[NoCat] Your MAC address is undefined. Problem with the gateway?

[twistedpickles]

On 4/5/07, bijayant kumar <bijayant4u at yahoo.com> wrote:
> Hello to all,
>                    I am trying to configure NoCat gateway and NoCat authserver on the same machine. I work on gentoo-linux.  But i am not able  to do so.  I need support from you people. I have a small network. And my machine is behind the firewall gateway.  I want to configure NoCat gateway on my machine, and want to test it with other system making that machine's gateway of mine. I am giving my whole configuration file here :-
>
> 1) vi /usr/local/nocat/nocat.conf
> Verbosity       10
> GatewayName     Bijayant Gateway
> GatewayMode     Passive
> GatewayLog      /usr/local/nocat/nocat.log
> LoginTimeout    600
> HomePage        http://localhost/cgi-bin/login
> DocumentRoot    /usr/local/nocat/htdocs
> SplashForm      splash.html
> StatusForm      status.html
> TrustedGroups Any
> AuthServiceAddr 192.168.1.183
> AuthServiceURL  http://$AuthServiceAddr/cgi-bin/login
> LogoutURL       http://$AuthServiceAddr/logout.html
> InternalDevice eth0
> LocalNetwork   192.168.99.0/24
> IncludePorts    22 80 443
> ExcludePorts    25
> GatewayPort     5280
> PGPKeyPath     /usr/local/nocat/pgp
> GpgvPath       /usr/bin/gpgv
>
> 2) vi /usr/local/nocat/authserv/nocat.conf
>
>  PGPKeyPath     /usr/local/nocat/authserv/pgp
> HomePage        http://localhost/cgi-bin/login
> DocumentRoot    /usr/local/nocat/authserv/htdocs/
> DataSource      LDAP
> LDAP_Host               bijayant.kavach.blr
> LDAP_Base               dc=kavach,dc=blr
> LDAP_Admin_User         cn=Manager,dc=kavach,dc=blr
>  LDAP_Admin_PW          secret
>  LDAP_Hash_Passwords    Yes
>  LDAP_Search_as_Admin   Yes
> LDAP_Filter            username
> UserTable       member
> UserIDField     login
> UserPasswdField pass
> UserAuthField   status
> UserStampField  created
>
> GroupTable      network
> GroupIDField    network
> GroupAdminField admin
> GpgPath        /usr/bin/gpg
> LocalGateway    bijayant.kavach.blr
>
> 3) vi /etc/apache2/httpd.conf
>
> ScriptAlias /cgi-bin/ /usr/local/nocat/authserv/cgi-bin/
> <Directory /usr/local/nocat/authserv/cgi-bin>
> Options ExecCGI
> SetEnv PERL5LIB /usr/local/nocat/authserv/lib
> SetEnv NOCAT    /usr/local/nocat/authserv/nocat.conf
> Order allow,deny
> Allow from all
> </Directory>
> Alias /images/ /usr/local/nocat/authserv/htdocs/images/
> Alias /nocat/  /usr/local/nocat/authserv/htdocs/
> <Directory /usr/local/nocat/authserv/htdocs/>
> Options -Indexes FollowSymLinks MultiViews
> AllowOverride All
> <IfModule mod_access.c>
> Order allow,deny
> Allow from all
> </IfModule>
> </Directory>
>
> When i run /usr/local/nocat/bin/gateway i got all the messages as described in various documents. When i type http://192.168.99.183:5280/status in the browser i got the status page also like
>
> Gateway Up SinceThu Apr  5 14:51:33 2007
> TotalConnections    0
> GatewayVersion    0.81.20020808
> GatewayMode    Passive
> LoginTimeout    600
> IdleTimeout    300
> HomePage    http://localhost/cgi-bin/login
> LastConnectionTime    none
> ConnectionCount    0
>
> I dont get any authentication page while opening any websites,and my default page is remains the apache page.  When i type in the browser http://localhost/cgi-bin/login, i get the login page but when i supplied all information there i got error
> Your MAC address is undefined. Problem with the gateway?
>
> And from another system when i open any other site it just opens without any authentication.
> I want to ask that where i am doing wrong. Please help me.
>
>
>
> Bijayant Kumar
>  Send instant messages to your online friends http://uk.messenger.yahoo.com
> _______________________________________________
> NoCat mailing list
> NoCat at lists.nocat.net
> http://lists.nocat.net/mailman/listinfo/nocat
>


You must install Net::Netmask if your running both on the same machine.

You must define "LocalGateway" in your authserv nocat.conf file. The
local gateway should be the ip address that is running both your
gateway and authserv.

Also not that it matters because I'm sure your're running in passive
mode but "HomePage" should be defined as your  public IP address or
your FQDN and not as localhost. This is feature is used only in open
mode and redirects your customer or end user to the website you list
here after the splash. It doesn't necessarily need to be the IP of
your gateway but it shouldn't be http://gatewayIP/cgi-bin/login. This
will force the user into a loop and not allow them to login or gain
access to the Internet.

-- 
::twistedPickles:: :