic IP address pool
# Used to allocate dynamic IP addresses to clients.
# If not set it defaults to the net tag.
# Do not uncomment this tag unless you are an experienced user!
#dynip 192.168.182.0/24

# TAG: statip
# Static IP address pool
# Used to allocate static IP addresses to clients.
# Do not uncomment this tag unless you are an experienced user!
#statip 192.168.182.0/24


# TAG: dns1
# Primary DNS server.
# Will be suggested to the client.
# If omitted the system default will be used.
# Normally you do not need to uncomment this tag.
#dns1 172.16.0.5

# TAG: dns2
# Secondary DNS server.
# Will be suggested to the client.
# If omitted the system default will be used.
# Normally you do not need to uncomment this tag.
#dns2 172.16.0.6

# TAG: domain
# Domain name
# Will be suggested to the client.
# Normally you do not need to uncomment this tag.
#domain key.chillispot.org

# TAG: ipup
# Script executed after network interface has been brought up.
# Executed with the following parameters: <devicename> <ip address>
# <mask>
# Normally you do not need to uncomment this tag.
#ipup /etc/chilli.ipup

# TAG: ipdown
# Script executed after network interface has been taken down.
# Executed with the following parameters: <devicename> <ip address>
# <mask>
# Normally you do not need to uncomment this tag.
#ipdown /etc/chilli.ipdown

# TAG: conup
# Script executed after a user has been authenticated.
# Executed with the following parameters: <devicename> <ip address>
# <mask> <user ip address> <user mac address> <filter ID>
# Normally you do not need to uncomment this tag.
#conup /etc/chilli.conup

# TAG: conup
# Script executed after a user has disconnected.
# Executed with the following parameters: <devicename> <ip address>
# <mask> <user ip address> <user mac address> <filter ID>
# Normally you do not need to uncomment this tag.
#conup /etc/chilli.condown


# Radius parameters

# TAG: radiuslisten
# IP address to listen to
# Normally you do not need to uncomment this tag.
radiuslisten  A RADIUS SERVER IP

# TAG: radiusserver1
# IP address of radius server 1
# For most installations you need to modify this tag.
radiusserver1 A RADIUS SERVER IP

# TAG: radiusserver2
# IP address of radius server 2
# If you have only one radius server you should set radiusserver2 to the
# same value as radiusserver1.
# For most installations you need to modify this tag.
radiusserver2 A RADIUS SERVER IP

# TAG: radiusauthport
# Radius authentication port
# The UDP port number to use for radius authentication requests.
# The same port number is used for both radiusserver1 and radiusserver2.
# Normally you do not need to uncomment this tag.
radiusauthport 1812

# TAG: radiusacctport
# Radius accounting port
# The UDP port number to use for radius accounting requests.
# The same port number is used for both radiusserver1 and radiusserver2.
# Normally you do not need to uncomment this tag.
radiusacctport 1813

# TAG: radiussecret
# Radius shared secret for both servers
# For all installations you should modify this tag.
radiussecret A SECRET

# TAG: radiusnasid
# Radius NAS-Identifier
# Normally you do not need to uncomment this tag.
#radiusnasid nas01

# TAG: radiusnasip
# Radius NAS-IP-Address
# Normally you do not need to uncomment this tag.
#radiusnasip 127.0.0.1

# TAG: radiuscalled
# Radius Called-Station-ID
# Normally you do not need to uncomment this tag.
#radiuscalled 00133300

# TAG: radiuslocationid
# WISPr Location ID. Should be in the format: isocc=<ISO_Country_Code>,
# cc=<E.164_Country_Code>,ac=<E.164_Area_Code>,network=<ssid/ZONE>
# Normally you do not need to uncomment this tag.
#radiuslocationid isocc=us,cc=1,ac=408,network=ACMEWISP_NewarkAirport

# TAG: radiuslocationname
# WISPr Location Name. Should be in the format:
# <HOTSPOT_OPERATOR_NAME>,<LOCATION>
# Normally you do not need to uncomment this tag.
#radiuslocationname ACMEWISP,Gate_14_Terminal_C_of_Newark_Airport


# Radius proxy parameters

# TAG: proxylisten
# IP address to listen to
# Normally you do not need to uncomment this tag.
#proxylisten 10.0.0.1

# TAG: proxyport
# UDP port to listen to.
# If not specified a port will be selected by the system
# Normally you do not need to uncomment this tag.
#proxyport 1645

# TAG: proxyclient
# Client(s) from which we accept radius requests
# Normally you do not need to uncomment this tag.
#proxyclient 10.0.0.1/24

# TAG: proxysecret
# Radius proxy shared secret for all clients
# If not specified defaults to radiussecret
# Normally you do not need to uncomment this tag.
#proxysecret testing123


# Remote configuration management

# TAG: confusername
# If confusername is specified together with confpassword chillispot
# will at regular intervals specified by the interval option query the
# radius server for configuration information.
# Normally you do not need to uncomment this tag.
#confusername conf

# TAG: confpassword
# If confusername is specified together with confpassword chillispot
# will at regular intervals specified by the interval option query the
# radius server for configuration information.
# Normally you do not need to uncomment this tag.
#confpassword secret


# DHCP Parameters

# TAG: dhcpif
# Ethernet interface to listen to.
# This is the network interface which is connected to the access points.
# In a typical configuration this tag should be set to eth1.
dhcpif wl0

# TAG: dhcpmac
# Use specified MAC address.
# An address in the range  00:00:5E:00:02:00 - 00:00:5E:FF:FF:FF falls
# within the IANA range of addresses and is not allocated for other
# purposes.
# Normally you do not need to uncomment this tag.
#dhcpmac 00:00:5E:00:02:00

# TAG: lease
# Time before DHCP lease expires
# Normally you do not need to uncomment this tag.
#lease 600


# Universal access method (UAM) parameters

# TAG: uamserver
# URL of web server handling authentication.
uamserver https://radius.chillispot.org/hotspotlogin

# TAG: uamhomepage
# URL of welcome homepage.
# Unauthenticated users will be redirected to this URL. If not specified
# users will be redirected to the uamserver instead.
# Normally you do not need to uncomment this tag.
#uamhomepage http://192.168.182.1/welcome.html

# TAG: uamsecret
# Shared between chilli and authentication web server
#uamsecret ht2eb8ej6s4et3rg1ulp

# TAG: uamlisten
# IP address to listen to for authentication requests
# Do not uncomment this tag unless you are an experienced user!
#uamlisten 192.168.182.1

# TAG: uamport
# TCP port to listen to for authentication requests
# Do not uncomment this tag unless you are an experienced user!
#uamport 3990

# TAG: uamallowed
# Comma separated list of domain names, IP addresses or network segments
# the client can access without first authenticating.
# It is possible to specify this tag multiple times.
# Normally you do not need to uncomment this tag.
#uamallowed www.chillispot.org,10.11.12.0/24

# TAG: uamanydns
# If this flag is given unauthenticated users are allowed to use
# any DNS server.
# Normally you do not need to uncomment this tag.
#uamanydns


# MAC authentication

# TAG: macauth
# If this flag is given users will be authenticated only on their MAC
# address.
# Normally you do not need to uncomment this tag.
macauth

# TAG: macallowed
# List of MAC addresses.
# The MAC addresses specified in this list will be authenticated only on
# their MAC address.
# This tag is ignored if the macauth tag is given.
# It is possible to specify this tag multiple times.
# Normally you do not need to uncomment this tag.
#macallowed 00-0A-5E-AC-BE-51,00-30-1B-3C-32-E9

# TAG: macpasswd
# Password to use for MAC authentication.
# Normally you do not need to uncomment this tag.
#macpasswd password

# TAG: macsuffix
# Suffix to add to MAC address in order to form the username.
# Normally you do not need to uncomment this tag.
#macsuffix suffix


and my settings:
br-wan    Link encap:Ethernet  HWaddr 00:1D:7E:55:B9:33 
          inet addr:192.168.1.168  Bcast:192.168.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:996 errors:0 dropped:0 overruns:0 frame:0
          TX packets:33 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:187491 (183.0 KiB)  TX bytes:3255 (3.1 KiB)

eth0      Link encap:Ethernet  HWaddr 00:1D:7E:55:B9:33 
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1226 errors:0 dropped:0 overruns:0 frame:0
          TX packets:124 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:234209 (228.7 KiB)  TX bytes:17492 (17.0 KiB)
          Interrupt:4

eth0.0    Link encap:Ethernet  HWaddr 00:1D:7E:55:B9:33 
          inet addr:192.168.168.1  Bcast:192.168.168.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:222 errors:0 dropped:0 overruns:0 frame:0
          TX packets:91 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:15562 (15.1 KiB)  TX bytes:13239 (12.9 KiB)

eth0.1    Link encap:Ethernet  HWaddr 00:1D:7E:55:B9:33 
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:996 errors:0 dropped:0 overruns:0 frame:0
          TX packets:33 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:191475 (186.9 KiB)  TX bytes:3387 (3.3 KiB)

lo        Link encap:Local Loopback 
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:2 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:180 (180.0 B)  TX bytes:180 (180.0 B)

wl0       Link encap:Ethernet  HWaddr 00:1D:7E:55:B9:35 
          inet addr:192.168.168.1  Bcast:192.168.168.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:531
          TX packets:1 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:410 (410.0 B)
          Interrupt:2 Base address:0x5000



and my config/network file:

config 'switch' 'eth0'
    option 'vlan0' '0 1 2 3 5*'
    option 'vlan1' '4 5'

config 'interface' 'loopback'
    option 'ifname' 'lo'
    option 'proto' 'static'
    option 'ipaddr' '127.0.0.1'
    option 'netmask' '255.0.0.0'

config 'interface' 'lan'
    option 'ifname' 'eth0.0'
    option 'netmask' '255.255.255.0'
    option 'proto' 'static'
    option 'macaddr' ''
    option 'ip6addr' ''
    option 'gateway' ''
    option 'ip6gw' ''
    option 'dns' ''
    option 'ipaddr' '192.168.168.1'

config 'interface' 'wan'
    option 'ifname' 'eth0.1'
    option 'proto' 'dhcp'
    option 'macaddr' ''
    option 'ipaddr' '192.168.1.168'
    option 'ip6addr' ''
    option 'netmask' '255.255.255.0'
    option 'gateway' '192.168.1.1'
    option 'ip6gw' ''
    option 'dns' '192.168.1.1'
    option 'type' 'bridge'

]]> Sun, 03 May 2009 00:02:23 +0000 http://www.chillispot.org/chilliforum/topic326-chllispot-mac-authntication-new-posts.html