[pptp-server] FW: MsChapv2, RFC2759

[Justin Kreger]

You may want to go talk to one of the Samba or Samba-TNG people, because
MSChapV2 is basiclly.... NTLMv2 over a ppp link, or you could go take a
look at the samba code for NTLMv2 authentication......

To be honest, I have never had problems logging win2k boxes onto a Linux
ppp connection, being it a tunnel, or a dialup connection using MSChapV2.

Justin Kreger, MCP MCSE CCNA
jkreger at earthling.2y.net jwkreger at uncg.edu


On Fri, 11 May 2001, Varrian Hall wrote:

> 
> 
> >  -----Original Message-----
> > From: 	Varrian Hall  
> > Sent:	Monday, April 09, 2001 9:52 AM
> > To:	Varrian Hall
> > Subject:	MsChapv2, RFC2759
> > 
> > 
> > 
> > 
> > Hello Everyone,
> > 
> > My name is Varrian Hall.  I am in great need of MSChapv2 assistance.
> > Presently, my authenticator calculation(20 octets made into 40 hex digits:
> > "S=40 hex digits") does not equal the 40 Hex digit(excluding "S=")
> > response.  I have written my code based on RFC2759.  My
> > GenerateAuthenticatorResponse( ) function is where the problem lies.
> > Again, it's based on the GenerateAuthenticatorResponse(  ) function in
> > RFC2759.  I'm thinking it must be a new update, because some of the code
> > in GenerateAuthenticatorResponse( ) is used elsewhere and it is working
> > fine.  The SHA.. functions are in ChallengeHash and it works fine.  The
> > MD4.. functions are in NTPasswordHash, and it works fine.  My problem is
> > in the last SHA_Final function call in GenerateAuthenticatorResponse( )
> > that produces the 20 octet result.  This result(expanded to 40 octets)
> > never matches the result sent to me from a Win2K pc.  
> > These results have to match in order for the server/client to be
> > authenticated.   
> > Could you please help [Varrian Hall]  .  Any newsgroups or websites you
> > know of would be greatly appreciated.
> > 
> thanks, 
> 
> >     varrianh at computone.com
> >     Varrian Hall
> >     Computone Corp
> >    770 625 0000  x1201
>