LINUX.ORG.RU
Форум — Admin  

опять pptpd


0

0

собственно не хочет юзаться pptpd с chap авторизацией.
config.pptpd:
----
lock
mtu 576
noipx
noipdefault
ktune
refuse-pap
require-chap
lcp-echo-interval 15
lcp-echo-failure 4
auth
nobsdcomp
nodeflate
----

pptpd.conf:
----
option /etc/ppp/options.pptpd
localip 172.16.0.1
remoteip 172.16.0.2-10
----

лог:
----
May 20 19:23:02 localhost pptpd[3906]: CTRL: Client 192.168.254.13 control connection started
May 20 19:23:02 localhost pptpd[3906]: CTRL: Starting call (launching pppd, opening GRE)
May 20 19:23:02 localhost pppd[3907]: The remote system is required to authenticate itself
May 20 19:23:02 localhost pppd[3907]: but I couldn't find any suitable secret (password) for it to use to do so.
May 20 19:23:02 localhost pppd[3907]: (None of the available passwords would let it use an IP address.)
May 20 19:23:02 localhost pptpd[3906]: GRE: read(fd=6,buffer=804e560,len=8196) from PTY failed: status = -1 error = Input/outp
May 20 19:23:02 localhost pptpd[3906]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7)
May 20 19:23:02 localhost pptpd[3906]: CTRL: Reaping child PPP[3907]
May 20 19:23:02 localhost pptpd[3906]: CTRL: Client 192.168.254.13 control connection finished
----
в chap-secrets логин/пароль прописан
login * pass

если вообще убрать:
refuse-pap
require-chap
то с пап авторизацией работает.


А клиент ломится авторизовываться по chap? судя по всему он ломится по pap, видит refuse-pap а на chap не обращает внимания.

Chumka ★★★
()
Ответ на: комментарий от Chumka

да, клиент настроен только на chap.

sole
() автор топика 

vot kak-to nastraival dlia sebia , i takoi vot tipa note sdelal .

pptpd config on debian sarge 
Fri May 27 17:06:42 GEO 2005

we are using
Poptop v1.2.1 from Debian repositary 
pppd version 2.4.3 from Debian repositary
linux kernel 2.4.29 from kernel.org
mppe-mppc patch for kernel from http://www.polbox.com/h/hs001/linux-2.4.29-mppe-mppc-1.3.patch.gz

and following usefull links.
http://www.poptop.org/
http://www.samba.org/ppp/
http://www.polbox.com/h/hs001/
http://www.phparchitecture.com/howto_show.php?id=3
http://www.chiark.greenend.org.uk/~owend/free/pptp-debian.html
http://shubert.ru/main.php?sect=2⊂=1&doc=13

0. patch and recompile kernel.
#cd /usr/src/
#gunzip linux-2.4.29-mppe-mppc-1.3.patch.gz
#bzip2 -dc linux-2.4.29.tar.bz2 |tar -xvf-
#cd linux-2.4.29
#make mrpropper 
#patch -p1 <../linux-2.4.29-mppe-mppc-1.3.patch
#make menuconfig 
for poptop we must select 
CONFIG_PPP_MPPE_MPPC=m
CONFIG_CRYPTO_SHA1=m
CONFIG_CRYPTO_ARC4=m
#make dep &&make clean &&make bzImage &&make modules&&make modules_install &&cp arch/i386/boot/bzImage /boot/vmlinuz-2.4.29 &&cp System.map /boot/System.map-2.4.29
add apropriate peace of lilo config to lilo and run /sbin/lilo -v

1. define in /etc/modules.conf 
alias ppp-compress-18   ppp_mppe_mppc

/etc/module.ocnf
alias char-major-108    ppp_generic
alias /dev/ppp          ppp_generic
alias tty-ldisc-3       ppp_async
alias tty-ldisc-14      ppp_synctty
alias ppp-compress-21   bsd_comp
alias ppp-compress-24   ppp_deflate
alias ppp-compress-26  	ppp_deflate
alias ppp-compress-18   ppp_mppe_mppc


2. pppd in Debian sarge already has mppe-mppc patch

3. download and install pptpd daemon apt-get install pptpd

4. 
pptpd.conf 

options /etc/ppp/options-pptpd
#listen 195.19.254.48
localip 192.168.0.1
remoteip 192.168.0.245-250
debug

/etc/ppp/options-pptpd
local
#192.168.201.1:192.168.201.254
lock
mtu 1490
mru 1490
ipcp-accept-local
ipcp-accept-remote
lcp-echo-failure 3
lcp-echo-interval 5
#deflate 0
auth
#+chap
proxyarp
ms-dns 80.83.128.32
#+chapms
#+chapms-v2
nobsdcomp
nodefaultroute
#nodeflate
#+mppe-40
require-mschap-v2
require-mppe-128
#+mppe-128
#+mppe-stateless
#plugin radius.so
debug


/etc/ppp/chap-secrets
# Secrets for authentication using CHAP
# client        server  secret                  IP addresses
#test   *       123     10.0.1.2
xxx             pptpd   123     *
xxx             *       123     *


gui pptpconfig 
deb http://quozl.netrek.org/pptp/pptpconfig ./

j262 ★★
()
Вы не можете добавлять комментарии в эту тему. Тема перемещена в архив.
Admin