Easyhotspot in Centos 6.4 + CoovaChilli 1.3.0

In this section, I explain how to modify easyhotspot by adding coovachilli, in Centos 6.4. Usually, installing coovachilli can fix the problem of EasyHotspot login failed which sometimes happens. Before you continue reading this post, look at section easyhotspot with centos 6.4, in this blog. I assume you have been through 2 stages, (1)install apache, php, mysql, and (2) install web easyhotspot.

Install Freeradius 2.1.12.

Actually the same as before in easyhotspot with centos 6.4 section, just a few different configurations. I explain it all so as not to confuse.

yum install freeradius freeradius-mysql freeradius-utils

chkconfig --level 235 radiusd on

Edit /etc/raddb/clients.conf and in the "client localhost" section make sure you have,

ipaddr = 127.0.0.1

secret = easyhotspot

nastype = other

Edit /etc/raddb/radiusd.conf and in the "module" section, uncomment

$INCLUDE sql.conf

$INCLUDE sql/mysql/counter.conf

Then, in the "instantiate" section, add

max_all_mb

noresetcounter

Then in /etc/raddb/sites-enabled/default in the "authorize" section, uncomment "sql"  and add the new counters so that it is now,

sql

max_all_mb

noresetcounter

and then later in /etc/raddb/sites-enabled/default in the "accounting", "session" and "post auth" section uncomment the sql

sql

Edit the /etc/raddb /sql/mysql/counter.conf file and in that at the end, add the following,

sqlcounter noresetcounter {

counter-name = Session-Timeout

check-name = Session-Timeout

reply-name = Session-Timeout

sqlmod-inst = sql

key = User-Name

reset = never

query = "SELECT SUM(Acctsessiontime) FROM radacct WHERE UserName='%{%k}'"

}

sqlcounter max_all_mb {

counter-name = Max-All-MB

check-name = Max-All-MB

reply-name = ChilliSpot-Max-Total-Octets

sqlmod-inst = sql

key = User-Name

reset = never

query = "SELECT SUM(AcctInputOctets)/(1024*1024) + SUM(AcctOutputOctets)/(1024*1024) FROM radacct WHERE UserName='%{%k}'"

}

Edit /etc/raddb/sql.conf file, at the sql section,

        database = "mysql"

        driver = "rlm_sql_${database}"

        server = "localhost"

        #port = 3306

        login = "easyhotspot"

        password = "easyhotspot"

        radius_db = "easyhotspot_opensource"

Run freeradius. If there is no error, that's mean freeradius is running normally.

Radiusd -X

Install CoovaChilli
If you have installed chillispot, please remove the chillispot. Chillispot functions will be replaced by coovachilli. Follow the instruction below to remove the chillispot.

service chillispot stop

chkconfig --del chillispot

Find the chillispot.

whereis chilli

     chilli: /usr/sbin/chilli /etc/chilli.ipup /etc/chilli.conf /etc/chilli /usr/local/sbin/chilli /usr/local/etc/chilli

rm –Rf /usr/sbin/chilli
rm -Rf /etc/chilli.ipup
rm –Rf /etc/chilli.conf
rm –Rf /etc/chilli
rm –Rf /usr/local/sbin/chilli
rm –Rf /usr/local/etc/chilli
rm /etc/init.d/firewall.iptables

Download and install coovachilli

wget http://ap.coova.org/chilli/coova-chilli-1.3.0.tar.gz

tar zxvf coova-chilli-1.3.0.tar.gz

cd coova-chilli-1.3.0

./configure

Then if you continue to running command "make" you will find error.

         cc1: warnings being treated as errors/treat warring as error 

 So, look in file src/Makefile,in the folder coova-chilli-1.3.0. Search "–Werror", and remove. Save. And do the same in the file src/Makefile.in and src/Makefile.am. Now continue to running command "make".

make; make install

Create some link,

# ln -s /usr/local/etc/chilli /etc/
# ln -s /usr/local/etc/chilli.conf /etc/
# ln -s /usr/local/etc/init.d/chilli /etc/init.d/
# ln -s /usr/local/sbin/chilli /sbin/
# ln -s /usr/local/sbin/chilli_opt /sbin/
# ln -s /usr/local/sbin/chilli_query /sbin/
# ln -s /usr/local/sbin/chilli_radconfig /sbin/
# ln -s /usr/local/sbin/chilli_response /sbin/
# ln -s /var /usr/local/

Edit file /etc/chilli/defaults, and make sure configuration below.

HS_WANIF=eth2            # WAN Interface toward the Internet

HS_LANIF=eth1              # Subscriber Interface for client devices

HS_NETWORK=192.168.182.1           # HotSpot Network (must include HS_UAMLISTEN)

HS_NETMASK=255.255.255.0   # HotSpot Network Netmask

HS_UAMLISTEN=192.168.182.1         # HotSpot IP Address (on subscriber network)

HS_UAMPORT=3990            # HotSpot UAM Port (on subscriber network)

HS_UAMUIPORT=4990          #

HS_DNS1=192.168.182.1

HS_DNS2=8.8.8.8

HS_NASID=nas01

HS_RADIUS=localhost

HS_RADIUS2=localhost

HS_UAMALLOW=www.coova.org

HS_RADSECRET=easyhotspot    # Set to be your RADIUS shared secret

HS_UAMSECRET=easyhotspot    # Set to be your UAM secret

HS_UAMALIASNAME=chilli

HS_UAMFORMAT=https://192.168.182.1/cgi-bin/hotspotlogin.cgi

HS_UAMHOMEPAGE=http://192.168.182.1:3990/prelogin

HS_TCP_PORTS="80 443"

HS_WWWDIR=/usr/local/etc/chilli/www

HS_WWWBIN=/usr/local/etc/chilli/wwwsh

HS_PROVIDER=Coova

HS_PROVIDER_LINK=http://www.coova.org/

HS_LOC_NAME="My HotSpot"    

Save and then copy defaults to config in the same folder

cp /etc/chilli/defaults /etc/chilli/config

edit file /etc/init.d/chilli. Add coaport 3799, like example blow.

#!/bin/sh

#

# chilli CoovaChilli init

#

# chkconfig: 2345 65 35

# description: CoovaChilli

### BEGIN INIT INFO

# Provides:       chilli

# Required-Start: network

# Should-Start:

# Required-Stop:  network

# Should-Stop:

# Default-Start:  2 3 5

# Default-Stop:

# Description:    CoovaChilli access controller

### END INIT INFO

[ -f /usr/local/sbin/chilli ] || exit 0

. /usr/local/etc/chilli/functions

MULTI=$(ls /usr/local/etc/chilli/*/chilli.conf 2>/dev/null)

[ -z "$DHCPIF" ] && [ -n "$MULTI" ] && {

    for c in $MULTI;

    do

        echo "Found configuration $c"

        DHCPIF=$(basename $(echo $c|sed 's#/chilli.conf##'))

        export DHCPIF

        echo "Running DHCPIF=$DHCPIF $0 $*"

        sh $0 $*

    done

    exit

}

if [ -n "$DHCPIF" ]; then

    CONFIG=/usr/local/etc/chilli/$DHCPIF/chilli.conf

    pidfile=/usr/local/var/run/chilli.$DHCPIF.pid

else

    CONFIG=/usr/local/etc/chilli.conf

    pidfile=/usr/local/var/run/chilli.pid

fi

[ -f $CONFIG ] || {

    echo "$CONFIG Not found"

    exit 0

}

check_required

RETVAL=0

prog="chilli"

case $1 in

    start)

        echo -n "Starting $prog: "

        /sbin/modprobe tun >/dev/null 2>&1

        echo 1 > /proc/sys/net/ipv4/ip_forward

        [ -e /dev/net/tun ] || {

            (cd /dev;

                mkdir net;

                cd net;

                mknod tun c 10 200)

        }

        writeconfig

        radiusconfig

        test ${HS_ADMINTERVAL:-0} -gt 0 && {

            (crontab -l 2>&- | grep -v $0

                echo "*/$HS_ADMINTERVAL * * * * $0 radconfig"

                ) | crontab - 2>&-

        }

        ifconfig $HS_LANIF 0.0.0.0

        if [ "$(which start-stop-daemon)" = "" ]; then

            /usr/local/sbin/chilli -c $CONFIG --pidfile=$pidfile --coaport 3799 &

        else

            start-stop-daemon -S --pidfile=$pidfile --user=chilli \

                --exec /usr/local/sbin/chilli -- -c $CONFIG &

        fi

        echo

        ;;

  radconfig)

        [ -e $MAIN_CONF ] || writeconfig

        radiusconfig

        ;;

    reload)

        killall -HUP chilli

        ;;

    restart)

        $0 stop

        sleep 1

        $0 start

        RETVAL=$?

        ;;

    stop)

        echo -n $"Shutting down $prog: "

        crontab -l 2>&- | grep -v $0 | crontab -

        if [ "$(which start-stop-daemon)" != "" ]; then

            start-stop-daemon -K --pidfile=$pidfile --user=chilli \

                /usr/local/sbin/chilli

        fi

        [ -f $pidfile ] && {

            kill $(cat $pidfile)

            RETVAL=$?

            [ $RETVAL = 0 ] && {

                rm -f $pidfile 2>/dev/null

            }

        }

        echo

        ;;

    *)

        echo "Usage: $0 {start|stop|restart|reload|radconfig}"

        exit 1

esac

exit $?

Edit /etc/sysconfig/iptables. Add command to allow port 80. You can add command to allow or deny port according you needed. Below it's mine as an example,

# Firewall configuration written by system-config-firewall

# Manual customization of this file is not recommended.

*filter

:INPUT ACCEPT [0:0]

:FORWARD ACCEPT [0:0]

:OUTPUT ACCEPT [0:0]

-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

-A INPUT -p icmp -j ACCEPT

-A INPUT -i lo -j ACCEPT

-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT

-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT

-A INPUT -j REJECT --reject-with icmp-host-prohibited

-A FORWARD -j REJECT --reject-with icmp-host-prohibited

COMMIT

 

Edit /etc/chilli/up.sh, in the end line, add just one line like below

iptables -I POSTROUTING -t nat -o $HS_WANIF -j MASQUERADE

Then continue with command to make automatically running service when rebooting

chkconfig –level 235 chilli on

reboot

Ok finish. Now check chilli, running or not.

ifconfig

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00

                                 inet addr:192.168.182.1  P-t-P:192.168.182.1  Mask:255.255.255.0

                                UP POINTOPOINT RUNNING  MTU:1500  Metric:1

                                RX packets:29 errors:0 dropped:0 overruns:0 frame:0

                                TX packets:28 errors:0 dropped:0 overruns:0 carrier:0

                                collisions:0 txqueuelen:100

                                RX bytes:2132 (2.0 KiB)  TX bytes:3690 (3.6 KiB)

ps ax | grep chilli

1416 ?        Ss     0:00 /usr/local/sbin/chilli -c /usr/local/etc/chilli.conf -- pidfile=/usr/local/var/run/chilli.pid coaport 3799

If you get tun0 or a number PID process, like above, that's mean chilli running successfully. Now test from  your computer client. Computer client should get ip address 192.168.182.xxx, and when browsing should be redirect to login page. It's not over.

New Login
I modify yfi login, for easyhotspot login, so this is more interesting. Download File Easyhotspot.zip. Unzip the file, and you will find folder coova_json. Place the folder coova_json in /var/www/html/.
Then edit file /etc/chilli/defaults, modify section Uamformat and Uamhomepage.

HS_UAMFORMAT=https://192.168.182.1/coova_json/hs_land.php

HS_UAMHOMEPAGE=http://192.168.182.1/coova_json/splash.php

Done. Testing again from computer client. If everything is normal, client will get a new page login.

Below link to my backup file , maybe it's useful.
Link 1 : backup my configuration EasyHotspot.zip
Link 2 : File new login Easyhotspot.zip

Reference : http://rafeequl.files.wordpress.com/2009/08/easyhotspot-install-guide-for-0-2.pdf
Licence : EasyHotspot released under GPL, so that you can use it freedom.