Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

what kind of authentication source you use to authenticate ? Le ven. 11 févr. 2022 à 16:05, Jorge Nolla a écrit : > Hi Fabrice, > > I did try $username, but it returns the DEFAULT username and not the > actual username which was used to register the device with in the portal. > > > On Feb 11,

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Hello Jorge, you can try that: https://github.com/inverse-inc/packetfence/commit/e99698c955d596b6d04ef52c64a7aadc21f34e47 Regards Fabrice Le ven. 11 févr. 2022 à 12:04, Jorge Nolla a écrit : > Hi Fabrice, > > This is the last step for us to get this working, any thoughts? > > Thank you! >

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Fabrice, I’m not sure if the issue is with the format for the accounting request. Authentication proxy does work, but accounting does not. On the logs of the billing server this is what we see: Authentication Packet: 09/02 08:24:56:3920 - [5blz] - [ ] - [card]

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Fabrice, PF is sending the accounting data to the billing server. The problem is the info does not match: PF: 10.0.255.99 Billing server (Splynx): 10.0.254.100 2022-02-10 11:39:32.968605 (12417) Accounting-Request Id 80 any:10.0.255.99:54246 -> 10.0.254.100:1813 +165.413

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

There is no realm so you have to configure the null realm. Le mer. 9 févr. 2022 à 20:12, Jorge Nolla a écrit : > Hi Fabrice, > > This is the output when It receives an accounting message from the > controller: > > > ^C[root@wifi jnolla]# radsniff -i any -f "port 1813" -x > Logging all events >

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Hi Fabrice, This is the output when It receives an accounting message from the controller: ^C[root@wifi jnolla]# radsniff -i any -f "port 1813" -x Logging all events Sniffing on (any) 2022-02-09 18:10:33.642001 (1) Accounting-Request Id 147 any:10.7.255.2:62395 -> 10.0.255.99:1813 +0.000

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Hello Jorge, you have to enable radius-acct service. It´s radius-acct who is able to proxy the request to another server, not pfacct (btw you can keep it enabled). Regards Fabrice Le mer. 9 févr. 2022 à 19:21, Jorge Nolla a écrit : > > Another configuration file with references to the

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Another configuration file with references to the billing server Splynx: [root@wifi raddb]# cat mods-config/perl/multi_domain_constants.pm package multi_domain_constants; our $VAR1 = { '1' => { 'ConfigRealm' => { 'local' => {

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Hi Team, Still can’t get accounting to proxy to the billing server. I don’t see the configuration on the proxy.conf so I imagine is pulling from this file. [root@wifi raddb]# cat proxy.conf.inc # This file is generated from a template at /usr/local/pf/conf/radiusd/proxy.conf.inc # Any changes

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Hi Fabrice, In our configuration the user should be able to only login via 1 device at a time, but they should be able to change devices. How can this be accomplished? > On Feb 9, 2022, at 8:52 AM, Fabrice Durand wrote: > > Which is normal, it´s what you have in the radius request. > > >

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Fabrice, There is an odd behavior we are trying to understand. If we use the same username name and password in different devices, for some reason it picks only the MAC address to authenticate as user. display access-user

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Yes, that's it. Le mar. 8 févr. 2022 à 11:23, Jorge Nolla a écrit : > Fabrice, > > The document you had provided didn’t layout the configuration steps. I > think this might be the correct document for the configuration you are > referring. If you have a chance take a look and let me know. > >

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Fabrice, The document you had provided didn’t layout the configuration steps. I think this might be the correct document for the configuration you are referring. If you have a chance take a look and let me know. https://support.huawei.com/enterprise/mx/knowledge/EKB1100055064 > On Feb 8,

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

You can try that instead: my $html_form = qq[ http://$controller_ip:8443/login;> ]; It will pass the mac address of the device in the radius request as username and password instead of the real username and password who has been

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Hi Fabrice, Let me check what the difference is in configuration on the AC side, I’ll report within the hour. Any clues as to why the parameters are not being passed? > On Feb 8, 2022, at 8:55 AM, Fabrice Durand wrote: > > Hello Jorge, > > i really think that it´s not the correct way to

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Hello Jorge, i really think that it´s not the correct way to support the web auth in Huawei. The only thing you can do with the portal is to authenticate with a username and password, there is no way to do anything else (sms/email/sponsor/). Also when you authenticate on the portal , the

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Radius request from the AC once it receives the correct values. This is sent back to Radius which in this case is PF User-Name = “5blz” <<< VALUE NEEDED IN URL as username User-Password = "**” <<< VALUE NEEDED IN URL as password NAS-IP-Address = 10.7.255.2 NAS-Port = 900 Service-Type =

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Did you try to hardcode that in the code and see if it works ? Also i don´t understand the goal of passing the username and password , is there any extra check after that ? What happen if the user register by sms/email ? And i just found that:

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Hi Fabrice, This line needs to be HTTPS for it to work http://$controller_ip:8443/login?username=bob=bob; style="display:none”> This needs to be the username and password which is being entered by the user in the PF portal, which is the Radius username and password username=bob=bob > On Feb

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

I just pushed a fix. cd /usr/local/pf curl https://github.com/inverse-inc/packetfence/commit/7628afddf46e0226667560dc33df192f9c4cf420.diff | patch -p1 and restart Le lun. 7 févr. 2022 à 13:46, Jorge Nolla a écrit : > Here are the log outputs for /usr/local/pf/logs/packetfence.log > > > Feb 7

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Hi Fabrice, From the Pf portal after the patch is applied. type: 'Huawei' is not a valid value The chosen type (Huawei) is not supported. > On Feb 6, 2022, at 6:49 PM, Jorge Nolla wrote: > > > This is the only option on the config. > > > > >> On Feb 6, 2022, at 6:41 PM, Jorge Nolla >

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Here are the log outputs for /usr/local/pf/logs/packetfence.log Feb 7 11:03:04 wifi packetfence_httpd.portal[61371]: httpd.portal(61371) INFO: [mac:[undef]] URI '/Huawei' is detected as an external captive portal URI (pf::web::externalportal::handle) Feb 7 11:03:04 wifi

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Hi Fabrice, Getting an error page from PF Not Implemented GET no supported for current URL. How is the switch supposed to be defined in PF? > On Feb 6, 2022, at 5:55 PM, Fabrice Durand wrote: > > I am just not sure what to set for username and password, if you do sms auth > then there is

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Here is the output for HAProxy Feb 7 10:48:54 wifi haproxy[2285]: 10.9.215.39:63814 [07/Feb/2022:10:48:54.074] portal-https-10.0.255.99~ 10.0.255.99-backend/127.0.0.1 0/0/0/13/13 501 413 - - 2/1/0/0/0 0/0 {wifi.fispy.mx} "GET /Huawei?ac-ip=10.7.255.2=10.9.215.39=FISPY-WiFi=f02f4b1467d9

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Worked as root after I stopped pf. Testing now. [root@wifi pf]# curl https://github.com/inverse-inc/packetfence/compare/feature/Huawei_web_auth.diff | patch -p1 % Total% Received % Xferd Average Speed TimeTime Time Current Dload Upload Total

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Hi Fabrice, Getting this error sudo curl https://github.com/inverse-inc/packetfence/compare/feature/Huawei_web_auth.diff | patch -p1 File lib/pf/Switch/Huawei.pm is read-only; trying to patch anyway patch: Can't create temporary file lib/pf/Switch/Huawei.pm.o00FB2T : Permission denied

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

I am just not sure what to set for username and password, if you do sms auth then there is no password. Also in the url it looks that it miss the mac address of the device , can you try to add device-mac and see if the device mac is in the url ? Here the first draft:

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Hi Fabrice This is the GET the AC is expecting: https://portal.fispy.mx:8443/login?username=($username)=($password) If successful it will return as per image below. If it fails the AC will redirect back to the Portal

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Great! it will be easier. Le dim. 6 févr. 2022 à 18:38, Jorge Nolla a écrit : > Fabrice, > > I figured out why the AC is formatting in that way, > > > 6.3.7.3.6 The URL of the Redirected Portal Page Contains %XX, Which Cannot > Be Identified by Some Portal Servers > > When a third-party Portal

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Fabrice, I figured out why the AC is formatting in that way, 6.3.7.3.6 The URL of the Redirected Portal Page Contains %XX, Which Cannot Be Identified by Some Portal Servers When a third-party Portal server is connected, the browser can be redirected to the URL of the Portal page, but the

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Hello Jorge, i have what i need at least to be able to support the web-auth. The only thing i am not sure is at the end of the registration process what we are supposed to do. I will create a branch on github in order for you to test. (it will be an update of the Huawei switch module). For

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

If I try to manually send the redirect in the browser here is what HA proxy records. This is a simple copy and paste in the browser and the output: https://wifi.fispy.mx/captive-portal ?destination_url=https://portal.fispy.mx:8443/login?username=539z=0uf3

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Seems weird how the format of the URL is recorded/sent Here is a normal redirect, the url is formatted correctly, Feb 6 16:03:41 wifi haproxy[2427]: 10.99.1.20:63577 [06/Feb/2022:16:03:41.232] portal-https-10.0.255.99~ 10.0.255.99-backend/127.0.0.1 0/0/1/233/234 200 4910 - - 2/1/0/0/0

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Hi Fabrice, Here are the options that can be added: [AirEngine9700-M1-url-template-PacketFence]url-parameter ? ap-group-name AP group name ap-ip AP IP address ap-location AP location ap-mac AP MAC address ap-name AP name device-ip Device IP

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Hi Team, Any input on this? We really would like to get this to work. Thank you! Jorge > On Feb 2, 2022, at 7:48 PM, Jorge Nolla wrote: > > Hi Fabrice, > > This is the sequence: > > Feb 2 14:51:32 wifi haproxy[2427]: 10.9.79.52:61132 > [02/Feb/2022:14:51:32.663] portal-http-10.0.255.99 >

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Hello Jorge, what we need is the user mac and the ap information. I found that https://support.huawei.com/enterprise/en/doc/EDOC118283/659354b1/display-url-template Is it possible to add extra parameters like user-mac ssid ap-ip ap-mac ? And if yes can you provide me the url generated by

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Hi Fabrice, This is the sequence: Feb 2 14:51:32 wifi haproxy[2427]: 10.9.79.52:61132 [02/Feb/2022:14:51:32.663] portal-http-10.0.255.99 10.0.255.99-backend/127.0.0.1 0/0/0/201/201 200 7146 - - 3/1/0/0/0 0/0 {wifi.fispy.mx} "GET /access?lang= HTTP/1.1" Feb 2 14:51:37 wifi haproxy[2427]:

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Hello Jorge, i will have a look closer. But i have a question, when the device is forwarded to the captive portal, (just before https://wifi.fispy.mx/captive-portal?switch%5Furl=https%3A%2F%2Fportal%2Efispy%2Emx%3A8443%2Flogin) , what is the url ? You should be able to see it in the

Re: [PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Hello Jorge, do you have any Huawei documentation to implement that ? Regards Fabrice Le mer. 26 janv. 2022 à 15:59, Jorge Nolla via PacketFence-users < packetfence-users@lists.sourceforge.net> a écrit : > Hi Team, > > We were wondering if anyone has had any success in configuring Web Auth >

[PacketFence-users] Huawei AC6005 Wireless Controller doesn’t support Web Auth. #4790

Hi Team, We were wondering if anyone has had any success in configuring Web Auth for the Huawei AC? It’s somewhat critical for us to get this going. Thank you! Jorge ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net