Looking at the link you gave below it appears that NCSI is invoked for many reasons, but one is when a device connects to a new network, which is exactly what is happening here. The clients change from the captive portal to the production network, but for some reason the balloon pops up as the network changes. An nslookup from the production network to dns.msftncsi.com results in 131.107.255.255 as it is supposed to, so I'm not sure why this is happening.
I don't think that this happened when I was forcing the clients to register manually. When that was in place they would see the progress bar, then get redirected successfully. Cheers, Andi -----Original Message----- From: Morris, Andi [mailto:[email protected]] Sent: 11 April 2012 19:16 To: [email protected] Subject: Re: [Packetfence-users] Extra dot1x balloons Oh yes, of course. Apologies I misread your email. The balloon is very helpful in prompting the user to open the browser when the user enters the captive portal, but I am finding then that after they have configured their dot1x, and get auto-registered the balloon pops up again, right at the end of the registration process, which is the point that's confusing for the users. Cheers, Andi ________________________________________ From: Olivier Bilodeau [[email protected]] Sent: 11 April 2012 17:01 To: [email protected] Subject: Re: [Packetfence-users] Extra dot1x balloons On 04/11/2012 11:55 AM, Morris, Andi wrote: > That's very interesting Olivier, I had no idea MS were doing such a thing. > > I'm having trouble punching a hole through the captive portal to the area > required. I have MSConnectivity=http://www.msftncsi.com/ set in the > passthroughs section of pf.conf, and have restarted the packetfence services, > but still any request to that site results in the captive portal address > being returned. > Don't punch a hole through! You want users who are auto-registered not to see the bubble correct? Registered users don't see the portal so no need to punch through the portal. It's actually very convenient that it opens this bubble if the user is behind the portal. It makes the user experience better on Windows Vista and up. And to be fair OS X Lion goes even a step further by opening a minimal safari browser if the proper WISPr attributes are present (which our portal support since a couple of versions back). -- Olivier Bilodeau [email protected] :: +1.514.447.4918 *115 :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) ------------------------------------------------------------------------------ Better than sec? Nothing is better than sec when it comes to monitoring Big Data applications. Try Boundary one-second resolution app monitoring today. Free. http://p.sf.net/sfu/Boundary-dev2dev _______________________________________________ Packetfence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users ________________________________ From 1st November 2011 UWIC changed its title to Cardiff Metropolitan University. From the 6th December 2011, as part of this change, all email addresses which included @uwic.ac.uk have changed to @cardiffmet.ac.uk. All emails sent from Cardiff Metropolitan University will now be sent from the new @cardiffmet.ac.uk address. Please could you ensure that all of your contact records and databases are updated to reflect this change. Further information can be found on the website here.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx> Ar Dachwedd y 1af 2011 newidiodd UWIC ei henw i Brifysgol Fetropolitan Caerdydd. O Ragfyr 6ed, fel rhan o'r newid yma, bydd pob cyfeiriad e-bost sy'n cynnwys @uwic.ac.uk yn newid i @cardiffmet.ac.uk. Bydd yr holl ebyst a ddanfonir o Brifysgol Fetropolitan Caerdydd yn cael eu danfon o‘r cyfeiriad @cardiffmet.ac.uk newydd. Gwnewch yn siwr eich bod yn diweddaru eich cofnodion cyswllt a'ch cronfeydd data i adlewyrchu hyn. Gellir cael rhagor o wybodaeth ar y wefan yma.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx> ------------------------------------------------------------------------------ Better than sec? Nothing is better than sec when it comes to monitoring Big Data applications. Try Boundary one-second resolution app monitoring today. Free. http://p.sf.net/sfu/Boundary-dev2dev _______________________________________________ Packetfence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users ------------------------------------------------------------------------------ For Developers, A Lot Can Happen In A Second. Boundary is the first to Know...and Tell You. Monitor Your Applications in Ultra-Fine Resolution. Try it FREE! http://p.sf.net/sfu/Boundary-d2dvs2 _______________________________________________ Packetfence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
