OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • Zenarmor (Sensei) »
  • Roadmap : Captive Portal Auto-Login for Active Directory authentications
« previous next »
  • Print
Pages: [1]

Author Topic: Roadmap : Captive Portal Auto-Login for Active Directory authentications  (Read 4313 times)

elcocoloco

  • Newbie
  • *
  • Posts: 24
  • Karma: 2
    • View Profile
Roadmap : Captive Portal Auto-Login for Active Directory authentications
« on: October 26, 2020, 03:40:02 pm »
Hi,

Any timeframe when we can expect this feature? Able to alpha / beta test if necessary, also volunteering for documentation on that part
Logged

mb

  • Hero Member
  • *****
  • Posts: 941
  • Karma: 99
    • View Profile
    • Sunny Valley Networks
Re: Roadmap : Captive Portal Auto-Login for Active Directory authentications
« Reply #1 on: October 27, 2020, 12:47:56 am »
Hi @elcocoloco, most probably early Q1/2021. Thanks for that!. We'll be happy to send you the first beta for your review and comments ;)
Logged

elcocoloco

  • Newbie
  • *
  • Posts: 24
  • Karma: 2
    • View Profile
Re: Roadmap : Captive Portal Auto-Login for Active Directory authentications
« Reply #2 on: October 27, 2020, 12:38:10 pm »
Thanx MB :-) For now, let me know if I understand correctly

Is the following possible right now?

'default' users (as in : NOT logged in via Captive Portal (AD)) will get the default policy within Sensei
authorized users (as in : logged in via Captive Portal (AD)) will get the 'assigned' policy within Sensei

Meaning, everyone has the default policy, unless they decide to login via Captive Portal (afterwards)

Thanx

Logged

mb

  • Hero Member
  • *****
  • Posts: 941
  • Karma: 99
    • View Profile
    • Sunny Valley Networks
Re: Roadmap : Captive Portal Auto-Login for Active Directory authentications
« Reply #3 on: October 27, 2020, 11:38:55 pm »
Hi @elcocoloco, yes, that is possible as of now:

If you create a policy and assign some AD groups/users to this policy, only those authenticated via Captive Portal through AD will be assigned to that policy. All others will match default policy.

Having said that, curious about your use-case: since unauthenticated users will not be able to access the internet anyhow (since they're not authenticated via Captive Portal) does matching Sensei's default policy have a real effect on them?
Logged

elcocoloco

  • Newbie
  • *
  • Posts: 24
  • Karma: 2
    • View Profile
Re: Roadmap : Captive Portal Auto-Login for Active Directory authentications
« Reply #4 on: October 28, 2020, 09:15:49 am »
Yeah that's the problem, Captive Portal is interface based, so it's not possible imo. For now ideally would be :

- An unauthorized user should be able to access the internet with the default sensei policy
- An authorized user should be able to access the internet with an assigned sensei policy

We are using RDS 2012 R2 and they are already authorizing (user / pw / 2FA), adding another manual authorization will get me killed  ;D

But the auto AD logon solves it all, thanx.


Logged

mb

  • Hero Member
  • *****
  • Posts: 941
  • Karma: 99
    • View Profile
    • Sunny Valley Networks
Re: Roadmap : Captive Portal Auto-Login for Active Directory authentications
« Reply #5 on: October 28, 2020, 09:43:55 pm »
Quote
We are using RDS 2012 R2 and they are already authorizing (user / pw / 2FA), adding another manual authorization will get me killed  ;D

I hear you :)

Quote
But the auto AD logon solves it all, thanx.

We'll be in touch.
Logged

elcocoloco

  • Newbie
  • *
  • Posts: 24
  • Karma: 2
    • View Profile
Re: Roadmap : Captive Portal Auto-Login for Active Directory authentications
« Reply #6 on: July 15, 2021, 09:23:37 am »
Quote from: mb on October 27, 2020, 12:47:56 am
Hi @elcocoloco, most probably early Q1/2021. Thanks for that!. We'll be happy to send you the first beta for your review and comments ;)

Hi MB,

Any timeframe on a release for this function (or has it been released)? If not we've got to move to another solution unfortunately, can't explain the monthly cost anymore ;-)
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • English Forums »
  • Zenarmor (Sensei) »
  • Roadmap : Captive Portal Auto-Login for Active Directory authentications
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2024 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2