Hello Fabrice
I have captured the packets with tcpdump e analyzed with wireshark.
The passthrough was adapted to the domains below, but still not working.
The problem remains.
*.doubleclick.net
fbsbx.com
*.fbsbx.com
fbcdn.net
facebook.com
*.facebook.com
*.facebook.net
*.fbcdn.net
*.akamaihd.net
*.akamaiedge.net
*.edgekey.net
*.akamai.net
2018-03-13 9:47 GMT-03:00 Fabrice Durand via PacketFence-users <
packetfence-users@lists.sourceforge.net>:
> Hello Fabricio,
>
> you will need to take a capture of the dns traffic of the Iphone and check
> when you try to register on facebook if one of the answer of the dns is the
> ip address of the captive portal.
>
> If it's the case then you will need to adapt the passthrough.
>
> Regards
>
> Fabrice
>
>
>
> Le 2018-03-12 à 13:25, Fabricio Lorenzon via PacketFence-users a écrit :
>
> Hello
>
> I am using packetfence 7.3 in inline mode with captive portal.
> The captive portal is configured to use Facebook as the authentication
> mode.
> On Apple devices running iOS 11+, after the user is redirected to
> facebook.com, an error occurs stating that the connection is not secure
> and terminates the captive portal without releasing access. On android
> devices or Apple with iOS 10 and below the access works perfectly.
> Packetfence is using a certificate issued by lets encrypt and is
> configured correctly (verified by testing at ssllabs.com).
> Any idea what might be going on?
>
> --
> Atenciosamente,
>
> Fabrício Lorenzon
> Divisão de Tecnologia da Informação
> Telefone: 54-33168250
> Passo Fundo - RS
>
>
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
>
> _______________________________________________
> PacketFence-users mailing
> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
> --
> Fabrice durandfdur...@inverse.ca :: +1.514.447.4918 <(514)%20447-4918>
> (x135) :: www.inverse.ca
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
> (http://packetfence.org)
>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
--
Atenciosamente,
Fabrício Lorenzon
Divisão de Tecnologia da Informação
Telefone: 54-33168250
Passo Fundo - RS
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
