Using external login server

RouterOS General
1

Dear Friends
l am new to mikrotik but l have learn a lot on how to configure it.l have a hotspot server with L6 and ver 2.9.51.
l would like to install the login pages on an external apache server.
l have changed the login.html to redirect on codes l found on the forum(fewi’s contribution).but am still find it difficult understanding the codes for the rlogin.
l have also search the forum .l will be glad if someone can direct me to how l can acheive this.
l will also apprechiate it much if someone could provide me with samples of all the pages required to acheive this.
l did the following
copied all the hotspot pages to the Apache server WWW directory

Then modified login to

l wall garden the ip 10.10.3.1 so the hotspot allow access to it.


l will really need help or directions.

Thanks
Rainmaker

2

Did you see my other posts? Even tho your login.html doc looks like this when you upload it

<html>
<title>...</title>
<body>
<form name="redirect" action="https://auth.example.com/login.php" method="post">
<input type="hidden" name="mac" value="$(mac)">
<input type="hidden" name="ip" value="$(ip)">
<input type="hidden" name="username" value="$(username)">
<input type="hidden" name="link-login" value="$(link-login)">
<input type="hidden" name="link-orig" value="$(link-orig)">
<input type="hidden" name="error" value="$(error)">
</form>
<script language="JavaScript">
<!--
   document.redirect.submit();
//-->
</script>
</body>
</html>

it will look something like this when your browser gets it

<html>
<title>...</title>
<body>
<form name="redirect" action="https://auth.example.com/login.php" method="post">
<input type="hidden" name="mac" value="00:11:22:33:44:55">
<input type="hidden" name="ip" value="192.168.1.250">
<input type="hidden" name="username" value="">
<input type="hidden" name="link-login" value="http://192.168.1.1/login">
<input type="hidden" name="link-orig" value="http://www.google.com">
<input type="hidden" name="error" value="">
</form>
<script language="JavaScript">
<!--
   document.redirect.submit();
//-->
</script>
</body>
</html>
3

The meta redirect works fine to display a page from an external web server. That external web server then does whatever it does, but eventually has to submit a form back to /login on the router, passing on the ‘username’ and ‘password’ parameters to actually log the user in.

The same is true if you use the JavaScript way of issuing. Redirect to the external server. When using the meta method you can still pass on any parameter via GET variables.

Tim, I prefer meta redirects as they work more often - many clients run NoScript or other means of turning off JavaScript, some mobile clients don’t implement it at all. Meta refeshes are supported pretty much anywhere. That said, the method used to redirect to the external server can always be changed later. If the external server isn’t working right that isn’t due to the redirect method, but somewhere else in the process.

4

Hi fewi. I think if they do that (disable JavaScript), then the md5.js will not run, nor will it submit the login form on the original router login.html page.

5

Yes, that is true. I use HTTPS for logins so I don’t need the CHAP JavaScript. If you don’t have an SSL certificate for the router you’ll either need JavaScript or use PAP and submit things in clear text (which isn’t always a problem, either).

6

Thanks, fewi. It is always interesting reading your stuff!

If I hadn’t started responding to the other thread first, this is actually the more appropriate subject. The simple demo php code is here
http://forum.mikrotik.com/t/mikrotik-external-radius-server-problem/41560/1

7

Dear All
l will like someone to help me get mikrotik login pages on an external server for a fee.
l have a dead line to get this done.
Any body interested should send me his or her contact.
thanks

8

Dear fewi and SurferTim

l will be very grateful if you will get me a hotspot pages that can run on apache server.
l getting even more confused.
looking forward to hearing from you.
thanks

9

Do you have a login.html page that runs on the router that you like? That would be the easiest for me to modify to an external php.

ADD: Only one requirement. You must get the login.php code on the other thread running on your Apache server.

10

Thank You
l did load the code and this is what i got
screen.png
you can modify the default mikrotik login in pages for me.
When l get them working l can then edit that one.
Thanks

11

Is it working when you try to login? I don’t see the output I expected. The link-login should be http://192.168.1.1/login (maybe not that ip) and the link-orig should be the site you were trying to load when the hotspot stopped you and sent the login page instead. The mac address and ip are not there either.

I would really prefer you modify the login.html doc first. That way editing mistakes can be avoided. You don’t have to post it here. My email address is in my user profile. My email server is a bit fussy. If you have trouble with the email, let me know.

ADD: I may do an article for the wiki using the standard login.html page as a template, but I am not sure I can get to it today. That page is not as easy as mine. It makes logical decisions based on the variables. I have removed those for my login page.

12

Here is what I have of the external login page so far. Before I started editing it to fit on the wiki page, it worked fine. I will edit it over the next few days so it will fit better and have better instructions.
http://wiki.mikrotik.com/wiki/HotSpot_external_login_page