Ron,

> Your pf box is not named something like hostname.local by any chance?

As Anton said, IOS 8 (re)introduce a “bug” (or maybe it’s a feature… who knows) 
that .local domain names are only resolved on a MDNS level. Which means that, 
when the device is trying to phone home to detect Internet connectivity, 
PacketFence is returning the captive-portal URL and if it is 
somethingsomething.local, the iDevice will not resolve it and will fail 
silently leaving the user without an Internet connectivity since network access 
is not granted if the iDevice doesn’t successfully phone home.

> Our iOS devices are not playing well with the fact that we don't have trusted 
> certs and the automatic "you must sign into to this network" feature in iOS 8 
> doesn't play well with untrusted sites. You have to open a browser and force 
> it to let the portal load.
> 
As Brian said, IOS 8 will not allow an https connection with a self-signed 
certificate in the “CaptivePortalSupport” browser (the popup that… pops up when 
you connect to a captive-portal secure SSID which ask you to log in). You will 
have to different choices which are “Connect to another network” or “Use the 
device without Internet”. You may be able to openup a web browser but I think 
that in any case, the iDevice will disconnect you from the SSID.

> Even in http (not https) portal?
> 

That will work

> I didn't know a non https portal was an option? O.o
> 

Yep, it is. captive_portal.secure_redirect = disabled

Cheers!
dw.

—
Derek Wuelfrath
[email protected] :: www.inverse.ca
+1.514.447.4918 (x110) :: +1.866.353.6153 (x110)
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence 
(www.packetfence.org)

On Oct 14, 2014, at 18:15, Sandro Wambier <[email protected]> wrote:

> My mistake, I was thinking in another solution, lol
> 
> Em 14/10/2014 17:51, "Brian Lucas" <[email protected]> escreveu:
> I didn't know a non https portal was an option? O.o
> 
> On Oct 14, 2014 3:47 PM, "Sandro Wambier" <[email protected]> wrote:
> Even in http (not https) portal?
> 
> Att.
> 
> Sandro Wambier
> 
> Em 14/10/2014 17:30, "Brian Lucas" <[email protected]> escreveu:
> Our iOS devices are not playing well with the fact that we don't have trusted 
> certs and the automatic "you must sign into to this network" feature in iOS 8 
> doesn't play well with untrusted sites. You have to open a browser and force 
> it to let the portal load.
> On Oct 14, 2014 2:19 PM, "Anton Dreyer" <[email protected]> wrote:
> Your pf box is not named something like hostname.local by any chance? I 
> noticed the same issue today, renamed to hostname.net and iOS devices started 
> hitting the portal again
> 
> 
> On 14 Oct 2014, at 20:20, Ron Peeters <[email protected]> wrote:
> 
>> Hi all,
>> 
>> I've used packetfence for my guestnet installation.
>> 
>> Everything is working as expected and we are very fond of it.
>> 
>> A new issue has arisen, that is the new Apple ios devices are not showing 
>> the captive portal.
>> 
>> Windows and android guests are working fine, ios shows page not available.
>> 
>> Any clue?
>> 
>> I'm using Pf 4.4.1
>> Currently I have no apple device for testing, but it looks like the device 
>> is disconnecting from wifi for no apparent reason. 
>> My guestnet is used in line.
>> 
>> With regards,
>> 
>> Ron.
>> 
>> Happy pf admin/user for 2 years now.
>> 
>> ------------------------------------------------------------------------------
>> Comprehensive Server Monitoring with Site24x7.
>> Monitor 10 servers for $9/Month.
>> Get alerted through email, SMS, voice calls or mobile push notifications.
>> Take corrective actions from your mobile device.
>> http://p.sf.net/sfu/Zoho
>> _______________________________________________
>> PacketFence-users mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
> 
> ------------------------------------------------------------------------------
> Comprehensive Server Monitoring with Site24x7.
> Monitor 10 servers for $9/Month.
> Get alerted through email, SMS, voice calls or mobile push notifications.
> Take corrective actions from your mobile device.
> http://p.sf.net/sfu/Zoho
> _______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
> 
> 
> ------------------------------------------------------------------------------
> Comprehensive Server Monitoring with Site24x7.
> Monitor 10 servers for $9/Month.
> Get alerted through email, SMS, voice calls or mobile push notifications.
> Take corrective actions from your mobile device.
> http://p.sf.net/sfu/Zoho
> _______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
> 
> 
> ------------------------------------------------------------------------------
> Comprehensive Server Monitoring with Site24x7.
> Monitor 10 servers for $9/Month.
> Get alerted through email, SMS, voice calls or mobile push notifications.
> Take corrective actions from your mobile device.
> http://p.sf.net/sfu/Zoho
> _______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
> 
> 
> ------------------------------------------------------------------------------
> Comprehensive Server Monitoring with Site24x7.
> Monitor 10 servers for $9/Month.
> Get alerted through email, SMS, voice calls or mobile push notifications.
> Take corrective actions from your mobile device.
> http://p.sf.net/sfu/Zoho
> _______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
> 
> ------------------------------------------------------------------------------
> Comprehensive Server Monitoring with Site24x7.
> Monitor 10 servers for $9/Month.
> Get alerted through email, SMS, voice calls or mobile push notifications.
> Take corrective actions from your mobile device.
> http://p.sf.net/sfu/Zoho_______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users

------------------------------------------------------------------------------
Comprehensive Server Monitoring with Site24x7.
Monitor 10 servers for $9/Month.
Get alerted through email, SMS, voice calls or mobile push notifications.
Take corrective actions from your mobile device.
http://p.sf.net/sfu/Zoho
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to