Home › Forums › Open-Source Software › CoovaChilli Development

MAC Allowed on kamikaze

Thu, 12/17/2009 - 09:16 — Jude6893

Hi,

I using openwrt kamikaze 8.09 and coovachilli 1.0.13-1. All I'm trying to do is to let certain mac addressed not having authenticate. In other word these users will not be receiving portal login prompt to surf the internet. Here is how my main.conf looks like:

macallowed 00224390CF33,0011F53A9D69,00AD437F85DA
macallowlocal

It not working.

Please note: Radius authentication will not be used.

May I request your assistance please.

Thanks,
--Jude

‹ MTU and connection reset problems MACAUTH needs CoovaChilli restart? ›
Thu, 12/24/2009 - 17:49 — kenb

Kamikaze

What platform are you on?

I had issues with 1.0.12 on PowerPC with the Mac Allowed comparisons failed. You'd get an IP fine, but if you were in the MAC allowed list, you still had to authenticate.

I tracked it down to a bug in the MAC Allowed comparisons - see http://coova.org/node/2663 for the original message. I'm still using my patch for 1.0.12, and it might work on 1.0.14 but I won't have a chance to try it until the new year.

Enable debugging and from main-opt.c you should see:
log_dbg("Macallowed #%d: %s\n", numargs,
args_info.macallowed_arg[numargs]);

Which might help you confirm the MAC's you are putting in the config are being stored/converted correctly.

Thu, 12/17/2009 - 14:15 — Dany

Check CoovaChilli logs

A couple of things to know and check:

  1. Clients on the macallowed list are authenticated when they first acquire an address. Updating macallowed after a client has already been assigned an address won't give it access. The client must release and acquire a new address.
  2. If CoovaChilli is already running when you update macallowed, you must tell it to reload, either through its init script or by sending it a HUP. Also a running CoovaChilli periodically reloads its configuration automatically.
  3. On OpenWRT, check the output of logread. You should be able to see what CoovaChilli is up to. On 1.0.12 it outputs something like
    Granted MAC=xx-xx-xx-xx-xx-xx with IP=a.b.c.d access without radius auth
    when a client on the macallowed list acquires a new address from the AP/CoovaChilli
Thu, 12/17/2009 - 16:58 — Jude6893

Dany, I have followed your

Dany,

I have followed your instructions and the suggestions have not worked for me. Or may be I miss interpret the suggestions. Please correct me if I'm wrong:

Step 1 - From my Laptop
===============
1) ifconfig wlan0 down
2) Remove everything from /var/lib/dhcp3

Step 2 - From kamikaze's coovachilli
=======================
2) reboot the router

Step 3 - From my laptop
===============
1) ifconfig wlan0 up
2) Use Network Manager to connect to kamikaze's AP running coovachilli 1.0.13-1

Observation
========
I can see a new IP is assigned. However, MAC authentication is not working.
Jan 1 00:02:43 OpenWrt local6.notice coova-chilli[1243]: chilli.c: 2822: New DHCP request from MAC=00-AD-43-7F-85-DA
Jan 1 00:02:43 OpenWrt local6.notice coova-chilli[1243]: chilli.c: 2789: Client MAC=00-AD-43-7F-85-DA assigned IP 10.1.0.3
Note: Please disregard the time stamp.

Questions
======
1) How does coovachilli stores dhcp lease information?
2) How can i force it to give a new IP?

Thanks for your time,
--Jude