Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Captive Portal Translation

This thread has been viewed 1 times
  • 1.  Captive Portal Translation

    Posted Mar 01, 2012 08:35 AM

    Has anybody successfully translated the captive portal?

     

    Of course I read the manual and I know that technically it can be done, but even following the steps outlined in the manual when I upload the page the captive portal will no longer authenticate users... it just brings the user back to the login without any error messages... has anybody run into this issue before and, if so, what were the steps you used to resolve it?

     

    Thanks.



  • 2.  RE: Captive Portal Translation

    EMPLOYEE
    Posted Mar 01, 2012 08:45 AM

    @Yann wrote:

    Has anybody successfully translated the captive portal?

     

    Of course I read the manual and I know that technically it can be done, but even following the steps outlined in the manual when I upload the page the captive portal will no longer authenticate users... it just brings the user back to the login without any error messages... has anybody run into this issue before and, if so, what were the steps you used to resolve it?

     

    Thanks.


    Yann,

     

    Of course whether or not the captive portal is working depends on what code you have for the page.  You probably would have to open a case for that, or if you are willing to paste in the code you are using, we can try to help.

     



  • 3.  RE: Captive Portal Translation

    Posted Mar 01, 2012 08:50 AM

    Here is the code for the entire page:

     

    The only things that were changed is text values and one CSS style was added for the image that was orginaly "Registered Users".

     

    Thanks for your time.

     

    Spoiler

    <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <title>Portail</title>

    <link href="/auth/custom/styles.css" rel="stylesheet" media="screen" type="text/css" /> <link href="styles.css" rel="stylesheet" media="screen" type="text/css" /> <style type="text/css"> body {  background: #000 url('/upload/custom/FN_invites-cp_prof/Cscfn.jpg') center no-repeat;  font-family: verdana, arial, helvetica, sans-serif;  font-size: 11px;  font-weight: normal;  margin: 0;  padding: 0; } h1#Utilisateurhdr { background-image: url('/upload/custom/FN_invites-cp_prof/Utilisateur.jpg'); }

    #user-agreement {     font-family: verdana, arial, hevetica, sans-serif;     font-size: 11px;     font-weight: normal;     padding:10px;     margin:10px;     width: 550px;     border:1px dotted gray;     background: gray; } #user-agreement table, tr, td, input {     font-family: verdana, arial, hevetica, sans-serif;     font-size: 11px;     font-weight: normal; } #logins input {     font-family: verdana, arial, hevetica, sans-serif;     font-size: 11px;     font-weight: normal; } </style> <script language="javascript" type="text/javascript"> function cp_ua() {     this.div_ids = new Array('user-agreement', 'logins');     this.cp_a_type = null;     this.init = function(cp_a_type) {         if(this.cp_a_type == null)             this.cp_a_type = cp_a_type;     }     this.show_forms = function(isUa, isDisabled) {         var __user_agreement = (!isUa) ? true : false;         var __cmp_str = (__user_agreement) ? this.div_ids[0] : this.div_ids[1];         var vm=null, vmid=null;         for(var i=0; i<this.div_ids.length; i++) {             var div_id = this.div_ids[i];             var div_ref = document.getElementById(div_id);             var disp_str = (div_id.match(__cmp_str)) ? 'block' : 'none';             if(div_ref) {                 div_ref.style.display = disp_str;             }         }         if(isUa && (vm = document.getElementsByName(this.cp_a_type)[0]) != null) {             this.ed_fields(isDisabled);             vm.focus();         }     }     this.ed_fields = function(flag) {   /* Enable/Disable fields */         var inputs = document.getElementsByTagName('input');         for(var j=0; j<inputs.length; j++) {             var vm = inputs[j];             if(vm) {                 vm.disabled = flag;             }         }         return;     }     this.only_aup = function(requested_url) {         var xform = document.getElementById("only_aup_form");         var url = document.getElementsByName("requested_url")[0];         url.value = requested_url;         xform.submit();         return;     } } var CpUa = new cp_ua();

    function showPolicy() {  win = window.open("/upload/custom/FN_invites-cp_prof/acceptableusepolicy.html", "policy", "height=550,width=550,scrollbars=1"); } </script> </head>

    <body onload="CpUa.init('user');CpUa.show_forms()" style="background-color:"> <div id="main" style="text-align:center">     <div id='user-agreement' style=""><!--style="display: none"!-->         <table width='100%'><tbody>           <tr><td>             <h3>Entente sur l'utilisation de réseau du CSCFN</h3>           </td></tr>           <tr><td>             J’ai lu et compris la politique B-21 (élève) ou D-21 (membre du personnel) régissant l’utilisation légitime du réseau informatique du CSCFN, de l’internet et du courrier électronique, et je m’engage à la respecter intégralement., Je comprends que l’accès au réseau informatique, à l’internet et au courriel électronique est offert à des fins pédagogiques et administratives. Je comprends également que le Conseil respecte ma vie privée mais que ceci ne s’étend pas à mon utilisation de son réseau ni aux messages reçus ou envoyés par le biais du réseau, et que cet usage n’est pas confidentiel., Votre utilisation du réseau pourrait être surveillée pour assurer la sécurité de ses utilisateurs et pour assurer un usage acceptable et conforme à la politique pour l’utilisation légitime du réseau informatique du CSCFN., Toutes questions relatives à cette surveillance devraient être dirigées au chef du service informatique par courriel ou au poste 226., EN CLIQUANT «OK», J’ACCEPTE ET JE M’ENGAGE À RESPECTER LES CONDITIONS D’UTLISATION DU RÉSEAU INFORMATIQUE DU CSCFN "Politiques B-21, D-21- l’utilisation du système informatique, de l’internet et du courrier électronique           </td></tr>           <tr><td align='center'><br />         <input type='button' value='Accepté' onClick="CpUa.show_forms(true)" />           </td></tr>         </tbody></table>     </div>

     <div id="logins">   <div id="errorbox" style="display: none">    </div>   <div id="registered" style="">    <h1 id="Utilisateurhdr" class="swap"><span>Utilisateur</span></h1>    <form action="login" id="regform" method="post" autocomplete="off" title="Utilisé par le personnel du CSCFN">

       <div id="usernamebox">    <label for="user" accesskey="u">Nom d'utilisateur</label>    <input type="text" name="user" id="user" size="25" class="text" accesskey="u" value=""/>    </div>        <div id="passwordbox">    <label for="password" accesskey="p">Mot de passe</label>    <input id="password" name="password" value="" type="password" size="25" class="text" accesskey="p" />    </div>

       <div id="fqdnbox" style="display: none"></div>

       <input type="hidden" name="cmd" value="authenticate" />    <input type="submit" name="Login" value="Connexion" class="button" />    <p>En vous athentifiant à ce réseau, vous indiquez que vous acceptez les modalités de le <a href="javascript&colon;void(0)"  onclick="showPolicy();">politique de l'utilisation du réseau sans fil du conseil</a>.</p>        </form>   </div>

      <div  style="display: none">    <form action="login" id="only_aup_form" method="post" title="">    <input type="hidden" name="accept_aup" value="accept_aup" />    <input type="hidden" name="requested_url" value="" />    </form>   </div>

      <div id="guest" style="display: none">    <h1 id="guesthdr" class="swap"><span>GUEST USER</span></h1>    <form action="login" id="guestform" emweb_name="captive_portal_guest" method="post" title="Form used by guest users to login">

       <div id="emailbox">    <label for="email" accesskey="e">EMAIL</label>    <input id="email" name="email" type="text" size="25" class="text" accesskey="e" />    </div>

       <input type="hidden" name="cmd" value="authenticate" />    <input type="submit" name="Login" value="Log In" class="button" />        </form>   </div>      <div id="instructions" style="display: none;">    <div id="instructionstext"></div>    <div id="instructionsbg"></div>   </div>  </div> </div>

    </body> </html>

     

     



  • 4.  RE: Captive Portal Translation

    EMPLOYEE
    Posted Mar 04, 2012 02:05 AM

    Yann,

     

    That looks like it should work.

     

    You should turn on user debugging to find out why the user is redirected:

     

    config t

    logging level debugging user

    show log user 50

     

     



  • 5.  RE: Captive Portal Translation

    Posted Mar 08, 2012 10:57 AM

    After several tests and checking several clients (iOS and Win7) I can see that the station authenticates successfully with the SSID then nothing.

     

    If I revert to the default captive portal I can see the station authenticate to the SSID and then successfully authenticate with the captive portal and have the correct roles applied.

     

    It's almost as if nothing is sent back from the translated captive portal to the controller...



  • 6.  RE: Captive Portal Translation

    Posted Mar 20, 2012 04:01 AM

    im encountering the same issue, did you solve your issue?

     

    i took the original page, didn't change anything except the charset as advised in the manual and tried it, it just doesnt work then, quite weird.

     

    the user log shows nothing, as if nothing is send or accepted.



  • 7.  RE: Captive Portal Translation

    EMPLOYEE
    Posted Mar 20, 2012 06:22 AM

    Does the user debug log show that the user is at least associated?  You might need TAC to look over your HTML.

     



  • 8.  RE: Captive Portal Translation
    Best Answer

    Posted Mar 20, 2012 08:38 AM

    Yes I did manage to fix the issue, however, not with the original coding intact.

     

    In the div tags for the login form, the form action is "login", I have changed that to "auth/index.html/u".

     

    Everything worked after that for me.

     

    Hope this helps.



  • 9.  RE: Captive Portal Translation

    Posted Mar 20, 2012 10:21 AM

    thanks for replying, i was already using that based on knowledge base article 154.

     

    it seems that using the page that normally works as a template simply doesn't work.

     

    and yes i do see the user associating with the AP. then it just stops.