I guess what I am after is managing users and access remotely via a website that's not the Opnsense gui. Captive portal / Guest network Hotel scenario seems ideal but how do I control the users via a backend process instead of through the gui? configctl?
The scenario - user registers via my website and requests a certain amount of time. website passes credentials to a server that then ties in with the captive portal. When the user connects to my network via wifi (or hardwired) a portal login pops up. Using their user/password they get access. System keeps track of their usage and when time limits up they get logged out and their credentials no longer work until they request more time.. the key here is the website (or more likely an intermediate RESTful server) handles the configuration/setup so I don't have to deal with each user and manually configure/update each time.
Does this make sense?
My first thought was using a separate FreeRadius server with a SQL backend - can add/remove/read records directly but not sure how that ties in with the captive portal.
Another thought was some sort of ssh hook into opnsense via configctl - managing users/vouchers as needed.
The scenario - user registers via my website and requests a certain amount of time. website passes credentials to a server that then ties in with the captive portal. When the user connects to my network via wifi (or hardwired) a portal login pops up. Using their user/password they get access. System keeps track of their usage and when time limits up they get logged out and their credentials no longer work until they request more time.. the key here is the website (or more likely an intermediate RESTful server) handles the configuration/setup so I don't have to deal with each user and manually configure/update each time.
Does this make sense?
My first thought was using a separate FreeRadius server with a SQL backend - can add/remove/read records directly but not sure how that ties in with the captive portal.
Another thought was some sort of ssh hook into opnsense via configctl - managing users/vouchers as needed.
"