[pptp-server] Patch blank password/username

[Robert Dege]

Okay, Here are the results of the 2 patches (btw, neither of them worked).
The header of each log chunk shows what user/pass was used.  I will say 
this, the DUN connection
exited extremely quickly.  It didn't feel like it had gotten to the 
username/password lookup query.

                            1st Patch used
===========================================================================
blank/blank
Mar  7 11:27:52 warf pptpd[3009]: CTRL: Client 1.2.3.4 control 
connection started
Mar  7 11:27:52 warf pptpd[3009]: CTRL: Starting call (launching pppd, 
opening GRE)
Mar  7 11:27:52 warf pppd[3010]: no secret in samba secret file 
/etc/smbpasswd
Mar  7 11:27:52 warf pptpd[3009]: Buffering out-of-order packet; got 1 
after 4294967295
Mar  7 11:27:52 warf pptpd[3009]: Error reading from pppd: Input/output 
error
Mar  7 11:27:52 warf pptpd[3009]: CTRL: GRE read or PTY write failed 
(gre,pty)=(6,5)
Mar  7 11:27:52 warf pptpd[3009]: CTRL: Client 1.2.3.4 control 
connection finished


rcd/mypass
Mar  7 11:28:10 warf pptpd[3011]: CTRL: Client 1.2.3.4 control 
connection started
Mar  7 11:28:10 warf pptpd[3011]: CTRL: Starting call (launching pppd, 
opening GRE)
Mar  7 11:28:10 warf pppd[3012]: no secret in samba secret file 
/etc/smbpasswd
Mar  7 11:28:10 warf pptpd[3011]: Error reading from pppd: Input/output 
error
Mar  7 11:28:10 warf pptpd[3011]: CTRL: GRE read or PTY write failed 
(gre,pty)=(6,5)
Mar  7 11:28:10 warf pptpd[3011]: CTRL: Client 1.2.3.4 control 
connection finished


attic/storage
Mar  7 11:28:35 warf pptpd[3013]: CTRL: Client 1.2.3.4 control 
connection started
Mar  7 11:28:35 warf pptpd[3013]: CTRL: Starting call (launching pppd, 
opening GRE)
Mar  7 11:28:35 warf pppd[3014]: no secret in samba secret file 
/etc/smbpasswd
Mar  7 11:28:35 warf pptpd[3013]: Error reading from pppd: Input/output 
error
Mar  7 11:28:35 warf pptpd[3013]: CTRL: GRE read or PTY write failed 
(gre,pty)=(6,5)
Mar  7 11:28:35 warf pptpd[3013]: CTRL: Client 1.2.3.4 control 
connection finished




                            2nd Patch used
===========================================================================

rcd/mypass
Mar  7 11:32:35 warf pptpd[3247]: CTRL: Client 1.2.3.4 control 
connection started
Mar  7 11:32:35 warf pptpd[3247]: CTRL: Starting call (launching pppd, 
opening GRE)
Mar  7 11:32:35 warf pppd[3248]: no secret in samba secret file 
/etc/smbpasswd
Mar  7 11:32:35 warf pptpd[3247]: Error reading from pppd: Input/output 
error
Mar  7 11:32:35 warf pptpd[3247]: CTRL: GRE read or PTY write failed 
(gre,pty)=(6,5)
Mar  7 11:32:35 warf pptpd[3247]: CTRL: Client 1.2.3.4 control 
connection finished


blank/blank
Mar  7 11:32:57 warf pptpd[3249]: CTRL: Client 1.2.3.4 control 
connection started
Mar  7 11:32:57 warf pptpd[3249]: CTRL: Starting call (launching pppd, 
opening GRE)
Mar  7 11:32:57 warf pppd[3250]: no secret in samba secret file 
/etc/smbpasswd
Mar  7 11:32:57 warf pptpd[3249]: Error reading from pppd: Input/output 
error
Mar  7 11:32:57 warf pptpd[3249]: CTRL: GRE read or PTY write failed 
(gre,pty)=(6,5)
Mar  7 11:32:57 warf pptpd[3249]: CTRL: Client 1.2.3.4 control 
connection finished


attic/storage
Mar  7 11:33:13 warf pptpd[3251]: CTRL: Client 1.2.3.4 control 
connection started
Mar  7 11:33:13 warf pptpd[3251]: CTRL: Starting call (launching pppd, 
opening GRE)
Mar  7 11:33:13 warf pppd[3252]: no secret in samba secret file 
/etc/smbpasswd
Mar  7 11:33:13 warf pptpd[3251]: Buffering out-of-order packet; got 1 
after 4294967295
Mar  7 11:33:13 warf pptpd[3251]: Error reading from pppd: Input/output 
error
Mar  7 11:33:13 warf pptpd[3251]: CTRL: GRE read or PTY write failed 
(gre,pty)=(6,5)
Mar  7 11:33:13 warf pptpd[3251]: CTRL: Client 1.2.3.4 control 
connection finished



                            No Patch used (Only Justin's Patch 
implemented here)
===========================================================================

blank/blank
Mar  7 11:35:39 warf pptpd[3478]: CTRL: Client 1.2.3.4 control 
connection started
Mar  7 11:35:39 warf pptpd[3478]: CTRL: Starting call (launching pppd, 
opening GRE)
Mar  7 11:35:39 warf pppd[3479]: pppd 2.3.11 started by root, uid 0
Mar  7 11:35:39 warf pppd[3479]: Using interface ppp0
Mar  7 11:35:39 warf pppd[3479]: Connect: ppp0 <--> /dev/pts/3
Mar  7 11:35:39 warf pptpd[3478]: Buffering out-of-order packet; got 1 
after 4294967295
Mar  7 11:35:39 warf pptpd[3478]: Packet reorder timeout waiting for 0
Mar  7 11:35:39 warf pptpd[3478]: Buffering out-of-order packet; got 2 
after 0
Mar  7 11:35:39 warf pppd[3479]: Blank Password Detected -- Forcing 
Authentication Failure for
Mar  7 11:35:39 warf pppd[3479]: MSCHAP-v2 peer authentication failed 
for remote host
Mar  7 11:35:39 warf pppd[3479]: Connection terminated.
Mar  7 11:35:39 warf pppd[3479]: Exit.
Mar  7 11:35:39 warf pptpd[3478]: Error reading from pppd: Input/output 
error
Mar  7 11:35:39 warf pptpd[3478]: CTRL: GRE read or PTY write failed 
(gre,pty)=(6,5)
Mar  7 11:35:39 warf pptpd[3478]: CTRL: Client 1.2.3.4 control 
connection finished


rcd/mypass
Mar  7 11:36:07 warf pptpd[3481]: CTRL: Client 1.2.3.4 control 
connection started
Mar  7 11:36:07 warf pptpd[3481]: CTRL: Starting call (launching pppd, 
opening GRE)
Mar  7 11:36:07 warf pppd[3482]: pppd 2.3.11 started by root, uid 0
Mar  7 11:36:07 warf pppd[3482]: Using interface ppp0
Mar  7 11:36:07 warf pppd[3482]: Connect: ppp0 <--> /dev/pts/3
Mar  7 11:36:07 warf pptpd[3481]: Buffering out-of-order packet; got 1 
after 4294967295
Mar  7 11:36:10 warf pptpd[3481]: Packet reorder timeout waiting for 0
Mar  7 11:36:10 warf pptpd[3481]: Buffering out-of-order packet; got 2 
after 0
Mar  7 11:36:10 warf kernel: PPP BSD Compression module registered
Mar  7 11:36:10 warf kernel: PPP MPPE compression module registered
Mar  7 11:36:10 warf kernel: PPP Deflate Compression module registered
Mar  7 11:36:10 warf pppd[3482]: MSCHAP-v2 peer authentication succeeded 
for rcd
Mar  7 11:36:10 warf pppd[3482]: found interface eth0 for proxy arp
Mar  7 11:36:10 warf pppd[3482]: local  IP address 172.28.254.46
Mar  7 11:36:10 warf pppd[3482]: remote IP address 172.28.141.41
Mar  7 11:36:10 warf pppd[3482]: MPPE 40 bit, stateless compression enabled
Mar  7 11:36:10 warf pppd[3482]: stateless MPPE enforced


attic/storage
Mar  7 11:36:53 warf pptpd[3529]: CTRL: Client 1.2.3.4 control 
connection started
Mar  7 11:36:53 warf pptpd[3529]: CTRL: Starting call (launching pppd, 
opening GRE)
Mar  7 11:36:53 warf pppd[3530]: pppd 2.3.11 started by root, uid 0
Mar  7 11:36:53 warf pppd[3530]: Using interface ppp0
Mar  7 11:36:53 warf pppd[3530]: Connect: ppp0 <--> /dev/pts/3
Mar  7 11:36:53 warf pptpd[3529]: Buffering out-of-order packet; got 1 
after 4294967295
Mar  7 11:36:56 warf pptpd[3529]: Packet reorder timeout waiting for 0
Mar  7 11:36:56 warf pptpd[3529]: Buffering out-of-order packet; got 2 
after 0
Mar  7 11:36:56 warf pppd[3530]: MSCHAP-v2 peer authentication succeeded 
for attic
Mar  7 11:36:57 warf pppd[3530]: found interface eth0 for proxy arp
Mar  7 11:36:57 warf pppd[3530]: local  IP address 172.28.254.46
Mar  7 11:36:57 warf pppd[3530]: remote IP address 172.28.141.40
Mar  7 11:36:57 warf pppd[3530]: MPPE 40 bit, stateless compression enabled
Mar  7 11:36:57 warf pppd[3530]: stateless MPPE enforced



Sorry for the lengthy post.  Hope this helps though

-Rob


Godfrey Livingstone wrote:

> Robert the patch works for me the fact that it does not work for you concerns me I have
> just tried it using win9x and it works I do not get the error messages if there is a
> match.
> 
> Did you download it using netscape by chance as netscape mangles patches?
> 
> Any way if you have time can you try using wget or lynx to get the patch from
> 
> http://www.hattaway.co.nz/raidpatches/blank_passwd_fix.diff
> 
> I have also created what I think is a better patch if you would like to try
> 
> http://www.hattaway.co.nz/raidpatches/blank_passwd_fix2.diff
> 
> this tidies up the while loop considerably and should be faster.
> 
> Godfrey
> 
> Robert Dege wrote:
>