[pptp-server] Error 629 on NT

[Matthew Ramsay]

Hi Tavis,

did u get the same error when u added DOMAIN\\username servername
password *
?
this really should work.. try again..

in the options file you use for pptpd you should have:

name servername
remotename DOMAIN\\username
auth
require-chap
debug

and maybe others...

in your chap-secrets
DOMAIN\\username servername password *

You must replace DOMAIN with your domain obviously.. actually..  ppp
looks in the options file.. sees 'name servername' then matches
'servername' in your chap-secrets file.. hence so long as you have
servername in both options and chap-secrets it shouldn't matter...

also CHAP is considered 'encrypted authentication' so u should be able
to check that.. finally turn of IP header compression and software
compression..

if this doesn't work.. (and it should :-) send to me personally (ie. not
to the mailing list) a copy of all your config files and a debug dump.

-matt


> Tried that.  No go any other ideas?  Is there supposed to be a tab or space
> between DOMAIN\\ and username? Also is DOMAIN\\ case sensitive?  Where does
> servername figure in and how does the pptp server check that name.
> Obviously it isn't a netbios name (at least i can't see how it could be).
> Hostname maybe?  They match in my case but of course the netbios name is
> uppercase and hostname is lowercase.  Is this entry case sensitive?  Should
> each of the fields be separated by tabs or spaces or does it matter?  Lastly
> but probably most importantly do you have to apply the MS patch to this to
> get NT working as a client i.e. does MS WINNT support chap with the "accept
> only encrypted authentication" option selected?
> 
> Regards,
> 
> Tavis Wordley
> Technical Director
> Path Communications Management
> P#519.858.9922
> F#519.858.9551
> tavis at pcmsite.com
> -----Original Message-----
> From: Matthew Ramsay [mailto:matthewr at moreton.com.au]
> Sent: Monday, July 19, 1999 3:31 AM
> To: Tavis
> Cc: 'pptp-server at lists.schulte.org'
> Subject: Re: [pptp-server] Error 629 on NT
> 
> try:
> 
> DOMAIN\\username servername password *
> 
> in chap-secrets.. where domain is your domain :-)
> 
> -matt
> 
> Tavis wrote:
> >
> > Can someone help me out with this error. Log and config files follow.  The
> > "The remote system is required to authenticate itself but I couldn't find
> > any suitable secret (password) for it to use to do so." error seems to
> > indicate that something is wrong with the chap-secrets file but I have
> > checked and double checked it.  I even tried using the "billy   servername
> > bob     *" from the setup instructions but to no avail.  Any help would be
> > appreciated.
> >
> > /etc/ppp/options
> >
> > debug
> > name fire
> > auth
> > require-chap
> > proxyarp
> 
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> List services provided by www.schulte.org!
> 
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> List services provided by www.schulte.org!