Messages

Thank you so much!

That did it.

Thank you for helping out the newb.

When I get https://10.15.1.227/api/captiveportal/settings/getzone/2dd820e7-0995-4174-8546-6fa66fb0bf5f

I get a big json object. If I post it right back to /setzone, no alteration, I get the error:

Code Select Expand

{"errorMessage":"Error at /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/BaseField.php:700 - strtolower() expects parameter 1 to be string, array given (errno=2)","errorTitle":"An API exception occured"}

I can pick out certain things and change successfully, like enable / disable, or description.

The relevant portion I would like to post is

Code Select Expand

{"zone":{"allowedMACAddresses":{"00:11:22:33:44:55":{"value":"00:11:22:33:44:55","selected":1},"aa:bb:cc:dd:ee:ff":{"value":"aa:bb:cc:dd:ee:ff","selected":1}}}}

but this generates the same error.

I can send

Code Select Expand

{"zone":{"allowedMACAddresses":"aa:bb:cc:dd:ee:ff"}}

Which works, but, expectedly, this replaces any MAC addresses on the list.

Thanks

Thanks. I don't know why I didn't think to examine the result of a get first. Exploring it now.

b.

Thank you. I am aware of that documentation, but it is rather sparse.

The only endpoint that makes sense to me for this purpose would be api/captiveportal/settings/setzone/ (I have acquired the uuid with searchzones).

I know that I should be including a JSON object in the body of the request, but there's nothing to indicate what it should contain. I've tried what seemed meaningful values for this and other endpoints, but the only response I ever receive is {"result":"failed"}

Is there more comprehensive documentation for the API, or somewhere that would give me an idea of what my JSON object should contain?

Thanks

Can anyone point me to the endpoints for getting, adding, and deleting MAC address to the CP white list via the API?

Thanks

Awesome! That did it. Here's the code that works for any interested...

Code Select Expand

require 'net/http'
require 'openssl'
require 'json'

uri = URI('https://10.15.1.227/api/captiveportal/service/searchtemplates')

request = Net::HTTP::Get.new(uri)

request.basic_auth '123', 'abc'

result = Net::HTTP.start(uri.hostname, uri.port, :use_ssl => true, :verify_mode => OpenSSL::SSL::VERIFY_NONE) do |http|
http.request(request)
end

puts result.body

I've tried with and without http.verify_mode = OpenSSL::SSL::VERIFY_NONE with the same result.

Thanks

I am running OPNsense 19.1.1 and attempting to access the API via Ruby

This code snippet:

Code Select Expand

require 'net/http'
require 'openssl'
require 'json'

uri = URI('https://10.15.1.227/api/captiveportal/service/searchtemplates')

request = Net::HTTP::Get.new(uri)

request.basic_auth '123', 'abc'

result = Net::HTTP.start(uri.hostname, uri.port, :use_ssl => true) do |http|
http.verify_mode = OpenSSL::SSL::VERIFY_NONE
http.request(request)
end

puts result.body

produces the error:

Code Select Expand

SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed

I have confirmed that the key and secret are correct.

Am I doing it right?

Thanks

That may work...

Thank you for your assistance.

Thank you.

What I would like to happen is for OPNsense to check my RADIUS server with the MAC address of the device.

If not authenticated, redirect to our portal for sign up / activation.

I can use CP to redirect to our portal, but how do I tell OPNsense to check our RADIUS server first before invoking the CP.

Thanks,

Brian

Thanks. I've gotten this far. If I use the default captive portal, I can key in the MAC address in the username field and it authenticates, but I do not want users to see this screen if their device has previously been authenticated.

Ideally, an authenticated device gets immediate Internet access. They should never see the captive portal. If it is not authenticated, they are redirected to my website where they can purchase service or authenticate with an activation code provided when they purchased service. This adds their MAC address to the RADIUS server.

Thanks,

Brian

I am running OPNsense 18.7.10-amd64.

I would like to authenticate users with MAC address via RADIUS or roll to a capture page if not authenticated.

Can this be done with OPNsense? Can someone point me in the right direction?

Thanks,

Brian