if possible in the configuration option of the captive portal, authentication, select the 3 options, Do not use HTTPS (Encryption), Use CN to redirect, Unlock CRL and OCSP sites, ready captive portal with web address, keep in mind that you have to configure the dns, and when you created the profile of your zeroshell in the option of K5 Realm: place your doninio .COM