<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
--></style>
</head>
<body class='hmmessage'>
I would think RADIUS would do..<BR><BR>Joseph Wennechuk<BR>________________<BR><BR><BR><BR> <BR>
<HR id=stopSpelling>
Date: Tue, 23 Mar 2010 20:16:00 -0700<BR>From: jkerr0102@rogers.com<BR>To: kwlug-disc@kwlug.org<BR>Subject: Re: [kwlug-disc] OT? Running Wifi hotspots sanely<BR><BR>
<STYLE>
.ExternalClass DIV
{;}
</STYLE>
<DIV style="FONT-FAMILY: times new roman,new york,times,serif; FONT-SIZE: 12pt">Hi gang<BR><BR>OK I can't program worth a hoot but .....<BR><BR>Could an OpenWRT program be written modified to use / read the same user database as a CMS like drupal?<BR>Or yank out of Drupal the code that handles the registration and e-mailing of a password and put it <BR>into an openWRT program. this would be a way of handling user registration.<BR><BR>Just thinking.<BR><BR>John<BR><BR><BR>
<DIV> </DIV>------------------------------------------------------------------------------------------------------------------------<BR><SPAN class=ecxintro>We act as though comfort and luxury<BR>were the chief requirements of life,<BR>when all that we need to make us happy<BR>is something to be enthusiastic about.<BR>—Einstein<BR></SPAN>------------------------------------------------------------------------------------------------------------------------<BR>==================================<BR>John Eddie Kerr | Guelph, Ontario <BR>==================================
<DIV><BR></DIV>
<DIV style="FONT-FAMILY: times new roman,new york,times,serif; FONT-SIZE: 12pt"><BR>
<DIV style="FONT-FAMILY: arial,helvetica,sans-serif; FONT-SIZE: 13px"><FONT size=2 face=Tahoma>
<HR SIZE=1>
<B><SPAN style="FONT-WEIGHT: bold">From:</SPAN></B> Paul Nijjar <paul_nijjar@yahoo.ca><BR><B><SPAN style="FONT-WEIGHT: bold">To:</SPAN></B> kwlug-disc@kwlug.org<BR><B><SPAN style="FONT-WEIGHT: bold">Sent:</SPAN></B> Mon, March 22, 2010 6:34:04 PM<BR><B><SPAN style="FONT-WEIGHT: bold">Subject:</SPAN></B> [kwlug-disc] OT? Running Wifi hotspots sanely<BR></FONT><BR>I am trying to figure out sensible settings for a wifi hotspot, and I<BR>am having trouble finding out what the best practices are. <BR><BR>Technologically I want to use a router (pfSense) to handle DHCP and<BR>so-called "captive portal" functionality that makes you click through<BR>a page to access the Internet. I also want to have some OpenWRT<BR>routers plugged in that actually provide access to the network. I<BR>think I have some of this figured out, but I am stumbling over how to<BR>run this hotspot sanely: <BR><BR>- Do I want to have any kind of encryption (WPA/WPA2) on the wireless<BR> routers? Or should I be leaving the access unencrypted and have the<BR> portal page do all the authentication?<BR><BR>- Do I want to bother with usernames and passwords for the hotspot?<BR> For now I don't think we are bothering to charge for Internet<BR> access. We still could have usernames and passwords for the day, but I<BR> don't know whether this is worth the effort.<BR><BR>- What kind of privacy concerns do I have to worry about? I am running<BR> quite a bit of logging for the rest of our users -- with the<BR> firewall logs that already exist I can identify a computer by MAC<BR> address and go so far as to see what websites are being accessed. <BR> As a user I guess I feel a little uneasy about this. As an IT <BR> admin I want to know what is happening on my network so I can<BR> stop/troubleshoot problems. I don't know whether there are rules <BR> prohibiting me from logging certain things, and/or what kind of <BR> forewarning I need to provide. (I would like to provide some heads<BR> up warning that we do record activity on the network.) <BR><BR>- Because I am a terrible paranoid person, so far I am only allowing<BR> traffic out on DNS and HTTP/HTTPS ports (which I understand may not<BR> be DNS/HTTP/HTTPS traffic exclusively). Is this standard practice? Do<BR> public access locations generally permit traffic more liberally? <BR><BR>- What else am I not considering? <BR><BR>If you have answers to these questions or pointers to best practice<BR>documents I would be grateful. This is new territory for me, and<BR>wireless makes me squeamish at the best of times. <BR><BR><BR>- Paul<BR><BR>-- <BR><A href="http://pnijjar.freeshell.org/">http://pnijjar.freeshell.org</A><BR><BR><BR>_______________________________________________<BR>kwlug-disc_kwlug.org mailing list<BR><A href="mailto:kwlug-disc_kwlug.org@kwlug.org">kwlug-disc_kwlug.org@kwlug.org</A><BR><A href="http://astoria.ccjclearline.com/mailman/listinfo/kwlug-disc_kwlug.org">http://astoria.ccjclearline.com/mailman/listinfo/kwlug-disc_kwlug.org</A><BR></DIV></DIV></DIV> </body>
</html>