May disable uamsecret get the real challenge?

coova / coova-chilli

CoovaChilli is an open-source software access controller for captive portal hotspots.

Other

516 stars 258 forks source link

May disable uamsecret get the real challenge? #341

Open forgaoqiang opened 7 years ago

forgaoqiang commented 7 years ago

It's a little hard to deploy a UAMSECRET service with https, is there any direct way to disable uamsecret and get the real challenge? Or is there a JS implement of uamservice ( I know put uamsecret in JS is not safe ) I think many people may need it

alex-eri commented 7 years ago

set blank UAMSECRET uamsecret=""

knumat commented 6 years ago

We had a similar issue trying to get the JavaScript/JSON interface working. A challenge sent by chilli was being used instead of the CHAP challenge. We eventually found that leaving uamsecret blank fixed our issue, too.