cancel
Showing results for 
Search instead for 
Did you mean: 

Virtual Smart Zone+Captive Portal(apache+php)+ Client unauthorized

jaime_guzman_78
New Contributor
Hi!

We are developing a captive with php and apache as a web server, which sends a form mendiante the following parameters:

POST action="http://scg.ruckuswireless.com:9997/SubscriberPortal/login" nofollow" target="_blank">popup_logout_window();">
hidden" id="RequestType" name="RequestType" value='Login' />
hidden" name="uip" value='ENCb2579826807a6430859d3caa62f5c979' /> hidden" name="client_mac" value='ENC901f87406273a266dc71bc916a8a8fb9bb6673892a41751e' /> hidden" name="wlan" value='5' /> hidden" name="zone" value='' /> hidden" name="thirdPartyZone" value='' /> hidden" name="proxy" value='0' /> hidden" name="url" value='http://reforma.com.mx/' /> hidden" name="GuestUser" value='0' /> hidden" name="mac" value='f8:e7:1e:03:32:60' /> hidden" name="nbiIP" value='xxx.xxx.xxx.xxx' /> text" id="UE-Username" name="UE-Username" placeholder="User Name" required> password" id="UE-Password" name="UE-Password" placeholder="Password" required> submit" value="Accept Terms & Login">

When the form is submitted bids us to "Terms and Conditions" to accept and retype user name and password.

Reviewing the log captiveportal VSZe see a JSON start request is generated password:

2016-05-02 17:00:42,763 SubscriberPortal[sp-exec-119] DEBUG c.r.w.s.w.AccessController - requestType is Login

2016-05-02 17:00:42,764 SubscriberPortal[sp-exec-119] DEBUG c.r.w.s.w.AccessController - cookies[i].getName():OneTimeCookie

2016-05-02 17:00:42,764 SubscriberPortal[sp-exec-119] DEBUG c.r.w.s.w.AccessController - cookies[i].getValue():-2135127451

c.r.w.s.w.AccessController - Found OneTimeCookie cookie, value: 232 070 38405/03/2016 00: 04: 33.438 SubscriberPortal [sp-exec-134] DEBUG c.r.w.s.w.AccessController - loginFromFormParam: "not value"

03/05/2016 00: 04: 33.438 SubscriberPortal [sp-exec-134] DEBUG c.r.w.s.w.AccessController - cookie so different from param Create JSON request Status

When the request is made of the internal captive portal if the parameter "loginFromFormParam" is generated in the parameters that are sent.

05/02/2016 17: 00: 42.764 SubscriberPortal [sp-exec-119] DEBUG c.r.w.s.w.AccessController - Found OneTimeCookie cookie value: -2135127451
02/05/2016 17: 00: 42.765 SubscriberPortal [sp-exec-119] DEBUG c.r.w.s.w.AccessController - loginFromFormParam: -2135127451
02/05/2016 17: 00: 42.765 SubscriberPortal [sp-exec-119] DEBUG c.r.w.s.w.AccessController - Cookie is not exist Found the same cookie or parameter so as JSON Login Create request

is it possible to obtain the value of that cookie and how or if the problem somewhat different?

Regards,
0 REPLIES 0