[pptp-server] problems with win2k client

Tue Dec 11 21:44:03 CST 2001

If your using Win98, the dial up networking has the option of Log onto
Network which I don't know if this will work but could try...

Winnt or 2K has a "include windows logon domain" , this also I haven't
tested...

But like I said, try if you can to create an account with the same vpn
client account and it might work, then at least you know why it's not
working and have to resolve it another way...

I have my login at home the same as at work and it's fine... can't explain
your problem though.. sorry if this is alot of typing for nothing...

thanks,
George Vieira
Systems Manager
Citadel Computer Systems P/L

-----Original Message-----
From: alan premselaar [mailto:alien at 12inch.com]
Sent: Wednesday, 12 December 2001 2:38 PM
To: George Vieira
Cc: PPTP List (E-mail)
Subject: RE: [pptp-server] problems with win2k client

ok, that'll take me some time to accomplish...

assuming that *is* the case, is there a way to get it to authenticate to 
the domain username/passwd, etc.?

thanks,

alan

At 2:33午後 +1100 12.12.01, George Vieira wrote:
>OK.. it's probably because your workstations don't have an account for you
>locally on their machine and your not logged into the domain so your
>authenticating on "username" and not "domain/username" which the
>workstations are trusting you on... get it..
>
>
>test this: Get a workstation to add your username locally on their PC with
>the same login and password as the username password your vpn client is
>logged in... then try it to that workstation..
>
>ANOTHER thing: try mapping a share on a workstation and click the
"different
>username" and selected Administrator and password..
>
>Obviously you need administrator priveledges but this is JUST to test
what's
>going on..
>
>
>My guess is that the workstations are authenticating you on the machine
>login which is not on the domain itself..
>
>
>thanks,
>George Vieira
>Systems Manager
>Citadel Computer Systems P/L
>
>
>-----Original Message-----
>From: alan premselaar [mailto:alien at 12inch.com]
>Sent: Wednesday, 12 December 2001 2:29 PM
>To: George Vieira
>Subject: RE: [pptp-server] problems with win2k client
>
>
>I have a domain account (actually, i guess it's active directory)  ...
>they're all win2k machines
>
>i get error 5: access denied
>
>when i try "net view <ipaddress>" or "net view ¥¥<ipaddress>"
>
>alan
>
> >Do you have an account on the server? Are all of these NT type machines
or
> >any of them Windows 98?
> >
> >OK, can you try by IP address?
> >
> >net view ¥¥10.10.10.10
> >
> >or something..
> >
> >
> >thanks,
> >George Vieira
> >Systems Manager
> >Citadel Computer Systems P/L
> >
> >
> >-----Original Message-----
> >From: alan premselaar [mailto:alien at 12inch.com]
> >Sent: Wednesday, 12 December 2001 1:41 PM
> >To: George Vieira; pptp-server at lists.schulte.org
> >Subject: RE: [pptp-server] problems with win2k client
> >
> >
> >George,
> >
> >   Thanks for the reply.  I've double-checked and I'm resolving names
> >properly. i'm able to ping the host(s) no problem, but i don't get any
> >response from "net view ¥¥hostname" or the network neighborhood... (and
it
> >takes its time to timeout)
> >
> >in explorer (network neighborhood) it times out and returns with "can't
> >access ¥¥<hostname>.  can't find network path"  (this is a loose
> >translation as i'm using a japanese operating system on the w2k machine)
> >
> >from "net view ¥¥<hostname>" i get:
> >
> >system error 1311: (a bunch of japanese i *can't* read) and "no login
> >server"
> >
> >
> >any other ideas?
> >
> >alan
> >
> >At 1:22午後 +1100 12.12.01, George Vieira wrote:
> > >firstly, localip and remoteip is for pptpd.conf not
>/etc/ppp/options.pptpd
> > >or whatever.
> > >
> > >You may be having a name resolution problem with the neighbourhood
> >problem..
> > >you get the list but it doesn't know how to get there...
> > >can you ping them or even net view ¥¥machinename it at all??
> > >
> > >
> > >thanks,
> > >George Vieira
> > >Systems Manager
> > >Citadel Computer Systems P/L
> > >
> > >
> > >-----Original Message-----
> > >From: alan premselaar [mailto:alien at 12inch.com]
> > >Sent: Wednesday, 12 December 2001 1:16 PM
> > >To: pptp-server at lists.schulte.org
> > >Subject: [pptp-server] problems with win2k client
> > >
> > >
> > >I'm running a redhat linux 6.2 installation with the 2.2.19 kernel
> > >(downloaded and compiled from source)
> > >i've installed pptpd-1.1.2 and pppd 2.3.11 (with the mppe and ms-chapv2
> > >patches)
> > >
> > >i've got 3 ethernet cards installed in the machine, 1 setup on the DMZ,
1
> > >on the local internal network (192.168.0.x), and 1 configured as a
> > >completely different (192.168.254.x) network for testing purposes.
> > >
> > >I've setup a PC running win2k pro on the 192.168.254.x network as a
test
> > >connection machine.
> > >
> > >i have a couple of seperate problems, i think.
> > >
> > >Firstly, In all the documentation i've read, and the mail on this list,
> > >people keep making reference to setting "localip <ip>" and "remoteip
><ip>"
> > >in the options.pptp file (or /etc/ppp/options file) ... whenever I do
>that,
> > >PPP barfs saying that it's an invalid option.  i'm a little confused by
> > >that, but it's not my main problem.
> > >
> > >
> > >the main problem i'm having is this:
> > >
> > >I can connect via the test vpn from my win2k client.  I can connect to
my
> > >exchange server no problem.  when I open the network neighborhood (or
> > >whatever it's called in w2k) i can see my domain(s) and all the
computers
> > >in the domain show up when i double-click the domain name... (so far so
> > >good) ... however, when i double-click any of the computers I can't
> >connect.
> > >
> > >for the purpose of the testing, i have my password in the chap-secrets
>file
> > >set identically to my domain-login password, and my username set
> > >identically to my domain-username.  also, for the time being, I have my
> > >firewall disabled on this machine (i can worry about firewalling once
>I've
> > >gotten the configuration working)
> > >
> > >this seems to be the case regardless of whether or not I've got samba
> > >running on the linux machine.  (I've tried both ways)
> > >
> > >also note that I have added the following rules in my ipchains:
> > >
> > >ipchains -I forward 1 -s 192.168.0.0/24 -d 192.168.0.0/24 -j ACCEPT
> > >ipchains -I forward 2 -s 192.168.0.0/24 -j MASQ
> > >
> > >
> > >*EVERYTHING* (as far as i can tell) aside from the network browsing is
> > >working properly thru the vpn.
> > >
> > >any advice, assistance, ritual dance recommendation, etc. are greatly
> > >appreciated.
> > >
> > >
> > >thanks in advance
> > >
> > >alan premselaar
> > >----
> > >  there's nothing like the undying sense of reliability provided by
>modern
> > >technology.
> > >----
> > >alan premselaar
> > >alien at 12inch.com
> > >www.12inch.com
> > >_______________________________________________
> > >pptp-server maillist  -  pptp-server at lists.schulte.org
> > >http://lists.schulte.org/mailman/listinfo/pptp-server
> > >--- To unsubscribe, go to the url just above this line. --
> > >_______________________________________________
> > >pptp-server maillist  -  pptp-server at lists.schulte.org
> > >http://lists.schulte.org/mailman/listinfo/pptp-server
> > >--- To unsubscribe, go to the url just above this line. --
> >
> >----
> >  there's nothing like the undying sense of reliability provided by
modern
> >technology.
> >----
> >alan premselaar
> >alien at 12inch.com
> >www.12inch.com
>
>----
>  there's nothing like the undying sense of reliability provided by modern
>technology.
>----
>alan premselaar
>alien at 12inch.com
>www.12inch.com

----
  there's nothing like the undying sense of reliability provided by modern 
technology.
----
alan premselaar
alien at 12inch.com
www.12inch.com