new captive.pdf

8/10/2019 new captive.pdf

http://slidepdf.com/reader/full/new-captivepdf 1/24

Basic install instructions

To be improved on Last updated 2013-02-07

Install Ubuntu Server to computer. UbuntuServerInstallation (Ubuntu 12.04 (LTS) is tested

and currently supported. Debian 6 is also currently supported)

If you didn’t follow the Ubuntu Server install instructions, or have installed a GUI, please check

the Hardware Setup page for some important information about the network card setup.

When it boots you will be presented with a prompt. Login with the username and password

you set. Download latest grase-repo package from http://packages.grasehotspot.org

/pool/main/g/grase-repo/

e.g. (Update to point to the latest grase-repo package at the above link)

$ wget http://packages.grasehotspot.org/pool/main/g/grase-repo/grase-

repo_1.4_all.deb

install the package

$ sudo dpkg -i grase-repo_1.4_all.deb

Update the repository

$ sudo apt-get update

INSTALLATION

GRASE Hotspot

nstallation | GRASE Hotspot http://grasehotspot.org/documentation/installat

sur 24 24/09/2014 21



Then install the components. Currently for a full system, the following command should suf-

�ce

$ sudo apt-get install grase-www-portal grase-conf-freeradius grase-

conf-squid3 grase-conf-openvpn

This will proceed to download all the dependencies as well and install them. It will ask a few

questions which are needed to �nish setting it up. See the below sections for answering these

questions

If you have issues installing coova-chilli, see http://support.rstudio.org/help/kb/advanced/in-

stalling-openssl-098-on-debian-7-wheezy for more information on installing libssl0.9.8

IMPORTANT: In the interest of total openness, you should be aware that the grase-

conf-openvpn package will connect your Hotspot computer to a virtual private network,

that allows remote access to your computer on that virtual private network.

This is used for 3 purposes:

If you request assistance, we have a method of connecting to your Grase hotspot

machine remotely to assist you. This connection is the same as if I was sitting on your

WiFi network, so I am unable to access any other device other than your Grase

Hotspot machine, and I am only able to access it’s web interface. (This is also thereason for the support user in the web interface)

Statistics gathering . Again, only the information that is publicly available on the web

interface, in particular the version you are using. Used to track uptake of new versions

So YOU can remotely administer your Grase Hotspot. If you need the ability to

remotely login to your Grase Hotspot device, (i.e. from outside of your WiFi/Local

network). If you need to do this, please contact me to arrange your side of the

connection, so we ensure your computer remains secure

To be clear, I DO NOT have any more access to your computer, than the admin web

interface provides. If you delete the support user, the only access I have is to get the

version number for Statistics gathering.

Finally, if you have a support contract for full remote assistance, then install the remote assis-


2 sur 24 24/09/2014 21



tance part. (Certain organisations currently get this, if in doubt please contact me �rst).

Please do not install the grase-remote-assist-user unless you understand why you are

installing. I have purposely made the below command break if you copy and paste it and

do not understand what it is.

$ sudo apt-get install grase_remote_assist_user

Con�guring grase-conf-freeradius

Attempting to setup the database manually is possible but should not be attempted without

good reason.

When it asks you if you want to use dbcon�g-common to manage it, please answer yes.1.

You will then need to enter the MySQL root users password which was set during the

Ubuntu Server install. If you didn’t select LAMP when installing Ubuntu Server, before you

get to this question it will install MySQL and ask you to set a password.

2.

It will then ask you for and “MySQL application password for grase-conf-freeradius. You can

leave this blank and a random password will be created. If you are going to want/need to

poke around in the user database userself with SQL commands, then set this password to

something you know.

3.

Con�guring grase-www-portal

See the above section for grase-conf-freeradius, all of that applies for this, it’s just for the

database for the web interface (mostly admin users and logs)

Install �nished

This should have installed the base system, and submit the systems key to a central server forremote admin. (But not the remote admin user setup, that will have to come later at this

stage).

You should now be able to access the web interface at http://10.1.0.1/grase/radmin (from the

LAN side). The LAN side is the network interface you are running your WiFi Access Point off.


3 sur 24 24/09/2014 21



Default username is admin and password is hotspotadmin

Please post support requests to the mailing list , and not as com-ments below. This way the whole community can assist with an-

swering your questions.Comments are CLOSED!

67 THOUGHTS ON “INSTALLATION”

Pingback: GRASE Hotspot » Installation

JUNE 2, 2011 AT 12:27 PM

Mate great work

Is there a way to geto the gui from the wan side

cheers

looking forward to updates

JUNE 2, 2011 AT 2:51 PM

Easiest way is to port forward port 80 to your hotspot machine (you can port forward

an alternative port like 5678 as long as it points to 80 on the hotspot machine). Just

make sure you secure the server to allow access from limited ip addresses.

JUNE 3, 2011 AT 9:59 AM

Thanks mate

just had a look where is the script located

i am running 11.04 and just found out its changed a bit from 10.10

marty

tim

marty


4 sur 24 24/09/2014 21



I to all,

with ubuntu server 11.04 it’s work but i think that we have some problem with dns.

JUNE 21, 2011 AT 10:58 PM

Had a problem with installing as the Ubuntu 10.04 server squid version was not high

enough, was generating an error with the version

I found squid3 3.1.6 available on the following website, which solved my installation prob-

lems

https://launchpad.net/~ubuntu-backports-testers/+archive/ppa/+build/1981799

JULY 6, 2011 AT 6:20 PM

Good Morning All i got this error msg while con�guring Grase HotSpot………

Any HELP please…..

Thanks

* Stopping virtual private network daemon(s)… * Stopping VPN ‘grase’: No such VPN is

running.

* Starting virtual private network daemon(s)…

* Starting VPN’grase’ [fail]

invoke-rc.d: initscript openvpn, action “restart” failed.

Setting up grase-www-portal (3.3)…

JULY 12, 2011 AT 8:18 PM

This message is normal for the grase-conf-openvpn package. Until the VPN certi�cate is

approved by the central server, the VPN can’t start. The install is �ne.

Anne

ifeoluwa

tim

THANK FOR THE REPLY


6 sur 24 24/09/2014 21



JULY 13, 2011 AT 8:18 PM

Thanks Tim for the Response…

I will get the community on my success thanks…

Willing to help on Translation

JULY 13, 2011 AT 8:22 PM

Tim, please for how long will i have to wait for the server to approve it?

Thanks in advance..

OCTOBER 14, 2011 AT 1:37 AM

Hello, I installed the latest version of fat hotspot on ubuntu 11.04. but from the PC client

is not possible to go on the internet. in fact, I have not even the captive portal. someone

could help me?

OCTOBER 17, 2011 AT 6:27 PM

Hi Fabrice.

Please post all support requests to the mailing list. We’ll need you to run different com-

mands to try and diagnose where the problem is.

Thanks

Tim

NOVEMBER 1, 2011 AT 2:28 AM

works great!

we’re con�guring the login screen.

i personally donate you!

THANK FOR THE REPLY

fabrice

tim

mena


7 sur 24 24/09/2014 21




hi,

i cant integrate the conection with a dansguardian, to �lter what can users use?


im sorry.

this is my question:

could i integrate Dansguardian on the same server?

NOVEMBER 3, 2011 AT 1:37 PM

Hi Mena.

It is possible to run Dansguardian on the same server, I’ve just not written any instruc-

tions for it yet. Please consider posting to the mailing list as someone else may have al-

ready set it up.

Tim


thanks


Hola, es factible realizar control de acceso a sitios web con grasehotspot? Puedo modi-

�car el archivo squid.conf para agregar las acl?

Excelente herramienta grasehotspot.

mena

mena

tim

me

Manuel Mendoza


8 sur 24 24/09/2014 21



Saludos.


Hi Manuel.Yes, you can use squid to control access. Please post support requests to the mailing list,

preferably in English.


Hello Tim, i have seen that in squid directory there are 2 �les squid.conf and

squid.conf.grase which of these �les is using grasehotspot?

Also i don’t see in the acl the network 10.1.0.x to be allowed.


that is what i want to do, well not exactly the same.

i want to �lter page by user.

lo que quiero hacer es �ltrar por usuario, que unos puedan acceder a varias paginas y

otros no.

Tim me dijo que para eso debia con�gurar a squid para que conozca la base de datos de

los usuarios, aun no he tenido exito.

this project is great Tim!!


dre@GRASE-HOTSPOT:~$ sudo apt-get install grase-www-portal grase-conf-freeradius

grase-conf-squid3 grase-conf-openvpn

Reading package lists… Done

tim

Manuel Mendoza

mena

andre


9 sur 24 24/09/2014 21



Building dependency tree

Reading state information… Done

Some packages could not be installed. This may mean that you have

requested an impossible situation or if you are using the unstable

distribution that some required packages have not yet been created

or been moved out of Incoming.The following information may help to resolve the situation:

The following packages have unmet dependencies:

grase-conf-freeradius: PreDepends: coova-chilli (>= 1.2.6grase3) but it is not going to be

installed

grase-conf-squid3: Depends: squid3 (>= 3.1) but it is not going to be installed

E: Broken packages


Try a newer version of Ubuntu

DECEMBER 14, 2011 AT 9:39 AM

Great work, once I had the correct version of ubuntu (11.04 worked for me) it came up no

worries. All I was wondering was how to change the default prices for the data and time

limits.


Older versions of Ubuntu don’t currently work as they don’t have a new enough version

of squid3.As for the default data and time limits, I’m working on a �x for that. Ideally, you use the

groups feature to setup groups with a default data and time limit, and then just select

that group.

As for the prices of data and time, they are under the main settings page.

Gert-Jan

Jason

tim


0 sur 24 24/09/2014 21




Thanks for the great work. I’ve been trying to install on 10.04 LTS Server and was having

the same issues as above. I’ll try with 11.04 and see how it goes.

Again, Thanks to EVERYONE!

FEBRUARY 12, 2012 AT 4:29 AM

Hello good work, I wanna know how can into to admin page from another pc using

http://10.1.0.1/grase/radmin but no works can you help me with that please?

FEBRUARY 13, 2012 AT 4:08 PM

Please post support request to the mailing list.

The 10.1.0.1 address will work from a computer connected to the Hotspot, as long as

you don’t change the default settings. If you wish to access this page from a machine on

the WAN side of the Hotspot, you’ll need to �nd out it’s WAN ip address and use that in

place of 10.1.0.1

Tim


Hi tim it really works now I wanna introduce a image in the portal customisation can u

help me please?


Hey Tim, Just wanted to say GREAT WORK! This is an awesome system, but I did have to

Kyle

wilson

tim

wilson

Kyle Hoehn


1 sur 24 24/09/2014 21



Can grase hotspot run or installed on Ubuntu Desktop 11.10 ? someon ehelp out

MARCH 10, 2012 AT 9:40 AM

Yes Boniface it will work…

am using a desktop version myself. You just need to installsome other applications for it to work.

First you need to install lamp, followed by phpmyadmin

then you can continue with the grase installation from their website.

below is the command to install lamp and phpmyadmin

# sudo apt-get install php5 mysql-server apache2

follow the instructions then

# sudo apt-get install phpmyadmin

then continue with installation from http://grasehotspot.org/documentation/installa-

tion/

hope this was helpful

APRIL 7, 2012 AT 9:05 AM

Thanks Bismark. sorry for the delay in responding. i have actually been busy studying

for my masters exams. i tried installing grasehotpot as per your advise and after

2days of struggling it really worked out. thanks a lot.

MARCH 10, 2012 AT 9:38 AM

Yes Boniface it will work… am using a desktop version myself. You just need to install

some other applications for it to work.

Bismark

Boniface

Bismark


3 sur 24 24/09/2014 21



First you need to install lamp, followed by phpmyadmin

then you can continue with the grase installation from their website.

below is the command to install lamp and phpmyadmin

# sudo apt-get install php5 mysql-server apache2

follow the instructions then

# sudo apt-get install phpmyadmin

then continue with installation from http://grasehotspot.org/documentation/installation/

hope this was helpful

MARCH 10, 2012 AT 9:41 AM

How to get GraseHotspot to work on ubuntu 11.01 when the two network cards are not

con�gured well. MODIFIED

Make sure that you have disabled DHCP, Encryption, and Router feature in your AP or

router (if exist)

1. $ ifcon�g…. to see the interfaces.

2. $ sudo gedit /etc/chilli/con�gto see part of the coova chilli con�guration below….

# Local Network Con�gurations

HS_WANIF=${HS_WANIF:-eth1} # WAN Interface toward the Internet

HS_LANIF=${HS_LANIF:-eth0} # Subscriber Interface for client devices

3. Modify the interfaces to suite yours (i.e. HS_WANIF:-eth1 and HS_LANIF:-eth0)

4. now edit the network interfaces by ( # sudo gedit /etc/network/interfaces )

5. add the ff line… (iface eth1 inet manual ) where eth1 is the lan interface

6. Restart Chilli and the whole system. ( # sudo service chilli restart ) and ( #sudo reboot).

7. Upon restart access admin hotspot interface from http://10.1.0.1/grase/radmin

8. Clients will be automatically redirected.

Bismark


4 sur 24 24/09/2014 21



MARCH 12, 2012 AT 6:54 AM

It’s not recommended changing the /etc/chilli/con�g �le. The LAN and WAN interfaces

are setup semi-automatically and via the admin interface.

The WAN interface (which should be plugged in while installing the packages) will beautomatically detected based on the default gateway to the internet. So simply, if you

have internet access while installing, which you should, it should detect the WAN inter-

face correctly.

If you have more than 2 NIC’s, then the LAN interface won’t always be detected cor-

rectly, but can be selected in the Admin interface.

Thansk for giving assistance Bismark!

MARCH 30, 2012 AT 1:34 AM

i installed this software on ubuntu 11.10 and don’t work perfectly !!! i create an account in

the admin interface and whene i connect from client post the loin succeed but ther is no

internet connection…

is there any specials tips for install Grase ??

thx

APRIL 18, 2012 AT 2:15 PM

Hi Amma

I think you will need to post in the mailling list for more support on this.

Also include details like

Whether you installed as a Virtual machine or whether it is installed on a physical pc on

its own with ubuntu and whether there is 1 or 2 network cards. how the network cards

are setup

and possibly a diagram of how you have it setup

tim

Amma

Scrugio


5 sur 24 24/09/2014 21



But in short you will �nd

Network Eth0 = Internet

Network Eth1 = Local Network or switch.

There are some issues installing this package on top of a desktop client of ubuntu that

you need to be aware of and this gets a little explained in the hardware setup link at topright of page.

you can thank network manager for this

APRIL 7, 2012 AT 9:45 AM

Hi Tim,

how many co-current users can grasehotspot support?

APRIL 17, 2012 AT 9:18 AM

This is dependant mostly on the PC running the hotspot system.

If your running an old pc or slow system as ur server then con-current users will be

lower than that of a more up to date system.

Things to be aware of

Harddrive Speed – Access Speed

Ram Amount available via amount used

CPU processor Speed

and of course the network cards

1gb network interface cards will work better than 100mb network interface cards.

same applies to the rest of the network the server is implemented on with it being100mb network or 1gb network. and so on

APRIL 19, 2012 AT 6:51 PM

Boniface

Scrugio

Boniface


6 sur 24 24/09/2014 21



thanks scrugio

APRIL 23, 2012 AT 9:26 PM

is there anyway to limit the speed of each user?

APRIL 24, 2012 AT 1:40 AM

I have installed the server and it looks great.

but there is one thing i need help.

some of my users are supposed to get local(internal) IP addresses while others need to getlive (external) IP addresses.

how can i con�gure that?

APRIL 26, 2012 AT 10:35 PM

u may need to elaborate on this a bit more but from what i get

PC 1, 2, 3 need to be accessible from the wan

PC 4, 5, 6 dont need to be assesable from wan but have access to wan from the lan.

Could u explain the reason for this need ? is it the pc or user different, users on same pc

or same user on different pcs. more details to understand the issue would be good to ar-

rive at a solution.

it would also be suggestive to post via the maillist to get a wider community of grase

users who may also be able to help with this solution your looking for.

APRIL 27, 2012 AT 12:30 AM

If that’s the case, you could potentially use a router running DDWRT and set up

VLAN’s for speci�c ports to do what is needed there. I don’t know about them being

able to have a separate address, but using ACL’s on the different VLAN’s you could

Hanan

Hanan

Scrugio

Kyle


7 sur 24 24/09/2014 21



potentially have the speci�c computers access network resources that way and pre-

vent the other computers not have access to those resources.

Just a suggestion. I’m not 100% sure if that would work or not, but it might be worth a

shot.

APRIL 28, 2012 AT 5:01 PM

Yeah this would be one way but that would be entirely dependant on the network

setup that Hanan Needs. if its speci�c users and not pcs this would be irrelevant.

then again if Hanan wants PC to go thru the hotspot system but be assessable from

wan then the most likely way would be adding and editing routing and con�g �les to

be of use.

again this is entirely on what kind of network Hanan actually wants and Hanan will

need to be very very clear on speci�cally what is required.

for a server behind the hotspot for example. that users do need to use. u can setup

2 network cards on it and connect one card to the lan outside the hotspot. its ac-

cessable from wan but when u go to use the internet as a user it routes thru to the

hotspot. any further comment really requires Hanan to be alot more speci�c on

their network requirements.

JUNE 15, 2012 AT 6:46 PM

Hi everyone. Wanted to know whether grasehotspot can run on a more secure “https” im-

plimentation on the host computer.

And if it can, can somebody help me out on how to go about it?

JUNE 23, 2012 AT 5:03 AM

I got this below error on radmin login page | Ubuntu Server 12.04 amd64

Error

Scrugio

Boniface

Shamikh


8 sur 24 24/09/2014 21



An Error has occured. Please report the error to the administrator

There may be more information available to the administrator in the logs

Getting groups failed: MDB2 Error: no such table

JUNE 24, 2012 AT 10:42 AM

This means more information is available in your server logs. Please post support re-

quests to the mailing list.

JULY 18, 2012 AT 7:56 PM

Hi everyone. it has been a while since i asked this,Wanted to know whether grasehotspotcan run on a more secure “https” implementation on the host computer.

I am running a free community internet access and people are worried of their safety due

to use of an open network wireless access point. I want to retain open access but ensure

access of internet through grasehotspot is more secure than just using javascript aun-

thentication. So i want to impliment a more secure way open SSL certi�cate.

Tim can you can you help me out on how to go about it? Thanks

JULY 19, 2012 AT 1:13 PM

Please post support requests to the forum.

The short answer, you are asking for the wrong thing. The login system in use is secure

enough to protect a users password, as it uses CHAP authentication via Javascript. This

prevents a user snif�ng a password over the open access point, when logging in to the

portal. You can assure your users that their login details are safe.

HTTPS would secure it another step, but then you need to purchase an SSL certi�cate

that matches the domain name you are using, which requires more changes to the un-

derlying system (which will come in a future version). This still only secures the login

though.

tim

Boniface

tim


9 sur 24 24/09/2014 21



software is listening? for example port 8080

OCTOBER 21, 2012 AT 11:42 AM

IT Doesn’t WORK Properly

Firstly needs to be updated!!!!

Version in repo is 1.4 and tutorial says 1.3

Secondly, when all installed all pages turn in error unless you manually add .php to the end

of URL

Could you please advise on how to FIX?

Thank You

OCTOBER 23, 2012 AT 11:41 AM

Hey Marco.

Firstly, you’ll note that the �rst line above the “copy and paste” instructions says you

need to update for the latest version in the repo. It’s a pain to constantly be updating

this page and any other page that points to the link.

Secondly, the pages with .php is caused by this bug. http://bugs.debian.org/cgi-bin/bu-

greport.cgi?bug=670945

It seems they have chosen to not “�x” it how we’d like it �xed, and so in the next release

there’ll be a �x in the grase-conf-apache2 package (actually it’ll hit the repos before thenext proper release)

Tim

Marco

tim


22 sur 24 24/09/2014 21



OCTOBER 24, 2012 AT 7:43 AM

Thanks Tim

I did �gure it out in the end, and am happily testing your beautiful software package!

It’s never enough to say thank you for making such easy and resourceful application!

I would like to help this project in any way I can, so please let me know by email what

would be the best way to contribute!

I have read above that you had some issues with your computer, and hope that you now

are sorted!

If not, let me know if I can help!!!!!!!

Regards


Hello, any help please? after installing the grase software, for some reason it messes up

my network con�guration of the ubuntu when i try to restart the server, and i do not get

internet anymore on the server, also i was unable to access the setup page of the grase

hardware any help appreciated thanks.


Tim, Finally I got it working, it works great!, great software, Will like to know if there is away I can use Time limit per day /month instead of per minutes, is there an option where i

can change it?… Also, If a person can create their own account (I plan to use walled gar-

den) so they can pay via paypal, so to have the option of creating their own account while i

control the amount depending on how they pay. I know the php and html coding part to

create the portal, however, Don’t know if i need to change something on the code, or If i

Marco

Santiago

Santiago


23 sur 24 24/09/2014 21



can do it via database or options.. I did not see anything on the settings.

Please let me know, thanks

Santiago


Please see the mailing list

Pingback: Installing Grase Hotspot 3.7.7 in Ubuntu 11.10 « Be Open Be the Source

COMMENTS ARE CLOSED.

tim


new captive.pdf

Documents