1 Topic by astatine

(5 replies, posted in Chillispot Configuration)

as the subject,if i have hundreds chillispot rooters connecting my chilli server,how can i manage them?like to detect which daemon is online,which is down,how many online users and manage them,etc....

Go to forum: Chillispot Configuration

2 Reply by astatine

(1 replies, posted in Radius Configuration)

Why should I use CHAP-Challenge and CHAP-Password?
By default chilli uses CHAP-Challenge and CHAP-Password. The advantage is that the actual passwords will only be known to the web server and the "home" radius server. Neither chilli nor any radius proxy servers get to know the actual password.

CHAP-Challenge and CHAP-Password authentication is generally vulnerable to dictionary attacks. To protect against dictionary attacks on the air interface you should uncomment the following line in the file /var/www/cgi-bin/hotspotlogin.cgi:

$uamsecret = "ht2eb8ej6s4et3rg1ulp";

You should set the secret to something only you know, and pass the same secret to chilli in the file /etc/chilli.conf:

uamsecret ht2eb8ej6s4et3rg1ulp

The uamsecret parameter is used to encrypt the challenge and response when it is transferred from the web server to chilli.



see that above,you should set the same secret in the loginpage,dd-wrt and chilli server

Go to forum: Radius Configuration