[pptp-server] pptp client - FAQ stuff

[Cowles, Steve]

Neale,

I agree... My goal at this end is to 

1) Establish a "baseline" configuration for the PPTP servers. (both NT and
PopTop/pppd) Right now my pppd server is setup per the PopTop Howto on the
WEB page. e.g. The options file and the chap-secrets file structure along
with all of the proper patching. My NT RAS server is a member of an NT
domain. All authentication will require the DOMAIN\\loginame.

2) Provide you with some "real world" examples of the chap-secrets and
options files on both the client/server sides. Hopefully, I will be able to
correlate the "debug" output per each test. I will be asking each tester to
tarball up each attempt. e.g. The current options file/chap-secrets file,
pptp command line used and the "debug" output for that attempt. Hopefully, I
will not have to make changes to the options file at this end, but if I
do... I will make sure this information is relayed back so that the PopTop
WEB site howto can be updated.

3) As a "personal" target of these tests, I would like to fully understand
the pppd options name/remotename/user and how that information is
interpreted by the pptp server/client. I really struggled on this
(especially with NT RAS). Like what line was actually being matched in the
chap-secrets file based on the supplied pppd options. This info might make
for a good "appendix" section. Again, this is my personal target, but I
think this information might help others when trying to debug new
Poptop/pppd installations.

4) The MS factor.... All the different versions of MS's dialup networking
(WIN98/NT 4.0 )and the patches that have been applied to the MS client.
Although this might be a little out of scope for these tests, I think this
info might be useful for baselining on the client side.

Feedback...

Steve Cowles

-----Original Message-----
From: Neale Banks [mailto:neale at lowendale.com.au]
Sent: Thursday, February 24, 2000 8:11 AM
To: Cowles, Steve
Subject: RE: [pptp-server] pptp client - FAQ stuff


Hi Steve,

I haven't been ignoring you, just horribly busy this week {:-(

> I know this question is being asked alot in this group lately. In fact, I
> had the same problem two weeks ago... Since Neale Banks has a good start
on
> trying to document these types of questions, I think what we need to do is
> add some "definitive" examples (not guesses) on how to configure linux to
be
> a client for both a PopTop/PPPD and NT  based servers. 

Definitely, I'm happy to hav set something constructive going here :-)

Whilst I can't do much time-wise right now (just finishing a *busy* week;
about to take the family away for a 4-day weekend; contemplating a busy
week next week fitting in the things that didn't happen this week...) I'd
like to retain some kind of involvement.  Perhaps an editor/compiler
trying to make a cohesive picture of the definitive data from various
contributors?

FWIW, I did manage to steal some time to eyeball the (now aging) PPP FAQ -
there is some good stuff there but also at least one major point that I
dispute (the PPP FAQ's assertion that CHAP *must* be bidirectional
authentication - IMHO that's just plain wrong).

If this is to go forward, the first things should include getting a
consensus on:

* an achievable target, and
* a reasonable dividing up of who can do what

Regards,
Neale.