[pptp-server] encryption problems ...

[Jean-Paul Chavant]

hello,

i have installed pptp 1.0.0 (rpm version) on linux 2.2.14 with ppp2.3.10
(patched with ppp-2.3.10-openssl-norc4-mppe.patch) and SSLeay-0.9.0b (i
don't find 0.6.0 version).

compilation was fine (i have to copy rc4_locl.h from SSL in
/usr/src/linux/drivers/net ...)

and i can't do depmod -a , error :
/lib/modules/2.2.14-15mdk/net/ppp_mppe.o: unresolved symbol(s)

when i connect a Win95 client (with DUN 1.3 + vpnupdate + Y2k patch) without
encryption it works fine.

When i enable encryption on my pptpd server the client connect without
encryption ... :(

here is the log :

Jun 21 14:30:15 apollon pptpd[25849]: CTRL: Client 192.168.3.101 control
connect
ion started
Jun 21 14:30:15 apollon pptpd[25849]: CTRL: Starting call (launching pppd,
openi
ng GRE)
Jun 21 14:30:15 apollon pppd[25850]: pppd 2.3.10 started by aroot, uid 0
Jun 21 14:30:15 apollon pppd[25850]: Using interface ppp0
Jun 21 14:30:15 apollon pppd[25850]: Connect: ppp0 <--> /dev/pts/8
Jun 21 14:30:16 apollon insmod: /lib/modules/2.2.14-15mdk/net/ppp_mppe.o:
unreso
lved symbol RC4_set_key
Jun 21 14:30:16 apollon insmod: /lib/modules/2.2.14-15mdk/net/ppp_mppe.o:
unreso
lved symbol RC4_set_key
Jun 21 14:30:16 apollon pppd[25850]: MSCHAP-v2 peer authentication succeeded
for
 test
Jun 21 14:30:16 apollon insmod: /lib/modules/2.2.14-15mdk/net/ppp_mppe.o:
unreso
lved symbol RC4_set_key
Jun 21 14:30:16 apollon pppd[25850]: Cannot determine ethernet address for
proxy
 ARP
Jun 21 14:30:16 apollon pppd[25850]: local  IP address 192.168.0.1
Jun 21 14:30:16 apollon pppd[25850]: remote IP address 192.168.1.1
Jun 21 14:30:16 apollon pppd[25850]: CCP terminated by peer
Jun 21 14:30:16 apollon pppd[25850]: Compression disabled by peer.

here is my /etc/ppp/options file :

lock
debug
auth
+chap
proxyarp
+chapms
+chapms-v2
mppe-40
mppe-128
mppe-stateless

how can i force the client to use encryption ?
could someone help me ...

Another question is ... After ppp authetification how can i force client to
authentificate himself on an NT server ?

Jean-Paul

  _-----_	      GEOSYS SA - Service Informatique
 (_/   \_)	      Tél.: (0) 5 62 47 80 75
  (_____) \/\/\___ http://www.geosys.fr/