[pptp-server] pptp client

Sat Nov 25 21:43:01 CST 2000

Hi George (what a great name ey!?),

If these logs are on the clients side you'll notice that your linux box
(client) wants the PPTP server to authenticate too as well as the server
wants the client to....

<snip>
   Nov 25 10:45:26 gcfirewall pppd[11706]: peer refused to authenticate:
terminating link
</snip>

Try using "noauth" with the pppd options on the client side as this will
stop making the client as authnetication from the server....

-----Original Message-----
From: george.csahanin at lintv.com [mailto:george.csahanin at lintv.com]
Sent: Sunday, November 26, 2000 2:58 AM
To: pptp-server at lists.schulte.org
Subject: [pptp-server] pptp client

I've setup poptop on my netmax firewall, and I can get into it fine fron
windoze bozes...but trying to get in with pptp from a linux box is just not
going anywhere fast. I went thru this once before and made no notes...maybe
someone out yonder has seen this:

As I said, in from windoze ok, in from pptp in linux yields an error that
seems to be failure of peer to authenticate:

One episode from log:

Nov 25 10:45:21 gcfirewall pptpd[11705]: MGR: Launching /usr/sbin/pptpctrl
to handle client
Nov 25 10:45:21 gcfirewall pptpd[11705]: CTRL: local address = 192.168.1.30
Nov 25 10:45:21 gcfirewall pptpd[11705]: CTRL: remote address = 192.168.1.20
Nov 25 10:45:21 gcfirewall pptpd[11705]: CTRL: pppd speed = 115200
Nov 25 10:45:21 gcfirewall pptpd[11705]: CTRL: pppd options file =
/etc/ppp/options
Nov 25 10:45:21 gcfirewall pptpd[11705]: CTRL: Client 192.168.1.8 control
connection started
Nov 25 10:45:21 gcfirewall pptpd[11705]: CTRL: Received PPTP Control Message
(type: 1)
Nov 25 10:45:21 gcfirewall pptpd[11705]: CTRL: Made a START CTRL CONN RPLY
packet
Nov 25 10:45:21 gcfirewall pptpd[11705]: CTRL: I wrote 156 bytes to the
client.
Nov 25 10:45:21 gcfirewall pptpd[11705]: CTRL: Sent packet to client
Nov 25 10:45:22 gcfirewall pptpd[11705]: CTRL: Received PPTP Control Message
(type: 7)
Nov 25 10:45:22 gcfirewall pptpd[11705]: CTRL: Set parameters to 152 maxbps,
3 window size
Nov 25 10:45:22 gcfirewall pptpd[11705]: CTRL: Made a OUT CALL RPLY packet
Nov 25 10:45:22 gcfirewall pptpd[11705]: CTRL: Starting call (launching
pppd, opening GRE)
Nov 25 10:45:22 gcfirewall pptpd[11705]: CTRL: pty_fd = 5
Nov 25 10:45:22 gcfirewall pptpd[11705]: CTRL: tty_fd = 6
Nov 25 10:45:22 gcfirewall pptpd[11705]: CTRL: I wrote 32 bytes to the
client.
Nov 25 10:45:22 gcfirewall pptpd[11705]: CTRL: Sent packet to client
Nov 25 10:45:22 gcfirewall pptpd[11706]: CTRL (PPPD Launcher): Connection
speed = 115200
Nov 25 10:45:22 gcfirewall pptpd[11706]: CTRL (PPPD Launcher): local address
= 192.168.1.30
Nov 25 10:45:22 gcfirewall pptpd[11706]: CTRL (PPPD Launcher): remote
address = 192.168.1.20
Nov 25 10:45:22 gcfirewall modprobe: can't locate module char-major-108
Nov 25 10:45:22 gcfirewall pppd[11706]: pppd 2.3.10 started by root, uid 0
Nov 25 10:45:22 gcfirewall pppd[11706]: Using interface ppp0
Nov 25 10:45:22 gcfirewall pppd[11706]: Connect: ppp0 <--> /dev/pts/3
Nov 25 10:45:23 gcfirewall pppd[11706]: Warning - secret file
/etc/ppp/pap-secrets has world and/or group access
Nov 25 10:45:23 gcfirewall pppd[11706]: sent [LCP ConfReq id=0x1 <asyncmap
0x0> <auth chap MD5> <magic 0x6b15ee4f> <pcomp> <accomp>]
Nov 25 10:45:24 gcfirewall pptpd[11705]: GRE: Discarding duplicate packet
Nov 25 10:45:25 gcfirewall pppd[11706]: rcvd [LCP ConfReq id=0x1 <asyncmap
0x0> <auth chap MD5> <magic 0xa5abb9c0> <pcomp> <accomp>]
Nov 25 10:45:25 gcfirewall pppd[11706]: sent [LCP ConfRej id=0x1 <auth chap
MD5>]
Nov 25 10:45:25 gcfirewall pppd[11706]: rcvd [LCP ConfReq id=0x2 <asyncmap
0x0> <magic 0xa5abb9c0> <pcomp> <accomp>]
Nov 25 10:45:25 gcfirewall pppd[11706]: sent [LCP ConfAck id=0x2 <asyncmap
0x0> <magic 0xa5abb9c0> <pcomp> <accomp>]
Nov 25 10:45:26 gcfirewall pppd[11706]: sent [LCP ConfReq id=0x1 <asyncmap
0x0> <auth chap MD5> <magic 0x6b15ee4f> <pcomp> <accomp>]
Nov 25 10:45:26 gcfirewall pppd[11706]: rcvd [LCP ConfRej id=0x1 <auth chap
MD5>]
Nov 25 10:45:26 gcfirewall pppd[11706]: sent [LCP ConfReq id=0x2 <asyncmap
0x0> <magic 0x6b15ee4f> <pcomp> <accomp>]
Nov 25 10:45:26 gcfirewall pppd[11706]: rcvd [LCP ConfAck id=0x2 <asyncmap
0x0> <magic 0x6b15ee4f> <pcomp> <accomp>]
Nov 25 10:45:26 gcfirewall pppd[11706]: Warning - secret file
/etc/ppp/pap-secrets has world and/or group access
Nov 25 10:45:26 gcfirewall pppd[11706]: peer refused to authenticate:
terminating link
Nov 25 10:45:26 gcfirewall pppd[11706]: sent [LCP TermReq id=0x3 "peer
refused to authenticate"]
Nov 25 10:45:26 gcfirewall pppd[11706]: rcvd [LCP TermReq id=0x3 "peer
refused to authenticate"]
Nov 25 10:45:26 gcfirewall pppd[11706]: sent [LCP TermAck id=0x3]
Nov 25 10:45:26 gcfirewall pppd[11706]: rcvd [LCP TermAck id=0x3]
Nov 25 10:45:26 gcfirewall pppd[11706]: Connection terminated.
Nov 25 10:45:26 gcfirewall pppd[11706]: Exit.
Nov 25 10:45:26 gcfirewall pptpd[11705]: GRE:
read(fd=5,buffer=804d7e0,len=8196) from PTY failed: status = -1 error =
Input/output error
Nov 25 10:45:26 gcfirewall pptpd[11705]: CTRL: PTY read or GRE write failed
(pty,gre)=(5,6)
Nov 25 10:45:26 gcfirewall pptpd[11705]: CTRL: Client 192.168.1.8 control
connection finished
Nov 25 10:45:26 gcfirewall pptpd[11705]: CTRL: Exiting now
Nov 25 10:45:26 gcfirewall pptpd[26741]: MGR: Reaped child 11705
Nov 25 10:49:30 gcfirewall inetd[16258]: smtp/tcp: bind: Address already in
use
[root at gcfirewall log]# 

/etc/ppp/options:

[root at gcfirewall log]# more /etc/ppp/options  
debug
name gcfirewall.bdfrd1.tx.home.com
auth
#+chap
require-chap
proxyarp
[root at gcfirewall log]#

/etc/pptpd.conf:
[root at gcfirewall log]# more /etc/pptpd.conf
speed 115200

option /etc/ppp/options

debug

localip 192.168.1.30-34
remoteip 192.168.1.20-24

listen 192.168.1.1

pidfile /var/run/pptpd.pid

ANyone have any ideas?

-George Csahanin
georgec2 at ix.netcom.com <mailto:georgec2 at ix.netcom.com> 