Re: captive portal recommendation

2015-05-13 Thread Peter Lai
I've always hacked up NetReg (http://netreg.sourceforge.net/)  to do
this (it's written in perl). It lets you authenticate against ldap and
you should be able to hack in having registrations autoexpire (it may
already support that, I don't remember). You will have to setup dhcpd
and unbind on your own though - netreg basically is a frontend that
updates dhcpd.conf to assign registered mac addresses to a separate
dhcp IP pool and rehups dhcpd; the dhcpd config sets the
default/unregistered pool's nameserver attribute to a resolver which
will always resolves to the captive portal when the mac address is
unregistered; the registered dhcp pool provisions a nameserver that
does the proper resolution. Then add firewall rules to only allow the
registered block access to the outside.

On Wed, May 13, 2015 at 11:04 AM, Willem Offermans
wil...@offermans.rompen.nl wrote:
 Dear FreeBSD friends,

 I like to install a ``captive portal'' system
 (https://en.wikipedia.org/wiki/Captive_portal) on my running FreeBSD
 server. I like to connect possible authentication with a ticket system,
 where possible users need to obtain a ticket for web access. The ticket
 should be valid for a limited amount of time.

 Can anyone recommend such a system?

 --
 Met vriendelijke groeten,
 With kind regards,
 Mit freundlichen Gruessen,
 De jrus wah,

 Wiel

 *
  W.K. Offermans
 e-mail: wil...@offermans.rompen.nl

Powered by 

 (__)
  \\\'',)
\/  \ ^
.\._/_)

www.FreeBSD.org
 ___
 freebsd-wireless@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-wireless
 To unsubscribe, send any mail to freebsd-wireless-unsubscr...@freebsd.org
___
freebsd-wireless@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-wireless
To unsubscribe, send any mail to freebsd-wireless-unsubscr...@freebsd.org


enabling HT mode on ath 938x and WPA question

2014-08-22 Thread Peter Lai
What is the correct way to invoke HT (ng) mode on 938x cards? I have a
TP LINK WDN4800, and it seems to require 2 invocations of ifconfig
mode 11g to put it into ng mode. The first invocation sets it to 11g
then the second one turns on 11ng/HT40+ (according to the output of
ifconfig). It seems that when the card is first initialized/booted it
randomly picks a band.

Is there a way in rc.conf to specify this behavior?

Also, when I am using hostapd, my wireless clients see the BSSID as
WPA-enabled whereas yonder generic routers (linksys, 2wire, etc.) show
up as WPA/WPA2 (but I only tested this with Android clients).

My hostapd.conf:
interface=wlan0
debug=2
#doesn't seem to do anything, how do I turn on logging to /var/log/messages
ctrl_interface=/var/run/hostapd
ctrl_interface_group=wheel
ssid=myssid
wpa=1
wpa_passphrase=mysekret
wpa_key_mgmt=WPA-PSK
wpa_pairwise=CCMP
___
freebsd-wireless@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-wireless
To unsubscribe, send any mail to freebsd-wireless-unsubscr...@freebsd.org


How do I ALTQ hostap interface?

2014-08-21 Thread Peter Lai
How do I ALTQ my wireless (hostap mode) interface in 10.0-R? If I try
to add a queue to wlan0, pf complains that wlan0 has no ALTQ support
(even though it is an ath(4) interface and ath(4) is supposed to be
supported by ALTQ). ALTQ is already setup and working with my wired
ethernet over em(4).

Am I supposed to specify ath0 as the interface for the pf queue?

What if I want to bridge my wireless and wired networks? I thought the
bridge would consist of em0 and wlan0 members, and pf will not like
that (claiming that bridge0 has no ALTQ driver...but I don't know if
that is pf reacting to if_bridge(4) itself not having altq support or
the wlan0 member of it...
___
freebsd-wireless@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-wireless
To unsubscribe, send any mail to freebsd-wireless-unsubscr...@freebsd.org


Re: How do I ALTQ hostap interface?

2014-08-21 Thread Peter Lai
Looking on the freebsd-net list it seems like a we don't know how to
hack altq to work with multiqueues problem, but supposedly it's been
solved with em(4) (since it works fine with altq) , (but not
necessarily with igb)?

OpenBSD is of course no longer useful here since they have removed ALTQ.

Perhaps it's time to revisit Dummynet/IPFW for shaping (it was just
nice having an easily unified NAT and shaping ruleset).

On Thu, Aug 21, 2014 at 1:43 PM, Adrian Chadd adr...@freebsd.org wrote:
 I've no idea.

 Sorry, I've kept asking those who are interested in altq to figure out
 how to do it for drivers with if_transmit() and so far it's been
 crickets/silence.



 -a


 On 21 August 2014 08:53, Peter Lai cowb...@gmail.com wrote:
 Does 9-STABLE support ath(4) and ALTQ?

 thanks

 On Thu, Aug 21, 2014 at 10:38 AM, Adrian Chadd adr...@freebsd.org wrote:
 Hi,

 ath(4) now uses if_transmit() and thus there's no ALTQ support at the
 moment. Sorry.


 -a


 On 21 August 2014 02:43, Peter Lai cowb...@gmail.com wrote:
 How do I ALTQ my wireless (hostap mode) interface in 10.0-R? If I try
 to add a queue to wlan0, pf complains that wlan0 has no ALTQ support
 (even though it is an ath(4) interface and ath(4) is supposed to be
 supported by ALTQ). ALTQ is already setup and working with my wired
 ethernet over em(4).

 Am I supposed to specify ath0 as the interface for the pf queue?

 What if I want to bridge my wireless and wired networks? I thought the
 bridge would consist of em0 and wlan0 members, and pf will not like
 that (claiming that bridge0 has no ALTQ driver...but I don't know if
 that is pf reacting to if_bridge(4) itself not having altq support or
 the wlan0 member of it...
 ___
 freebsd-wireless@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-wireless
 To unsubscribe, send any mail to freebsd-wireless-unsubscr...@freebsd.org
 ___
 freebsd-wireless@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-wireless
 To unsubscribe, send any mail to freebsd-wireless-unsubscr...@freebsd.org
___
freebsd-wireless@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-wireless
To unsubscribe, send any mail to freebsd-wireless-unsubscr...@freebsd.org


recommended 802.11n adapter to buy as AP on 10.0-R

2014-08-12 Thread Peter Lai
I'm looking to get a new wifi adapter which will be plugged into an
Atom D2550 board, so it can be either pci-e x1 or usb3.

The adapter needs to run as a single access point to support phones
and tablets (iphone 4S only does n at 2.4ghz though). The box is
running FreeBSD 10.0-RELEASE-p7 amd64.

Can anyone throw out some least-hassle favorite cards for me to consider?

Thanks
___
freebsd-wireless@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-wireless
To unsubscribe, send any mail to freebsd-wireless-unsubscr...@freebsd.org