[pptp-server] Has anyone seen this error?

[Cowles, Steve]

> -----Original Message-----
> From: Charles Blackburn [mailto:charlesb at summerfieldtechnology.co.uk]
> Sent: Wednesday, March 22, 2000 4:14 PM
> To: Christopher Tarricone
> Cc: PPTP Mailling List
> Subject: Re: [pptp-server] Has anyone seen this error?
> 
> 
> On Tue, 21 Mar 2000, Christopher Tarricone wrote:
> > authenticate itself but I
> > Mar 21 15:18:24 chaos pppd[3838]: couldn't find any suitable secret
> > (password) for it to use to do so.
> > Mar 21 15:18:24 chaos pptpd[3837]: GRE:
> > read(fd=4,buffer=804d7e0,len=8196) from PTY failed: status 
> = -1 error =
> > Input/output error
> > Mar 21 15:18:24 chaos pptpd[3837]: CTRL: PTY read or GRE 
> write failed
> > (pty,gre)=(4,5)
> > Mar 21 15:18:24 chaos pptpd[3837]: CTRL: Client 63.89.28.221 control
> > connection finished
> 
> Yes, I've been getting the same thing, check cap-secrets, 
> check the win98
> settings. I've managed to get around it by bypassing the 
> authentication by
> addid a noauth to /etc/ppp/options file instead of the auth 
> line that is
> reccommended.
> 
> I haven't found another way around it.
> 

I had the same problem, initially... It ended up being a configuration
problem at the Poptop/pppd server.

First, you should not have to put the Poptop/pppd server in "noauth" mode.
The server at least needs to authenticate who is trying to connect to it. 

FWIW: The pptp clients running (win98/WinNT/2000) OS's all operate in
"noauth" mode. If your using the linux pptp client... it's /etc/ppp/options
file will need to be set to "noauth" mode. The same mode that Win98/NT/2000
clients are operating in.

For Refernece: My PopTop server has the following chap-secrets/options file.
I have tested this for Win98/NT/2000 Workstation and the linux pptp clients.

->>>> /etc/ppp/otions (server side)<<<<-
lock
auth
name voyager
ms-dns 192.168.9.3
ms-dns 192.168.9.2
ms-wins 192.168.9.2
+chap
+chapms
+chapms-v2
mppe-40
mppe-128
mppe-stateless
proxyarp

->>>> /etc/ppp/chap-secrets (server side)<<<<-
scowles  * password *
COWLES\\scowles  * password *

I include both username and MS_DOMAIN\\username entries for the MS clients
that have the "Use my Windows Login Name and password (and Domain if
supplied)" selected in their dialup profile. Especially for NT/2000 based
clients that normally authenticate to MS Domains when connected to a LAN.
(Like a Laptop) 

Steve Cowles