Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I work at this university and I'm seeking an effective solution for an internet login mechanism.

We have a leased-link at our campus, which is shared by both staff & students. All systems (desktops + laptops + handhelds) connect to the internal network via wifi and can then get onto the net.

However, a local govt. regulation requires us to keep track of individual internet usage and hence we need a solution (pref. free / opensource) that'll enable us to implement some sort of an authentication mechanism once a user hooks onto the network.

One requirement is that the software should be able to authenticate either against LDAP or some other custom user database (MySQL based) or both.

Can anyone suggest any such software or mechanism? Most of our servers are Linux based... so something that runs off such a platform will be good.

Thanks, m^e

share|improve this question

Squid proxy should be able to do this. You will need to configure it to require logins. There are several authenticators available. You may need to adjust the log format to include the authenticated user id.

share|improve this answer
We're currently using squid but without any form of authentication. I'll have a look into this. – miCRoSCoPiCeaRthLinG Feb 24 '11 at 6:23

You can setup a transparent proxy using squid. You can also setup squid to use LDAP authentication, also with SSO capabilities. Hence, you have a potential solution to the problem.

If you need to authenticate the user once he/she connects to the network via wifi, you could implement WPA-EAP authentication, using something like TTLS or PEAP to handle the authentication.

share|improve this answer
Thanks.. taking a look at those links. – miCRoSCoPiCeaRthLinG Feb 24 '11 at 6:24

Pfsense will do this for free and will allow you to use Radius as a backend whom can be used against an LDAP. It works really well and will give some a lot of other features if you ever wish to add new features or services.

share|improve this answer
radius is best way to accomplish that ... i know im working on university to :D and we use radius :D – B14D3 Feb 25 '11 at 10:03
PfSense looks good.. but how does it perform in conjunction with a LDAP Server? – miCRoSCoPiCeaRthLinG Mar 4 '11 at 4:37
Pfsense will interface with another Radius server. After that you can interface you Radius with anything you wish including LDAP. – Antoine Benkemoun Mar 4 '11 at 7:15

It isn't free, but when I was in college we used BlueSocket appliances to do the captive portal thing.

share|improve this answer
Thanks. Will take a look. – miCRoSCoPiCeaRthLinG Feb 24 '11 at 6:23

There are free captive portal solutions out there, for example ChilliSpot:

share|improve this answer
Yup that's the one we're using now.. but it has it's own hiccups :D – miCRoSCoPiCeaRthLinG Mar 4 '11 at 5:12

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.