next »

[aurelien21]

hello my dear
Pls i want to have your help. but i want to set authentification in pfsense by account. but i have one PC with many user. this user have ich other one account. Now, went one user authentificate, another user is already authenficate. Pls how can i configure my captive portail to resolve this problem.

Pls help me to configure this trouble.

[EOC2611P]

Hello my bear 

I  admit i also have many issue with the english language, but after reading this, it gave me some sort of relief in considering that isn't so bad after all...

So, let's start.

My main problem here, is understanding exactly what are you trying to tell us.
After 3 looks at it, i have the impression that the current problem you are facing, is 2 users (presumably using vouchers), being able to get access to the www by using the same voucher at the same time, so, multiple users for just 1 voucher.
Is this the problem you are having now?

[cmb]

Where multiple users come from the same IP and MAC address, there is no way to differentiate them with any captive portal solution in existence. A HTTP proxy with authentication is the usual solution there.

[EOC2611P]

I just re-read it again, this part might be telling something different "Now, went one user authentificate, another user is already authenficate", is it maybe a problem with a user leaving this particular computer, without logging off first, so the new person going to use this machine, find a user already logged in

[Alan87i]

I just re-read it again, this part might be telling something different "Now, went one user authentificate, another user is already authenficate", is it maybe a problem with a user leaving this particular computer, without logging off first, so the new person going to use this machine, find a user already logged in

Would re auth every minute work for this problem. If your correct.

[Nachtfalke]

Re-Auth would not work in this scenario.

What you can try is to enable the "Logout Popup" from Captive Portal. After a user has logged in this popup window will be displayed. after the user finished brwosing the we he has to click "logout".

But this needs disciplin of the user to first logout - and a popup blocker which is configured to allow this popup to be displayed.


The other possibility is like cmb wrote:
Use squid package and use squid in non-transparent mode. Then every time someone opens the brwoser and he will be asked for username/password. But this needs some proxy configuration on the clients brwoser.


aurelien21 :
perhaps you could explain us what you want to realize?
Why are there different people on the same computer?
Why should different user login on the same machine with different username/password ?
Is this a computer in an internet cafe where peoplehave to pay for internet access - then you should perhaps think about the voucher option on CP.

[cmb]

I suspect the OP is referring to something like a MS Terminal Server where dozens or more users can be logged into the same machine simultaneously.