As an update, this isn't happening with a laptop, so might be something to do
with the Android device, but something is definitely stopping it communicating
with whatever part of the internet it requires as soon as it is pending
approval.
Maybe a particular entry needs to be added to the captive portal detection for
this OS version?
Cheers,
Andi
From: Morris, Andi [mailto:amor...@cardiffmet.ac.uk]
Sent: 07 July 2016 15:15
To: packetfence-users@lists.sourceforge.net
Subject: [PacketFence-users] sponsored access
Hi all,
I'm having trouble with my sponsored guest access where the registration isn't
completing until the guest node leaves and then reconnects to the captive
portal, when packetfence then sees the registered mac address and puts the node
in the correct vlan.
This doesn't seem to be happening with my email registered guests.
Log snippet of the point until the registration process halts:
Jul 07 14:39:20 httpd.portal(22569) WARN: [mac:unknown] Unable to match MAC
address to IP '192.168.42.42' (pf::iplog::ip2mac)
Jul 07 14:39:20 httpd.portal(22569) INFO: [mac:unknown] Instantiate profile
default (pf::Portal::ProfileFactory::_from_profile)
Jul 07 14:39:20 httpd.portal(22569) WARN: [mac:unknown] Unable to match MAC
address to IP '192.168.42.42' (pf::iplog::ip2mac)
Jul 07 14:39:20 httpd.portal(22569) WARN: [mac:0] Unable to match MAC address
to IP '192.168.42.42' (pf::iplog::ip2mac)
Jul 07 14:39:20 httpd.portal(22569) INFO: [mac:0] Instantiate profile default
(pf::Portal::ProfileFactory::_from_profile)
Jul 07 14:39:20 httpd.portal(22569) WARN: [mac:0] Unable to match MAC address
to IP '192.168.42.42' (pf::iplog::ip2mac)
Jul 07 14:39:20 httpd.portal(22569) INFO: [mac:0] Instantiate profile default
(pf::Portal::ProfileFactory::_from_profile)
Jul 07 14:39:20 httpd.portal(22569) INFO: [mac:0] [cc:fa:00:f4:4a:c3]
Activation code sent to email amor...@cardiffmet.ac.uk from
andi.mor...@gmail.com successfully verified. for activation type: sponsor
(pf::activation::validate_code)
Jul 07 14:39:20 httpd.portal(22569) INFO: [mac:0] Sponsor needs to authenticate
in order to activate guest. Guest token: 3386be07684696d271b7f891b6a729d7
(captiveportal::PacketFence::Controller::Activate::Email::doSponsorRegistration)
Jul 07 14:39:31 httpd.portal(22552) INFO: [mac:unknown] Memory configuration is
not valid anymore for key interfaces::management_network in local cached_hash
(pfconfig::cached::is_valid)
Jul 07 14:39:31 httpd.portal(22552) WARN: [mac:unknown] Unable to match MAC
address to IP '192.168.42.42' (pf::iplog::ip2mac)
Jul 07 14:39:31 httpd.portal(22552) INFO: [mac:unknown] Instantiate profile
default (pf::Portal::ProfileFactory::_from_profile)
Jul 07 14:39:31 httpd.portal(22552) WARN: [mac:unknown] Unable to match MAC
address to IP '192.168.42.42' (pf::iplog::ip2mac)
Jul 07 14:39:31 httpd.portal(22552) WARN: [mac:0] Unable to match MAC address
to IP '192.168.42.42' (pf::iplog::ip2mac)
Jul 07 14:39:31 httpd.portal(22552) INFO: [mac:0] Instantiate profile default
(pf::Portal::ProfileFactory::_from_profile)
Jul 07 14:39:31 httpd.portal(22552) WARN: [mac:0] Unable to match MAC address
to IP '192.168.42.42' (pf::iplog::ip2mac)
Jul 07 14:39:31 httpd.portal(22552) INFO: [mac:0] Instantiate profile default
(pf::Portal::ProfileFactory::_from_profile)
Jul 07 14:39:31 httpd.portal(22552) INFO: [mac:0] [cc:fa:00:f4:4a:c3]
Activation code sent to email amor...@cardiffmet.ac.uk from
andi.mor...@gmail.com successfully verified. for activation type: sponsor
(pf::activation::validate_code)
Jul 07 14:39:31 httpd.portal(22552) ERROR: [mac:0] unable to read password file
'/usr/local/pf/conf/admin.conf'
(pf::Authentication::Source::HtpasswdSource::authenticate)
Jul 07 14:39:31 httpd.portal(22552) INFO: [mac:0] [DCLL01] Authentication
successful for sm18818 (pf::Authentication::Source::LDAPSource::authenticate)
Jul 07 14:39:31 httpd.portal(22552) INFO: [mac:0] Authentication successful for
'sm18818' in source DCLL01 (AD) (pf::authentication::authenticate)
Jul 07 14:39:31 httpd.portal(22552) INFO: [mac:0] Successfully authenticated
sm18818/192.168.42.42/0
(captiveportal::PacketFence::Controller::Authenticate::authenticationLogin)
Jul 07 14:39:31 httpd.portal(22552) INFO: [mac:0] Using sources DCLL01 for
matching (pf::authentication::match)
Jul 07 14:39:31 httpd.portal(22552) WARN: [mac:0] Calling match with
empty/invalid rule class. Defaulting to 'authentication'
(pf::authentication::match)
Jul 07 14:39:31 httpd.portal(22552) INFO: [mac:0] Using sources sponsor for
matching (pf::authentication::match)
Jul 07 14:39:31 httpd.portal(22552) INFO: [mac:0] Matched rule (Staff_Sponsor)
in source sponsor, returning actions. (pf::Authentication::Source::match)
Jul 07 14:39:32 httpd.portal(22552) INFO: [mac:0] a new temporary account has
been requested for andi.mor...@gmail.com. Deleting previous entry
(pf::password::generate)
Jul 07 14:39:32 httpd.portal(22552) INFO: [mac:0] new temporary account
successfully generated (pf::password::generate)
At this point the node is still marked as unregistered in the admin GUI and the
device is saying that registration is pending approval.
I've noticed that as soon as the sponsor email gets sent the node reports as
losing internet access, which is why I think the transaction never finishes. I
wonder if there is something strange going on when the node is pending
registration.
I'm running version 6.2.0 on CentOS and the device I'm testing with is an
Android phone.
Cheers,
Andi
-------------------------------------
Andi Morris
IT Security Officer
Cardiff Metropolitan University
T: 02920 205720
E: amor...@cardiffmet.ac.uk<mailto:amor...@cardiffmet.ac.uk>
--------------------------------------
________________________________
[Image removed by sender. Cardiff Metropolitan University - Queens Anniversary
Prizes
2015]<http://www.cardiffmet.ac.uk/news/Pages/Cardiff-Met-research-recognised-in-Queens-Anniversary-Prizes-for-Higher-and-Further-Education.aspx>
------------------------------------------------------------------------------
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
Francisco, CA to explore cutting-edge tech and listen to tech luminaries
present their vision of the future. This family event has something for
everyone, including kids. Get more information and register today.
http://sdm.link/attshape
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
