Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

problems with pptp connection

62 views
Skip to first unread message

Alex Mizrahi

unread,
Nov 19, 2007, 5:10:59 AM11/19/07
to
helo

i know that Solaris doesn't officially support pptp, nevertheless it's
possible to compile linux pptp client with some small patches. i've got that
patch from some forum, and guy claimed it works fine, however it's now not
available (if somebody needs it i can send this patch via email).

so i've build software and configured pppd. i've first tried it on Linux,
and it works fine there.
however on Solaris it goes to MS-CHAPV2 authentication and stops there, as
if it was incorrect password. however i'm pretty sure password is correct,
because i've copied chap-secrets file from linux system where it works fine.
so for me it looks like Solaris pppd has some problems with MS-CHAPV2
(generating invalid response). however it might be some tricky stuff..

are there some options to try to configure, or is there some other form of
"pppd" for Solaris? (i vaguely remember that guy who wrote patch said there
are some alternatives).

here's pppd log:

pppd call donapex noauth debug nodetach

Using /dev/pts/3; master fd 6, slave fd 7
pty speed set to 9600 bps
pty option: 'pptp 172.16.0.1 --nolaunchpppd --debug' started (pid 922)
Using interface sppp0
Connect: sppp0 <--> /dev/pts/3
/etc/ppp/pap-secrets is apparently empty
sent [LCP ConfReq id=0xe4 <asyncmap 0x0> <magic 0x80a28d2c> <pcomp>
<accomp>]
rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap m$oft-v2> <magic
0xa8bd7cfd> <pcomp> <accomp>]
sent [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap m$oft-v2> <magic
0xa8bd7cfd> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap m$oft-v2> <magic
0xa8bd7cfd> <pcomp> <accomp>]
sent [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap m$oft-v2> <magic
0xa8bd7cfd> <pcomp> <accomp>]
rcvd [LCP ConfAck id=0xe4 <asyncmap 0x0> <magic 0x80a28d2c> <pcomp>
<accomp>]
sent [LCP Ident id=0xe5 magic=0x80a28d2c "ppp-2.4.0b1 (Sun Microsystems,
Inc.)"]
Authenticating to peer with MS-CHAPv2
rcvd [LCP EchoReq id=0x0 magic=0xa8bd7cfd]
sent [LCP EchoRep id=0x0 magic=0x80a28d2c]
rcvd [CHAP Challenge id=0xff <bccfb740ca2230712a4030b14a33818c>, name =
"donapex"]
CHAP: Peer gave no name; using 'donapex' as remote name
sent [CHAP Response id=0xff
<5859029f1f39ea606972bf2c8e921d820000000000000000b7b1b420eb83b466c84c1d476823074ce9b594a1c18415e200>,
name = "killerstorm"]
sent [CHAP Response id=0xff
<5859029f1f39ea606972bf2c8e921d820000000000000000b7b1b420eb83b466c84c1d476823074ce9b594a1c18415e200>,
name = "killerstorm"]
rcvd [CHAP Failure id=0xff ""]
CHAP authentication failed
sent [LCP TermReq id=0xe6 "Failed to authenticate ourselves to peer"]
rcvd [LCP TermReq id=0x2 "Authentication failed"]
sent [LCP TermAck id=0x2]
rcvd [LCP TermAck id=0xe6]
Connection terminated.
Waiting for 1 child processes...
pid 922: pptp 172.16.0.1 --nolaunchpppd --debug
Child process pptp 172.16.0.1 --nolaunchpppd --debug finished (pid 922),
status = 0

and a log from Linux system that works correctly:

using channel 15
Using interface ppp0
Connect: ppp0 <--> /dev/pts/1
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xd6413ab5> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0xc144ddb8>
<pcomp> <accomp>]
sent [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0xc144ddb8>
<pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0xc144ddb8>
<pcomp> <accomp>]
sent [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0xc144ddb8>
<pcomp> <accomp>]
rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0xd6413ab5> <pcomp> <accomp>]
sent [LCP EchoReq id=0x0 magic=0xd6413ab5]
rcvd [LCP EchoReq id=0x0 magic=0xc144ddb8]
sent [LCP EchoRep id=0x0 magic=0xd6413ab5]
rcvd [CHAP Challenge id=0x68 <d8a322cbb8338f146b5df292e514bf2e>, name =
"donapex"]
sent [CHAP Response id=0x68
<31121cc38ea19294d495a5b0da9fab0e0000000000000000381ecbdcbf7b88d02ee4fbb6484a646be5161d96679bbe7500>,
name = "killerstorm"]
rcvd [LCP EchoRep id=0x0 magic=0xc144ddb8]
rcvd [CHAP Success id=0x68 "S=7721BDD882246B8CD45124B0FF63D1743A04D790"]
CHAP authentication succeeded


Message has been deleted

Alex Mizrahi

unread,
Nov 19, 2007, 2:55:25 PM11/19/07
to
MV> If it's barfing on the password authentication, what authentication
MV> method are you using on Solaris? UNIX crypt, MD5, or something else?
MV> Solaris 10 allows for all of these.

in chap-secrets?
documentation in this file says password should be in clear text, and it is
such.
but it is interesting idea that it can misinterpret password as being
somehow encoded, because it's quite unlikely pppd really has incompatible
MS-CHAPv2 algorithm.

if you were asking for something else, it is Solaris Express Dev Edition in
default configuration, and pppd gets mostly default configuration options.

i've tried to build open source pppd version 2.4.4, but unfortunately it's
kernel module failed to be loaded -- it says it doesn't attach.. my idea was
that probably issue is fixed in open source version, or at least i'll be
able to modify it to dump more information..

there is some possibility that it's pptp broken somehow, but it seems
unlikely as session looks quite normal, so it's definitely capable to
transfer data.


0 new messages