FON Boards

AustinTX · Posted: Tue Aug 22, 2006 20:20 Post subject:

Whether you're using DD-WRT or fonware, "local users" are just a list of usernames and passwords stored in a plaintext file on the router which Chillispot checks first, and, if it fails, then goes on to try authentication with whichever RADIUS server it is configured to use (like radius01.fon.com).

In fonware, the "local users" setup is ripped out of the local interface, so you must set them up in the "lUser Zone" on their webpage and wait for your router to phone the mothership to recieve the list.

So, if you're using DD-WRT with the fon heartbeat, all you need their "lUser zone" for is setting up your HELLO! ( Rolling Eyes

) message (once billed as "a complete set of tools to customise your login page" Mad

)

Set up "local users" on the [Administration] [Hotspot] tab. You can set up as many as you need, instead of the 5 which fon wants to limit you to.

Tip: "local users" are NOT registered fonero account names, so don't register an email address with fon and try and set that up as a local user. Simply make up some usernames and passwords and type them in.

_________________
Well, as Revolutions go, this one has certainly been revolting! Wink

Linus || WRT54GL @ 228Mhz || DD-WRT v24 Beta (01/15/07) std
My background: ISP NOC Tech, DSL - ISDN - Dialup - Web Hosting
[ El Fon Blog ][ RSS Feed ][ austintx@elfonblog.cjb.net ]

commy · Fonero Joined: 22 Aug 2006 Posts: 4

Hi!

In case that was meant for me: I had registered the local users at the dd-wrt hotspot page, but had no luck logging in anyway. But as written before I have now found a setup, which is working quite well for me.

Matthias

Freddy · Posted: Tue Aug 22, 2006 21:31 Post subject:

ok, I investigated all this local user stuff,

chillispot dosn't support it normaly this was an hack by fon, and it seems like the idea of local users in dd-wrt is from FON time too.

dd-wrt stores local users in nvram variable 'fon_userlist'
and create a file called 'fonusers.local' ...

Due to in my latest firmware I use the original source from chillispot.org local users don't work. I'll try to merge dd-wrt's chillispot and chillispot.org's source...
_________________
status: Linus
setup: Debian Router » Linksys WRT54G + La Fonera
firmware: custom (based on dd-wrt) overclocked to 216 mhz and a modified Fonera firmware
link: 3Mbit down 512 kbit/s up
My Fonera Stuff
How to add a third signal to your Fonera

j_palito · Fonero Joined: 21 Jul 2006 Posts: 29

guys, as promised, if anyone is interested:
custom standar firmware v.23_sp1 based

Freddy, i would love if you could take a look at it.

BTW, is there any way to use this binaries on qemu under mips emulation? it would be great before crashing a router!

Freddy

j_palito · Fonero Joined: 21 Jul 2006 Posts: 29

rusti · Fonero Reg Joined: 25 Aug 2006 Posts: 2 Location: Bavaria

Hello! I am currently running DD-WRT v23 SP1 Final (05/16/06) std on my fon WRT-54GL. I managed to get it running with fon by running fon.cgi and making some adjustments (especially the radius servers) as described in thread 520. My WLAN users get an IP from Chillispot and are redirected to the fon login page. So far so good.

Since I registered my router when it first came with Fon basic 0.6.5 and ugraded to 0.6.6 later on, I did not yet get any complaints on the fon "my router" page. Still from reading through this entire thread I understood I have to implement a heartbeat script to make my router behave like a regular phone basic type. I want to do this, because I want to take part in the fon community but need more access to the router than is given by fon basic.

I have two questions before I proceed to make sure I don't f*** things up.

1) Can I simply reflash my router with Freddys custom firmware and re-apply the now working chilli settings to have a working heartbeat / update mechanism in addition to the already working FON access?

2) What would be the best way to go from there if I want to have a local WLAN client to have access to the internet without authentication (I don't mean the Local users or friends and family way) ?

The reason for question 2 is the following: I have an iPronto remote control. It uses wireless LAN for the build-in webbrowser and, more importantly, to update the EPG (electronic program guide) information nightly without user intervention. I have no means of telling it to handover any authentication information. So what I need would probably be some kind of MAC-Adress based identification.

From my reading I understand there is two ways to accomplish this. Either use a firmware supporting multiple SSIDs and having one serve Foneros and the other my iPronto. Problem here seems to be, that the multi SSID Firmware is not yet close to stable. Or have a local radius Server running which authenticates first and hands over to the Fon radius if Foneros try to access.

Is this correct? Is there another more simple way? The Phone router is "behind" another DD-WRT which is connected to the Internet and serves the rest of my LAN and WLAN clients. So I dont care if clients on the phone router can see each other or whatever is on the Fon Router net (either LAN or WLAN). I don't want them to have access to what is connected to my main internet router but I guess this is a different story treated in other threads so please don't flame me I will keep on reading. The reason why I gave the security information is to ask if you see a simpler third possibility how I can give the iPronto and the Foneros proper access given the above setup.

So it's way more than two questions Smile

but I hope you can help me out anyway.

Thx,
Rusti

Before you ask: I can not simply let the iPronto access the internet via my other router because it supports WEP only and I want to run my main router with WPA encryption.

Freddy · Posted: Fri Aug 25, 2006 11:14 Post subject:

1) yes
2) you're right, or a third way: modify chilli source to allow mac auth against local users Wink

_________________
status: Linus
setup: Debian Router » Linksys WRT54G + La Fonera
firmware: custom (based on dd-wrt) overclocked to 216 mhz and a modified Fonera firmware
link: 3Mbit down 512 kbit/s up
My Fonera Stuff
How to add a third signal to your Fonera

rusti · Fonero Reg Joined: 25 Aug 2006 Posts: 2 Location: Bavaria

Thx for your reply Freddy.

I flashed your Firmware and applied fon.cgi. Made some manual changes and ... Chillispot is not running. When I tried to start it manually it complained that:

chillispot[515]: chilli.c: 598: Invalid uamallowed domain or address: www.dd-wrt.com.de!

I fixed the URL in NVRAM and made a reboot. Voilà, chilli running. Just thought you might want to know.

Now to the next step. Enabling the iPronto. I thought maybe there is a third way. If the iPronto fetches the EPG Data from one specific host, can't I simply put this host into the uamallowed line? Or will this be overwritten by fon? I would have to log in to use the web browser but that is not such a big problem. But the unattended fetching of EPG Data should work like this, shouldn't it?

Anyway: Thanks BS / Freddy for this great Firmware!

Freddy · Posted: Sat Aug 26, 2006 14:35 Post subject:

just try to add the host to uamallowed , don't know
_________________
status: Linus
setup: Debian Router » Linksys WRT54G + La Fonera
firmware: custom (based on dd-wrt) overclocked to 216 mhz and a modified Fonera firmware
link: 3Mbit down 512 kbit/s up
My Fonera Stuff
How to add a third signal to your Fonera

Slay · Fonero Joined: 31 Aug 2006 Posts: 4

Hello , i'm new here.
I just installed the Freddy's firmware yesterday.
Today i see in my Syslog server :

2006-08-31 14:21:05 User.Notice 192.168.1.1 root: sent: mode='cron' wlmac='00:xx:xx:xx:xx:xx' mac='00:xx:xx:xx:xx:xx' fonrev='1' firmware='0.6.6'
2006-08-31 14:21:05 User.Notice 192.168.1.1 root: Something is different in /tmp/.thinclient.sh:
2006-08-31 14:21:05 User.Notice 192.168.1.1 root: cd /tmp

[..] // wget to download a few package

2006-08-31 14:21:05 User.Notice 192.168.1.1 root: nvram set fon_revision=3
2006-08-31 14:21:05 User.Notice 192.168.1.1 root: nvram commit
2006-08-31 14:21:05 User.Notice 192.168.1.1 root: ^Iecho 3 > /etc/fon_revision
2006-08-31 14:21:05 User.Notice 192.168.1.1 root: fi
2006-08-31 14:21:05 User.Notice 192.168.1.1 root: rm -f /tmp/.thinclient.sh
2006-08-31 14:21:05 User.Notice 192.168.1.1 root: exit

Is it normal ?
It seems that the version change from 1 to 3, no ? ( new thinclient.sh )

AustinTX · Posted: Thu Aug 31, 2006 18:03 Post subject:

Freddy · Posted: Thu Aug 31, 2006 18:17 Post subject:

yes, some files were updated, you can change FONREV to "3", will solve it. I'll fix the firmware soon
_________________
status: Linus
setup: Debian Router » Linksys WRT54G + La Fonera
firmware: custom (based on dd-wrt) overclocked to 216 mhz and a modified Fonera firmware
link: 3Mbit down 512 kbit/s up
My Fonera Stuff
How to add a third signal to your Fonera

dema · Posted: Thu Aug 31, 2006 18:20 Post subject:

swifty99 · Fonero Joined: 01 Sep 2006 Posts: 3

Cool stuff.

I have come quite far, thanks to the loads of information.

One thing: On Freddys Custom FW I can't open a telnet session anymore. Any hints?

swifty

AustinTX · Posted: Fri Sep 01, 2006 18:23 Post subject:

Freddy · Posted: Fri Sep 01, 2006 18:26 Post subject:

I removed telnet, use ssh
_________________
status: Linus
setup: Debian Router » Linksys WRT54G + La Fonera
firmware: custom (based on dd-wrt) overclocked to 216 mhz and a modified Fonera firmware
link: 3Mbit down 512 kbit/s up
My Fonera Stuff
How to add a third signal to your Fonera

swifty99 · Fonero Joined: 01 Sep 2006 Posts: 3

OK, thanks.

For dummies: A link/guide/howto/program?

I tried putty (SSH Port 22), but it refuses the connection. Webgui and Ping are fine.

Slay · Fonero Joined: 31 Aug 2006 Posts: 4

chenu · Fonero Joined: 02 Sep 2006 Posts: 5

Hey everyone, I'm probably going to sound really dumb here but I'll go on anyway.

I purchased a router from fon a couple months ago and once I recieved it, I flashed it with DD-WRT and spent a couple hours getting fon to work with it.

I found the mysterious fon.cgi and after that configuration was easy. Now, when I connect with wlan, I'm prompted to login and it shows that I logged in on the who's online list. Also, my lan clients are working fine with logging in.

Now, I've been trying to follow this thread and from skimming it, my understanding is that you have found a way for us to not have to authenticate local wlan connections. This would be great since I've got a few non tech savvy individuals in the family who have blamed me many days due to the inability to go online.

So, could someone let me know if my analysis is correct and if so how would I go about setting this up. If not, could someone explain to me.