2013-10-31 - Re: [GRASE-Hotspot] group blocking unblocking?

Header Data

From: Bob Hunt <bo***2@gmail.com>
Message Hash: 70fdfb8114d4653f7495cea0764a97623693d5983255ffb5d2a6379716f16fbe
Message ID: <CAA-jMMRJqGhvkmBopWsbg7nL2kH3AaUCAx0U+0YRuND_zyhpA@mail.gmail.com>
Reply To: _N/A
UTC Datetime: 2013-10-31 22:03:24 UTC
Raw Date: Fri, 01 Nov 2013 16:03:24 +1100

Raw message 

Hi Daz,

Oh, I see your situation now. It looks like your real problem is with your
organization's policy. It seems to defeat the purpose of having a captive
portal.

If you can't change that policy and its only a few offending students to
deal with, you could ssh into the Grase server and, once you find out  the
relevent mac addresses, entering the following command will logout the
listed devices every 10 seconds until you hit ctll+C in the console.

while :; do echo 'Hit CTRL+C to stop blocking 00-1F-29-XX-XX-XX and
00-1F-30-XX-XX-XX ';chilli_query logout 00-1F-29-XX-XX-XX  ;chilli_query
logout 00-1F-30-XX-XX-XX; sleep 10; done

Regards,

Bob

From: "Wood, Darren" <Da***d@theherbert.org>

> Subject: [GRASE-Hotspot] group blocking unblocking?
> To: "'gr***t@lists.sourceforge.net'"
>         <gr***t@lists.sourceforge.net>
> Message-ID:
>         <
> mailman.300799.1383261080.12996.gr***t@lists.sourceforge.net>
> Content-Type: text/plain; charset="us-ascii"
>
> Thanks for all the info and help guys.
>
>
> To give all the users individual logins would be great but one problem I
> have at the moment is the organisation want us to use one username and one
> password for the general public to access the internet (we are an art
> gallery). This is so we do not have to hand out usernames and passwords and
> do tech suport and so on. The problem I am having is some of my student
>  who only come here for training have got hold of this login information
> and have been going onto the internet instead of doing their work. This is
> why I was trying to block and unblock access by using MAC addresses as this
> would only affect my training room laptops. I guess I need to find a better
> or easier way to do this.
>
> What is the procedure to restart coova chilli remotely from admin and
> without rebooting the grase machine?
> When coova chilli is restarting will this be a long process or very quick
> and will it delay other users from internet access as it restarts?
>
>
> Daz
>
> >As someone already stated elsewhere, if they are already logged on, there
> >is currently no easy way to "kick them off" except to restart coova chilli
> >after you make changes to prevent them logging in.
>
> >In reality, the computer accounts are all currently in 1 group. You can in
> >theory create computer accounts in any group by using a username of the
> >correct format, and the password as the "MAC Auth Password" in coova
> chilli
> >settings page. However, computer accounts only login at DHCP time, so this
> >probably doesn't help you.
>
> >I think in this situation you need to give all the users individual
> logins,
> >and in the groups you want for disconnect/reconnect. You can then edit the
> >group to have a login time of 'Never' that prevents them from logging in.
> >Then when you want them to login, remove the login time for that group,
> and
> >they'll be able to login again. With a simple restart of the chilli
> process
> >each time, you'll kick all users off and force them to relogin.
>
> >As for friendly display of MAC address. I hear you. I currently use the
> >comment field for this, but maybe we can look into that in the future.
>
> >Tim
>
>
>
> This e-mail and any files transmitted with it are confidential and are
> intended solely for the use of the addressee. If you have received this
> e-mail in error, you are requested to contact the sender immediately, and
> not to disclose or make use of this information.
>
> All e-mails are monitored by Coventry City Council IT Security, using Star
> Filtering Services.
>
> The views contained in this e-mail are those of the author and not
> necessarily those of Coventry City Council.
> ______________________________________________________________________
> This e-mail has been scanned for all viruses by Star Internet. The
>  service is powered by MessageLabs.
>
>
>
> ------------------------------
>
> Message: 4
> Date: Thu, 31 Oct 2013 08:55:35 +1000
> From: "Peter Cummins" <pe***r@computingeverywhere.com.au>
> Subject: Re: [GRASE-Hotspot] Print User voucher to Docket Printer.
> To: "'GRASE Hotspot General Discussions'"
>         <gr***t@lists.sourceforge.net>
> Message-ID:
>         <009f01ced5c3$259cb8d0$70d62a70$@computingeverywhere.com.au>
> Content-Type: text/plain; charset="us-ascii"
>
> I would be happy to contribute financially to this (as I don't have the
> experience to do the needed coding or time to learn it).
>
> Even if the ticket was created as a (custom sized) pdf that could be
> printed
> to a Windows printer of our own choosing. We would of course choose the
> docket printer.
>
>
>
>                 Peter
>
>
>
> From: Timothy White [mailto:ti***8@gmail.com]
> Sent: Wednesday, 30 October 2013 3:25 PM
> To: GRASE Hotspot General Discussions
> Subject: Re: [GRASE-Hotspot] Print User voucher to Docket Printer.
>
>
>
> Nothing stopping you, however it's very hard to code and support this due
> to
> the variety of printers.
>
>
>
> Patches welcome.
>
>
>
> Tim
>
>
>
> On Thu, Aug 8, 2013 at 11:03 PM, Derek Mitchell
> <de***k@masterlinkcomputers.com.au> wrote:
>
> Would like to print user vouchers to docket printer. Is this possible?
>
>
>
> Regards
>
> Derek
>
>
>
>
>
> Sent from my GT-I9305T on the Telstra 4G network
>
>
>
> ----------------------------------------------------------------------------
> --
> Get 100% visibility into Java/.NET code with AppDynamics Lite!
> It's a free troubleshooting tool designed for production.
> Get down to code-level detail for bottlenecks, with <2% overhead.
> Download for free and get started troubleshooting in minutes.
> http://pubads.g.doubleclick.net/gampad/clk?id=48897031
> <
> http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk
> > &iu=/4140/ostg.clktrk
> _______________________________________________
> Grase-hotspot mailing list
> Gr***t@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/grase-hotspot
>
>
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
>
> ------------------------------
>
> Message: 5
> Date: Fri, 1 Nov 2013 10:11:10 +1100
> From: Bob Hunt <bo***2@gmail.com>
> Subject: [GRASE-Hotspot] group blocking unblocking?
> To: GRASE Hotspot General Discussions
>         <gr***t@lists.sourceforge.net>,  Da***d@theherbert.org
> Message-ID:
>         <
> CA***A@mail.gmail.com>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Hi Daz,
>
> I think I can see how to do (almost) what you want with your classes using
> Grase;
>
>    - delete or lock any computer accounts already created for your classes
>    - create a group with unlimited data and bandwidth and with simultaneous
>    logins enabled
>    - create a new user in this group with a unique usename/password for
>    everyone in the current class to use and set the time limit to what you
>    want to allow the class
>    - Tell the class the username/password so they can all login using the
>    same credentials and do their work for the allocated time
>    - Later, when you are ready, you can edit the user to add more time
>
> It is also possible to disconnect and manage online hotspot users, on a per
> device basis, from the command line via ssh with the 'chilli_query' command
> (see http://coova.org/CoovaChilli/chilli_query),.
>
> 'chilli_query list' shows all devices which have had ip addressed issued by
> the hotspot, including those which are not yet authorized.
>
> 'chilli_query authorize' logs-in an  ip address (discovered with the
> previous 'chilli_query list' command), or change the session parameters for
> already athorized devices.
>
> 'chilli_query logout' logs-out a  device based on its mac address (also
> discovered with the 'chilli_query list' command).
>
> A bit of scripting can help make tings clearer. For example, using awk, the
> following command lists the mac address ($1), IP address ($2) and username
> ($6) of currently authorized ($5 equals 1) users;
> chilli_query list | awk ' $5 ~/1/   { print " MAC: ", $1, " IP: ", $2,"
> Uname: ", $6 } '
>
> With this info you can then (for example) disconnect individual devices
> with  'chilli_query logout'.
>
> Regards,
>
> Bob
>
>
>
> > 1) I would like to stop or filter out a  group of mac addresses from
> > getting online but be able to give them access again when I want them to
> do
> > research.
> >
> > I would like to be able to turn their internet connection on and off from
> > the admin interface?
> >
> >
> >
> > 2) Also is there a way to give mac addresses a friendly name that can be
> > seen easily from the admin interface page,
> >
> > I always find if hard to work out who is who just by the mac address?
> >
> >
> >
> > On 23.10.2013 14:28, Wood, Darren wrote:
> >
> > >
> >
> > > Is there away to send up a group for my students (using their ip
> >
> > > address) that I can setup and be able to turn their internet
> >
> > > connection on and off from the admin interface?
> >
> > >
> >
> > > Thanks
> >
> > >
> >
> > > Daz Wood
> >
> >
> --
> Bob Hunt
> 20 Clarke Street
> Wyndham
> NSW 2550
> Australia
>
> Phone/fax 61 (0)2 64942030
> -------------- next part --------------
> An HTML attachment was scrubbed...
>
> ------------------------------
>
>
> ------------------------------------------------------------------------------
> Android is increasing in popularity, but the open development platform that
> developers love is also attractive to malware creators. Download this white
> paper to learn more about secure code signing practices that can help keep
> Android apps secure.
> http://pubads.g.doubleclick.net/gampad/clk?id=65839951&iu=/4140/ostg.clktrk
>
> ------------------------------
>
> _______________________________________________
> Grase-hotspot mailing list
> Gr***t@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/grase-hotspot
>
>
> End of Grase-hotspot Digest, Vol 29, Issue 8
> ********************************************
>



-- 
Bob Hunt
20 Clarke Street
Wyndham
NSW 2550
Australia

Phone/fax 61 (0)2 64942030

Thread