| View Issue Details [ Jump to Notes ] | [ Issue History ] [ Print ] |
| ID | Project | Category | View Status | Date Submitted | Last Update |
| 0001594 | PacketFence | captive portal | public | 2012-11-05 09:35 | 2015-02-18 10:59 |
|
| Reporter | brancaleone | |
| Assigned To | | |
| Priority | normal | Severity | minor | Reproducibility | have not tried |
| Status | closed | Resolution | open | |
| Platform | | OS | | OS Version | |
| Product Version | 3.6.0 | |
| Target Version | | Fixed in Version | | |
|
| Summary | 0001594: Google OAuth need access to ssl.gstatic.com |
| Description | I tried the new OAuth feature in version 3.6.0 but i had a problem.
When being redirected to accounts.google.com to validate the access to my account, some content in the auth page is served by ssl.gstatic.com. This include the javascript files, and without thems i was not able to authorize access to my account, i was always redirected to https://accounts.google.com/o/noscript. [^]
To solve this, i added the ip 173.194.66.120 to oauth2-ips.conf (google section).
I also added a new zone file named-gstatic.com and hacked a bit in lib/pf/services/named.pm to make it loaded.
With those changes i was able to get an access through the captiveportal using my google account. |
| Tags | No tags attached. |
|
| fixed in git revision | |
| fixed in mtn revision | |
|
| Attached Files |  gstatic-named.pm.diff [^] (1,557 bytes) 2012-11-05 09:35 [Show Content] [Hide Content]--- lib/pf/services/named.pm.orig 2012-11-05 15:32:26.605584202 +0100
+++ lib/pf/services/named.pm 2012-10-30 13:54:53.988440917 +0100
@@ -115,8 +115,10 @@
if ($google_enabled) {
$tags{'oauth_zones_vlan'} .= "zone \"google.com\" IN {\n type master;\n file \"named-google.com\";\n allow-update { none; };\n};\n\n";
$tags{'oauth_zones_vlan'} .= "zone \"google.ca\" IN {\n type master;\n file \"named-google.ca\";\n allow-update { none; };\n};\n\n";
+ $tags{'oauth_zones_vlan'} .= "zone \"gstatic.com\" IN {\n type master;\n file \"named-gstatic.com\";\n allow-update { none; };\n};\n\n";
$tags{'oauth_zones_inline'} .= "zone \"google.com\" IN {\n type master;\n file \"named-inline-google.com\";\n allow-update { none; };\n};\n\n";
$tags{'oauth_zones_inline'} .= "zone \"google.ca\" IN {\n type master;\n file \"named-inline-google.ca\";\n allow-update { none; };\n};\n\n";
+ $tags{'oauth_zones_inline'} .= "zone \"gstatic.com\" IN {\n type master;\n file \"named-inline-gstatic.com\";\n allow-update { none; };\n};\n\n";
}
if ($facebook_enabled) {
@@ -150,6 +152,8 @@
";");
parse_template(\%tags_inline, "$conf_dir/named-google.com", "$var_dir/named/named-inline-google.com",
";");
+ parse_template(\%tags_inline, "$conf_dir/named-gstatic.com", "$var_dir/named/named-inline-gstatic.com",
+ ";");
}
if ($facebook_enabled) {
 named-gstatic.com [^] (611 bytes) 2012-11-05 09:36
oauth2-ips.conf [^] (429 bytes) 2012-11-05 09:36 |
|
Relationships 
Relationships 