[Chilli] Correct chilli_query usage for resetting client's session, directing them back to portal

[Ben West]

I am curious what is the correct "chilli_query" invocation to reset a
particular client's authorized session and force them back to the portal,
without affecting other clients on that same AP.

This is the usage info which chilli_query reports:

root at Openwrt:~# chilli_query
Usage: chilli_query [ -s <socket> ] [ -P <port> ] <command> [<arguments>]
  socket = full path to UNIX domain socket (e.g. /var/run/chilli.sock)
  port = TCP socket port to connect to. Default is 42424
  Available Commands:
    list, listippool, listradqueue, listgarden, reload, dhcp-list,
dhcp-release, authorize, login, update, logout, logoff, drop, block, procs,
addgarden, remgarden
  Available Arguments:
    ip                <value> - type: ip   [   4] - IP address of session
to perform action on
    mac               <value> - type: mac  [   6] - MAC address of session
to perform action on
    sessionid         <value> - type: char [  17] - Session-id of session
to perform action on
    username          <value> - type: char [ 256] - Username to use in
RADIUS 'login' or authorization
    password          <value> - type: char [ 256] - Password to be used for
'login' command
    sessiontimeout    <value> - type: int  [   8] - Max session time (in
seconds)
    idletimeout       <value> - type: int  [   4] - Max idle time (in
seconds)
    interiminterval   <value> - type: int  [   2] - Accounting interim
interval
    maxoctets         <value> - type: int  [   8] - Max input + output
octets (bytes)
    maxinputoctets    <value> - type: int  [   8] - Max input octets (bytes)
    maxoutputoctets   <value> - type: int  [   8] - Max output octets
(bytes)
    maxbwup           <value> - type: int  [   8] - Max bandwidth up
    maxbwdown         <value> - type: int  [   8] - Max bandwidth down
    splash            <value> - type: char [2048] - Set splash page
    url               <value> - type: char [2048] - Set redirect url
    noacct                    - type: flag [   0] - No accounting flag
    data              <value> - type: char [1024] - Text configuration line
The ip and/or sessionid is required.

Say this the active session list (anonymized):

root at Openwrt:~# chilli_query list
50-55-27-XX-XX-XX 101.2.233.37 dnat 54de762f00000007 0 50-55-27-XX-XX-XX
0/7200 0/3600 0/0 0/0 0 1 0/0 0/0 http://domain.com
10-68-3F-XX-XX-XX 101.2.233.40 pass 54de742800000006 1 guest 2140/7200
1/3600 1155289/0 5056945/0 524288000 1 0%/384000 0%/1000000
http://somewhere.com
C8-3A-35-XX-XX-XX 101.2.233.27 pass 54de7e9a00000003 1 guest 113/7200
0/3600 310508/0 3970351/0 524288000 1 2%/384000 32%/1000000
http://somewhereelse.com
CC-D2-9B-XX-XX-XX 101.2.233.25 dnat 54de3ed700000004 0 CC-D2-9B-XX-XX-XX
0/7200 0/3600 0/0 0/0 0 1 0/0 0/0 http://nowhere.com
DE-9F-DB-XX-XX-XX 101.2.233.2 dnat 54ddcb2300000002 0 DE-9F-DB-XX-XX-XX
0/7200 0/3600 0/0 0/0 0 1 0/0 0/0 -

To reset the session for client at MAC address C8-3A-35-XX-XX-XX, forcing
him to log back into the captive portal again as user "guest," would this
be correct usage?

# chilli_query logoff C8-3A-35-XX-XX-XX

chilli_query has the commands logout, logoff, block, and drop, and I'm
having difficulty locating documentation about precisely what those
commands do.

Thank you.

-- 
Ben West
http://gowasabi.net
ben at gowasabi.net
314-246-9434
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.coova.org/pipermail/chilli/attachments/20150213/dc803cdf/attachment.html>