1. Поменял время на корректное, на величину Nas-Port и отрицательность данного значения не повлияло. Причем у Микторитка это значение положительное...
2. Включил debug на Микротик и увидел буквально следующее:
Код:
Jan/02/1970 07:03:34 web-proxy,debug
Jan/02/1970 07:04:36 hotspot,info,debug 29054 (10.0.0.241): trying to log in by http-pap
Jan/02/1970 07:04:36 hotspot,debug 29054 (10.0.0.241): local user not found
Jan/02/1970 07:04:36 hotspot,debug 29054 (10.0.0.241): sending RADIUS authentication request
Jan/02/1970 07:04:36 radius,debug new request 3f:2f code=Access-Request service=hotspot called-id=hotspot1
Jan/02/1970 07:04:36 radius,debug sending 3f:2f to 192.168.88.254:1812
Jan/02/1970 07:04:36 radius,debug,packet sending Access-Request with id 7 to 192.168.88.254:1812
Jan/02/1970 07:04:36 radius,debug,packet Signature = 0x238e1f2946e87ccd3d1b58ba507ed7ab
Jan/02/1970 07:04:36 radius,debug,packet NAS-Port-Type = 19
Jan/02/1970 07:04:36 radius,debug,packet Calling-Station-Id = "48-5D-60-AF-1B-CE"
Jan/02/1970 07:04:36 radius,debug,packet Called-Station-Id = "hotspot1"
Jan/02/1970 07:04:36 radius,debug,packet NAS-Port-Id = "ether3"
Jan/02/1970 07:04:36 radius,debug,packet User-Name = "29054"
Jan/02/1970 07:04:36 radius,debug,packet NAS-Port = 2162163714
Jan/02/1970 07:04:36 radius,debug,packet Acct-Session-Id = "80e00002"
Jan/02/1970 07:04:36 radius,debug,packet Framed-IP-Address = 10.0.0.241
Jan/02/1970 07:04:36 radius,debug,packet MT-Host-IP = 10.0.0.241
Jan/02/1970 07:04:36 radius,debug,packet User-Password = 0x33383938393536313632
Jan/02/1970 07:04:36 radius,debug,packet Service-Type = 1
Jan/02/1970 07:04:36 radius,debug,packet WISPr-Logoff-URL = "http://10.0.0.1/logout"
Jan/02/1970 07:04:36 radius,debug,packet NAS-Identifier = "MikroTik"
Jan/02/1970 07:04:36 radius,debug,packet NAS-IP-Address = 192.168.88.1
Jan/02/1970 07:04:37 radius,debug resending 3f:2f
Jan/02/1970 07:04:37 radius,debug,packet sending Access-Request with id 7 to 192.168.88.254:1812
Jan/02/1970 07:04:37 radius,debug,packet Signature = 0x238e1f2946e87ccd3d1b58ba507ed7ab
Jan/02/1970 07:04:37 radius,debug,packet NAS-Port-Type = 19
Jan/02/1970 07:04:37 radius,debug,packet Calling-Station-Id = "48-5D-60-AF-1B-CE"
Jan/02/1970 07:04:37 radius,debug,packet Called-Station-Id = "hotspot1"
Jan/02/1970 07:04:37 radius,debug,packet NAS-Port-Id = "ether3"
Jan/02/1970 07:04:37 radius,debug,packet User-Name = "29054"
Jan/02/1970 07:04:37 radius,debug,packet NAS-Port = 2162163714
Jan/02/1970 07:04:37 radius,debug,packet Acct-Session-Id = "80e00002"
Jan/02/1970 07:04:37 radius,debug,packet Framed-IP-Address = 10.0.0.241
Jan/02/1970 07:04:37 radius,debug,packet MT-Host-IP = 10.0.0.241
Jan/02/1970 07:04:37 radius,debug,packet User-Password = 0x33383938393536313632
Jan/02/1970 07:04:37 radius,debug,packet Service-Type = 1
Jan/02/1970 07:04:37 radius,debug,packet WISPr-Logoff-URL = "http://10.0.0.1/logout"
Jan/02/1970 07:04:37 radius,debug,packet NAS-Identifier = "MikroTik"
Jan/02/1970 07:04:37 radius,debug,packet NAS-IP-Address = 192.168.88.1
Jan/02/1970 07:04:37 hotspot,debug 29054 (10.0.0.241): Access-Reject from RADIUS
Jan/02/1970 07:04:37 radius,debug,packet received Access-Reject with id 7 from 192.168.88.254:1812
Jan/02/1970 07:04:37 radius,debug,packet Signature = 0xb734d6e3529cb827f8f7381c8a8a0de2
Jan/02/1970 07:04:37 radius,debug received reply for 3f:2f
Jan/02/1970 07:04:38 hotspot,info,debug 29054 (10.0.0.241): login failed: invalid username or password
Jan/02/1970 07:04:40 hotspot,info,debug 29054 (10.0.0.241): trying to log in by http-pap
Jan/02/1970 07:04:40 hotspot,debug 29054 (10.0.0.241): local user not found
Jan/02/1970 07:04:40 hotspot,debug 29054 (10.0.0.241): sending RADIUS authentication request
Jan/02/1970 07:04:40 radius,debug new request 3f:30 code=Access-Request service=hotspot called-id=hotspot1
Jan/02/1970 07:04:40 radius,debug sending 3f:30 to 192.168.88.254:1812
Jan/02/1970 07:04:40 radius,debug,packet sending Access-Request with id 8 to 192.168.88.254:1812
Jan/02/1970 07:04:40 radius,debug,packet Signature = 0x2eb141f241b71efb79e2a9e37545e146
Jan/02/1970 07:04:40 radius,debug,packet NAS-Port-Type = 19
Jan/02/1970 07:04:40 radius,debug,packet Calling-Station-Id = "48-5D-60-AF-1B-CE"
Jan/02/1970 07:04:40 radius,debug,packet Called-Station-Id = "hotspot1"
Jan/02/1970 07:04:40 radius,debug,packet NAS-Port-Id = "ether3"
Jan/02/1970 07:04:40 radius,debug,packet User-Name = "29054"
Jan/02/1970 07:04:40 radius,debug,packet NAS-Port = 2162163715
Jan/02/1970 07:04:40 radius,debug,packet Acct-Session-Id = "80e00003"
Jan/02/1970 07:04:40 radius,debug,packet Framed-IP-Address = 10.0.0.241
Jan/02/1970 07:04:40 radius,debug,packet MT-Host-IP = 10.0.0.241
Jan/02/1970 07:04:40 radius,debug,packet User-Password = 0x33383938393536313632
Jan/02/1970 07:04:40 radius,debug,packet Service-Type = 1
Jan/02/1970 07:04:40 radius,debug,packet WISPr-Logoff-URL = "http://10.0.0.1/logout"
Jan/02/1970 07:04:40 radius,debug,packet NAS-Identifier = "MikroTik"
Jan/02/1970 07:04:40 radius,debug,packet NAS-IP-Address = 192.168.88.1
Jan/02/1970 07:04:40 hotspot,debug 29054 (10.0.0.241): Access-Accept from RADIUS
Jan/02/1970 07:04:40 hotspot,debug 29054 (10.0.0.241): using profile <default>
Jan/02/1970 07:04:40 hotspot,debug 29054 (10.0.0.241): interim-update <60> from RADIUS
Jan/02/1970 07:04:40 hotspot,debug 29054 (10.0.0.241): rate limit <1024k> from RADIUS
Jan/02/1970 07:04:40 hotspot,debug 29054 (10.0.0.241): session timeout <600> from RADIUS
Jan/02/1970 07:04:40 hotspot,debug 29054 (10.0.0.241): adding ip->user binding
Jan/02/1970 07:04:40 radius,debug,packet received Access-Accept with id 8 from 192.168.88.254:1812
Jan/02/1970 07:04:40 radius,debug,packet Signature = 0x52113dea10943baf49cf0d967f8a440b
Jan/02/1970 07:04:40 radius,debug,packet Acct-Interim-Interval = 60
Jan/02/1970 07:04:40 radius,debug,packet Service-Type = 2
Jan/02/1970 07:04:40 radius,debug,packet Framed-Protocol = 1
Jan/02/1970 07:04:40 radius,debug,packet Session-Timeout = 600
Jan/02/1970 07:04:40 radius,debug,packet MT-Rate-Limit = "1024k"
Jan/02/1970 07:04:40 radius,debug received reply for 3f:30
Jan/02/1970 07:04:40 hotspot,debug 29054 (10.0.0.241): adding queue <1024k>
Jan/02/1970 07:04:40 hotspot,account,info,debug 29054 (10.0.0.241): logged in
Jan/02/1970 07:04:40 hotspot,debug 29054 (10.0.0.241): sending RADIUS accounting Start request
Jan/02/1970 07:04:40 radius,debug new request 3f:33 code=Accounting-Request service=hotspot called-id=hotspot1
Jan/02/1970 07:04:40 radius,debug sending 3f:33 to 192.168.88.254:1813
Jan/02/1970 07:04:40 radius,debug,packet sending Accounting-Request with id 9 to 192.168.88.254:1813
Jan/02/1970 07:04:40 radius,debug,packet Signature = 0xf0b83dd91cbefc07c77b3a94f2d02a52
Jan/02/1970 07:04:40 radius,debug,packet Acct-Status-Type = 1
Jan/02/1970 07:04:40 radius,debug,packet NAS-Port-Type = 19
Jan/02/1970 07:04:40 radius,debug,packet Calling-Station-Id = "48-5D-60-AF-1B-CE"
Jan/02/1970 07:04:40 radius,debug,packet Called-Station-Id = "hotspot1"
Jan/02/1970 07:04:40 radius,debug,packet NAS-Port-Id = "ether3"
Jan/02/1970 07:04:40 radius,debug,packet User-Name = "29054"
Jan/02/1970 07:04:40 radius,debug,packet NAS-Port = 2162163715
Jan/02/1970 07:04:40 radius,debug,packet Acct-Session-Id = "80e00003"
Jan/02/1970 07:04:40 radius,debug,packet Framed-IP-Address = 10.0.0.241
Jan/02/1970 07:04:40 radius,debug,packet MT-Host-IP = 10.0.0.241
Jan/02/1970 07:04:40 radius,debug,packet Event-Timestamp = 86680
Jan/02/1970 07:04:40 radius,debug,packet NAS-Identifier = "MikroTik"
Jan/02/1970 07:04:40 radius,debug,packet Acct-Delay-Time = 0
Вопрос возникает: а почему первый раз он отправляет два раза запрос с логин\паролем...
Схема простая:
1. Редирект на внешний URL POST-запросом
2. Внешний URL возвращает клиента на страницу login с POST-запросом, содержащим логин\пароль
3. Микротик идёт к радиусу и авторизовывает пользователя
4. Радиус попутно отправляет задание на создание договора на основании логина (карта)