Re: [PacketFence-users] Captive Portal Facebook redirection e Apple iOS 11+

2018-03-13 Thread Fabrice Durand via PacketFence-users 
Hello Fabricio,

you will need to take a capture of the dns traffic of the Iphone and
check when you try to register on facebook if one of the answer of the
dns is the ip address of the captive portal.

If it's the case then you will need to adapt the passthrough.

Regards

Fabrice



Le 2018-03-12 à 13:25, Fabricio Lorenzon via PacketFence-users a écrit :
> Hello
>
> I am using packetfence 7.3 in inline mode with captive portal.
> The captive portal is configured to use Facebook as the authentication
> mode.
> On Apple devices running iOS 11+, after the user is redirected to
> facebook.com , an error occurs stating that the
> connection is not secure and terminates the captive portal without
> releasing access. On android devices or Apple with iOS 10 and below
> the access works perfectly.
> Packetfence is using a certificate issued by lets encrypt and is
> configured correctly (verified by testing at ssllabs.com
> ).
> Any idea what might be going on?
>
> -- 
> Atenciosamente,
>
> Fabrício Lorenzon
> Divisão de Tecnologia da Informação
> Telefone: 54-33168250
> Passo Fundo - RS
>
>
>
>
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users

-- 
Fabrice Durand
fdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org) 

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Captive Portal Facebook redirection e Apple iOS 11+

2018-03-25 Thread Fabricio Lorenzon via PacketFence-users 
Hello Fabrice

I have captured the packets with tcpdump e analyzed with wireshark.
The passthrough was adapted to the domains below, but still not working.
The problem remains.

*.doubleclick.net
fbsbx.com
*.fbsbx.com
fbcdn.net
facebook.com
*.facebook.com
*.facebook.net
*.fbcdn.net
*.akamaihd.net
*.akamaiedge.net
*.edgekey.net
*.akamai.net

2018-03-13 9:47 GMT-03:00 Fabrice Durand via PacketFence-users <
packetfence-users@lists.sourceforge.net>:

> Hello Fabricio,
>
> you will need to take a capture of the dns traffic of the Iphone and check
> when you try to register on facebook if one of the answer of the dns is the
> ip address of the captive portal.
>
> If it's the case then you will need to adapt the passthrough.
>
> Regards
>
> Fabrice
>
>
>
> Le 2018-03-12 à 13:25, Fabricio Lorenzon via PacketFence-users a écrit :
>
> Hello
>
> I am using packetfence 7.3 in inline mode with captive portal.
> The captive portal is configured to use Facebook as the authentication
> mode.
> On Apple devices running iOS 11+, after the user is redirected to
> facebook.com, an error occurs stating that the connection is not secure
> and terminates the captive portal without releasing access. On android
> devices or Apple with iOS 10 and below the access works perfectly.
> Packetfence is using a certificate issued by lets encrypt and is
> configured correctly (verified by testing at ssllabs.com).
> Any idea what might be going on?
>
> --
> Atenciosamente,
>
> Fabrício Lorenzon
> Divisão de Tecnologia da Informação
> Telefone: 54-33168250
> Passo Fundo - RS
>
>
>
>
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
>
> ___
> PacketFence-users mailing 
> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
> --
> Fabrice durandfdur...@inverse.ca ::  +1.514.447.4918 <(514)%20447-4918> 
> (x135) ::  www.inverse.ca
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
> (http://packetfence.org)
>
>
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>


-- 
Atenciosamente,

Fabrício Lorenzon
Divisão de Tecnologia da Informação
Telefone: 54-33168250
Passo Fundo - RS
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Captive Portal Facebook redirection e Apple iOS 11+

2018-04-06 Thread Fabricio Lorenzon via PacketFence-users 
Hello Fabrice

I have installed and reconfigured a new server and the problem was solved.


Regards,

2018-03-22 14:46 GMT-03:00 Fabricio Lorenzon :

> Hello Fabrice
>
> I have captured the packets with tcpdump e analyzed with wireshark.
> The passthrough was adapted to the domains below, but still not working.
> The problem remains.
>
> *.doubleclick.net
> fbsbx.com
> *.fbsbx.com
> fbcdn.net
> facebook.com
> *.facebook.com
> *.facebook.net
> *.fbcdn.net
> *.akamaihd.net
> *.akamaiedge.net
> *.edgekey.net
> *.akamai.net
>
> 2018-03-13 9:47 GMT-03:00 Fabrice Durand via PacketFence-users <
> packetfence-users@lists.sourceforge.net>:
>
>> Hello Fabricio,
>>
>> you will need to take a capture of the dns traffic of the Iphone and
>> check when you try to register on facebook if one of the answer of the dns
>> is the ip address of the captive portal.
>>
>> If it's the case then you will need to adapt the passthrough.
>>
>> Regards
>>
>> Fabrice
>>
>>
>>
>> Le 2018-03-12 à 13:25, Fabricio Lorenzon via PacketFence-users a écrit :
>>
>> Hello
>>
>> I am using packetfence 7.3 in inline mode with captive portal.
>> The captive portal is configured to use Facebook as the authentication
>> mode.
>> On Apple devices running iOS 11+, after the user is redirected to
>> facebook.com, an error occurs stating that the connection is not secure
>> and terminates the captive portal without releasing access. On android
>> devices or Apple with iOS 10 and below the access works perfectly.
>> Packetfence is using a certificate issued by lets encrypt and is
>> configured correctly (verified by testing at ssllabs.com).
>> Any idea what might be going on?
>>
>> --
>> Atenciosamente,
>>
>> Fabrício Lorenzon
>> Divisão de Tecnologia da Informação
>> Telefone: 54-33168250
>> Passo Fundo - RS
>>
>>
>>
>>
>> --
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>
>>
>>
>> ___
>> PacketFence-users mailing 
>> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>>
>> --
>> Fabrice durandfdur...@inverse.ca ::  +1.514.447.4918 <(514)%20447-4918> 
>> (x135) ::  www.inverse.ca
>> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
>> (http://packetfence.org)
>>
>>
>> 
>> --
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>> ___
>> PacketFence-users mailing list
>> PacketFence-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>>
>
>
> --
> Atenciosamente,
>
> Fabrício Lorenzon
> Divisão de Tecnologia da Informação
> Telefone: 54-33168250
> Passo Fundo - RS
>
>
>


-- 
Atenciosamente,

Fabrício Lorenzon
Divisão de Tecnologia da Informação
Telefone: 54-33168250
Passo Fundo - RS
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users