Sensei using Captive Portal to track user names

[mcmahoc]

Hi,

Is there a guide for configuring Captive Portal for use with Sensei? Currently all traffic is dedicated to anonymous users. I don't have the AD / LDAP integration feature on my subscription and it would be great to know who is doing what.

Not sure what other details anyone would need if they are able to assist other than:
OPNSense v20.7.2
Sensei v1.6
Currently monitoring LAN network

One other question: Should I look at adding my WAN interface to Sensei?


Thanks,
Chris

[mb]

Hi Chris,

No need for any configuration. If you've enabled Captive Portal; and started authenticating users; Sensei should be able to pick up user information automatically.

For the WAN interface, we do not recommend that, since Sensei is better meant for inner-facing interfaces like LAN. We suggest you use Suricata for the WAN interface.

[mcmahoc]

Hi,

I think I'm missing something fairly fundamental about Captive Portal configuration (apologies for being a bit dim). I have enabled it Captive Portal for one my interfaces that Sensei is monitoring, and I assume it's working because I had to "log in" to get access to the internet from the clients connected to that network zone. I know Sensei is monitoring the interface because I get the sensei block page when visiting a restricted page.

However, Sensei still only shows anonymous egress / ingress.

Captive Portal config screenshot attached.

[mb]

That's not expected. As soon as you get Captive Portal working, Sensei should be able to pick user information.

Let's have a closer look. Can you send a PR through the "Report Bug" menu (upper right corner of the screen)?

[mcmahoc]

Hi mb,

Sent a bug report.

Thanks

[A_V]

Hi together,

I know Im a bit late, but I guess Im facing the same problem right now too.

Im logged in into the Captive Portal, but in Zenarmor Reports there are no usernames.

Is there a public solution for this Problem?

Thanks
Adrian

[sy]

Hi,

Normally, it's working as expected. Can you share a bug report to look into closer?

[A_V]

Hi,

Ive created a Bug Report.

Thanks

[dant98]

Is there a link to the bug report for tracking?  I'm having the same issue it seems.  Completely new opnsense w. a licensed copy of zenarmor.  I also see all the traffic by IP, but all egress users are anonymous even though the opnsense captive portal is tracking sessions.

[sy]

Hi,

This is solved with 1.11 that will be published this week.