Newsgroup: it.comp.os.linux.sys
Titolo: Problema autenticazione pptpd

Ho una Suse 10.0 con kernel aggiornato a 2.6.18.1, pptpd 2.4.3
E' da un pezzo che sto tentando di far funzionare pptpd.
Ho questo log di errore, in base al messaggio MPPE required, but MS-CHAP[v2]
auth not performed.
sembra che ci sia un problema di autenticazione. Ho variato n volte le
combinazioni di autenticazione sia lato client che server, modificando i
file manualmente che tramite webmin ma senza esito. Qualcuno mi sa dare una
mano? Non posso usare openvpn in quanto devo andare in sostituzione di un
server win2000.
Grazie.
Nov  7 22:58:06 test pptp[11345]: anon log[main:pptp.c:267]: The synchronous
pptp option is NOT activated
Nov  7 22:58:06 test pptp[11348]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent
control packet type is 1 'Start-Control-Connection-Request'
Nov  7 22:58:06 test pptpd[11349]: MGR: Launching /usr/sbin/pptpctrl to
handle client
Nov  7 22:58:06 test pptpd[11349]: CTRL: local address = 10.100.0.2
Nov  7 22:58:06 test pptpd[11349]: CTRL: remote address = 10.100.0.50
Nov  7 22:58:06 test pptpd[11349]: CTRL: pppd options file =
/etc/ppp/options.ppp0
Nov  7 22:58:06 test pptpd[11349]: CTRL: Client 10.100.0.2 control
connection started
Nov  7 22:58:06 test pptpd[11349]: CTRL: Received PPTP Control Message
(type: 1)
Nov  7 22:58:06 test pptpd[11349]: CTRL: Made a START CTRL CONN RPLY packet
Nov  7 22:58:06 test pptpd[11349]: CTRL: I wrote 156 bytes to the client.
Nov  7 22:58:06 test pptpd[11349]: CTRL: Sent packet to client
Nov  7 22:58:06 test pptp[11348]: anon log[ctrlp_disp:pptp_ctrl.c:738]:
Received Start Control Connection Reply
Nov  7 22:58:06 test pptp[11348]: anon log[ctrlp_disp:pptp_ctrl.c:772]:
Client connection established.
Nov  7 22:58:07 test pptpd[11349]: CTRL: Received PPTP Control Message
(type: 7)
Nov  7 22:58:07 test pptpd[11349]: CTRL: Set parameters to 10000000 maxbps,
3 window size
Nov  7 22:58:07 test pptpd[11349]: CTRL: Made a OUT CALL RPLY packet
Nov  7 22:58:07 test pptpd[11349]: CTRL: Starting call (launching pppd,
opening GRE)
Nov  7 22:58:07 test pptpd[11349]: CTRL: pty_fd = 4
Nov  7 22:58:07 test pptpd[11349]: CTRL: tty_fd = 5
Nov  7 22:58:07 test pptpd[11350]: CTRL (PPPD Launcher): program binary =
/usr/sbin/pppd
Nov  7 22:58:07 test pptpd[11350]: CTRL (PPPD Launcher): local address =
10.100.0.2
Nov  7 22:58:07 test pptpd[11350]: CTRL (PPPD Launcher): remote address =
10.100.0.50
Nov  7 22:58:07 test pptpd[11349]: CTRL: I wrote 32 bytes to the client.
Nov  7 22:58:07 test pptpd[11349]: CTRL: Sent packet to client
Nov  7 22:58:07 test pppd[11350]: Plugin /usr/lib/pptpd/pptpd-logwtmp.so
loaded.
Nov  7 22:58:07 test pptp[11348]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent
control packet type is 7 'Outgoing-Call-Request'
Nov  7 22:58:07 test pppd[11350]: pptpd-logwtmp: $Version$
Nov  7 22:58:07 test pptp[11348]: anon log[ctrlp_disp:pptp_ctrl.c:857]:
Received Outgoing Call Reply.
Nov  7 22:58:07 test pppd[11350]: pppd options in effect:
Nov  7 22:58:07 test pptp[11348]: anon log[ctrlp_disp:pptp_ctrl.c:896]:
Outgoing call established (call ID 0, peer's call ID 256).
Nov  7 22:58:07 test pppd[11351]: pppd 2.4.3 started by root, uid 0
Nov  7 22:58:07 test pppd[11350]: debug  # (from /etc/ppp/options.ppp0)
Nov  7 22:58:07 test pppd[11350]: dump  # (from /etc/ppp/options.ppp0)
Nov  7 22:58:07 test pppd[11350]: multilink  # (from /etc/ppp/options.ppp0)
Nov  7 22:58:07 test pppd[11350]: plugin /usr/lib/pptpd/pptpd-logwtmp.so  #
(from command line)
Nov  7 22:58:07 test pppd[11350]: noauth  # (from /etc/ppp/options)
Nov  7 22:58:07 test pppd[11350]: refuse-pap  # (from /etc/ppp/options.ppp0)
Nov  7 22:58:07 test pppd[11350]: refuse-eap  # (from /etc/ppp/options.ppp0)
Nov  7 22:58:07 test pppd[11350]: pptpd-original-ip 10.100.0.2  # (from
command line)
Nov  7 22:58:07 test pppd[11350]: 115200  # (from command line)
Nov  7 22:58:07 test pppd[11350]: lock  # (from /etc/ppp/options.ppp0)
Nov  7 22:58:07 test pppd[11350]: local  # (from command line)
Nov  7 22:58:07 test pppd[11350]: -mn  # (from /etc/ppp/options.ppp0)
Nov  7 22:58:07 test pppd[11350]: mru 1490  # (from /etc/ppp/options.ppp0)
Nov  7 22:58:07 test pppd[11350]: mtu 1490  # (from /etc/ppp/options.ppp0)
Nov  7 22:58:07 test pppd[11350]: lcp-echo-failure 30  # (from
/etc/ppp/options.ppp0)
Nov  7 22:58:07 test pppd[11350]: lcp-echo-interval 5  # (from
/etc/ppp/options.ppp0)
Nov  7 22:58:07 test pppd[11350]: ipcp-accept-local  # (from
/etc/ppp/options.ppp0)
Nov  7 22:58:07 test pppd[11351]: using channel 33
Nov  7 22:58:07 test pppd[11350]: ipparam 10.100.0.2  # (from command line)
Nov  7 22:58:07 test pppd[11351]: Using interface ppp0
Nov  7 22:58:07 test pppd[11350]: noipdefault  # (from /etc/ppp/options)
Nov  7 22:58:07 test pppd[11351]: Connect: ppp0 <--> /dev/pts/6
Nov  7 22:58:07 test pppd[11350]: proxyarp  # (from /etc/ppp/options.ppp0)
Nov  7 22:58:07 test pppd[11351]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<magic 0x8d272cff> <pcomp> <accomp>]
Nov  7 22:58:07 test pppd[11350]: usepeerdns  # (from /etc/ppp/options)
Nov  7 22:58:07 test pppd[11350]: 10.100.0.2:10.100.0.50  # (from command
line)
Nov  7 22:58:07 test pppd[11350]: nobsdcomp  # (from /etc/ppp/options.ppp0)
Nov  7 22:58:07 test pppd[11350]: deflate 0  # (from /etc/ppp/options.ppp0)
Nov  7 22:58:07 test pppd[11350]: pppd 2.4.3 started by root, uid 0
Nov  7 22:58:07 test pppd[11350]: using channel 34
Nov  7 22:58:07 test pppd[11350]: Starting negotiation on /dev/pts/7
Nov  7 22:58:07 test pppd[11350]: sent [LCP ConfReq id=0x1 <mru 1490>
<asyncmap 0x0> <pcomp> <accomp> <mrru 1490> <endpoint
[MAC:00:10:5a:de:91:3e]>]
Nov  7 22:58:07 test pptpd[11349]: GRE: Bad checksum from pppd.
Nov  7 22:58:09 test pppd[11350]: rcvd [LCP ConfReq id=0x1 <asyncmap 0x0>
<magic 0x8d272cff> <pcomp> <accomp>]
Nov  7 22:58:09 test pppd[11350]: sent [LCP ConfRej id=0x1 <magic
0x8d272cff>]
Nov  7 22:58:09 test pppd[11351]: rcvd [LCP ConfReq id=0x1 <mru 1490>
<asyncmap 0x0> <pcomp> <accomp> <mrru 1490> <endpoint
[MAC:00:10:5a:de:91:3e]>]
Nov  7 22:58:09 test pppd[11351]: sent [LCP ConfRej id=0x1 <mrru 1490>]
Nov  7 22:58:09 test pppd[11351]: rcvd [LCP ConfRej id=0x1 <magic
0x8d272cff>]
Nov  7 22:58:09 test pppd[11351]: sent [LCP ConfReq id=0x2 <asyncmap 0x0>
<pcomp> <accomp>]
Nov  7 22:58:09 test pppd[11350]: rcvd [LCP ConfRej id=0x1 <mrru 1490>]
Nov  7 22:58:09 test pppd[11350]: sent [LCP ConfReq id=0x2 <mru 1490>
<asyncmap 0x0> <pcomp> <accomp> <endpoint [MAC:00:10:5a:de:91:3e]>]
Nov  7 22:58:09 test pppd[11351]: rcvd [LCP ConfReq id=0x2 <mru 1490>
<asyncmap 0x0> <pcomp> <accomp> <endpoint [MAC:00:10:5a:de:91:3e]>]
Nov  7 22:58:09 test pppd[11351]: sent [LCP ConfAck id=0x2 <mru 1490>
<asyncmap 0x0> <pcomp> <accomp> <endpoint [MAC:00:10:5a:de:91:3e]>]
Nov  7 22:58:09 test pppd[11350]: rcvd [LCP ConfReq id=0x2 <asyncmap 0x0>
<pcomp> <accomp>]
Nov  7 22:58:09 test pppd[11350]: sent [LCP ConfAck id=0x2 <asyncmap 0x0>
<pcomp> <accomp>]
Nov  7 22:58:09 test pppd[11351]: rcvd [LCP ConfAck id=0x2 <asyncmap 0x0>
<pcomp> <accomp>]
Nov  7 22:58:09 test pppd[11351]: MPPE required, but MS-CHAP[v2] auth not
performed.
Nov  7 22:58:09 test pppd[11351]: sent [LCP TermReq id=0x3 "MPPE required
but not available"]
Nov  7 22:58:09 test pppd[11350]: rcvd [LCP ConfAck id=0x2 <mru 1490>
<asyncmap 0x0> <pcomp> <accomp> <endpoint [MAC:00:10:5a:de:91:3e]>]
Nov  7 22:58:09 test pppd[11350]: sent [LCP EchoReq id=0x0 magic=0x0]
Nov  7 22:58:09 test pppd[11350]: Using interface ppp1
Nov  7 22:58:09 test pppd[11350]: sent [IPCP ConfReq id=0x1 <compress VJ 0f
01> <addr 10.100.0.2> <ms-dns1 0.0.0.0> <ms-dns3 0.0.0.0>]
Nov  7 22:58:09 test pppd[11351]: rcvd [LCP EchoReq id=0x0 magic=0x0]
Nov  7 22:58:09 test pppd[11351]: rcvd [IPCP ConfReq id=0x1 <compress VJ 0f
01> <addr 10.100.0.2> <ms-dns1 0.0.0.0> <ms-dns3 0.0.0.0>]
Nov  7 22:58:09 test pppd[11351]: Discarded non-LCP packet when LCP not open
Nov  7 22:58:09 test pppd[11350]: rcvd [LCP TermReq id=0x3 "MPPE required
but not available"]
Nov  7 22:58:09 test pppd[11350]: LCP terminated by peer (MPPE required but
not available)
Nov  7 22:58:09 test pppd[11350]: sent [LCP TermAck id=0x3]
Nov  7 22:58:09 test pppd[11351]: rcvd [LCP TermAck id=0x3]
Nov  7 22:58:09 test pppd[11351]: Connection terminated.
Nov  7 22:58:10 test pppd[11351]: Exit.
Nov  7 22:58:10 test pptp[11366]: anon warn[decaps_hdlc:pptp_gre.c:197]:
short read (-1): Input/output error
Nov  7 22:58:10 test pptp[11366]: anon warn[decaps_hdlc:pptp_gre.c:209]:
pppd may have shutdown, see pppd log
Nov  7 22:58:10 test pptp[11348]: anon log[callmgr_main:pptp_callmgr.c:231]:
Closing connection (unhandled)
Nov  7 22:58:10 test pptp[11348]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent
control packet type is 12 'Call-Clear-Request'
Nov  7 22:58:10 test pptp[11348]: anon log[call_callback:pptp_callmgr.c:78]:
Closing connection (call state)
Nov  7 22:58:10 test pptpd[11349]: CTRL: Received PPTP Control Message
(type: 12)
Nov  7 22:58:10 test pptpd[11349]: CTRL: Made a CALL DISCONNECT RPLY packet
Nov  7 22:58:10 test pptpd[11349]: CTRL: Received CALL CLR request (closing
call)
Nov  7 22:58:10 test pptpd[11349]: CTRL: Reaping child PPP[11350]
Nov  7 22:58:10 test pppd[11350]: Modem hangup
Nov  7 22:58:10 test pppd[11350]: Connection terminated.
Nov  7 22:58:10 test pppd[11350]: Exit.
Nov  7 22:58:10 test pptpd[11349]: CTRL: Client 10.100.0.2 control
connection finished
Nov  7 22:58:11 test pptpd[11349]: CTRL: Exiting now
Nov  7 22:58:11 test pptpd[10634]: MGR: Reaped child 11349
Nov  7 22:58:13 test ifup: No configuration found for ppp0
Nov  7 22:58:13 test ifdown: No configuration found for ppp0
Nov  7 22:58:13 test ifdown: Nevertheless the interface will be shut down.
Nov  7 22:58:15 test ifup: No configuration found for ppp1
Nov  7 22:58:15 test ifdown: No configuration found for ppp1
Nov  7 22:58:15 test ifdown: Nevertheless the interface will be shut down.

 Ho una Suse 10.0 con kernel aggiornato a 2.6.18.1, pptpd 2.4.3
Chiedi su microsoft.public.suse
scusa non ho resistito :-)

 server win2000.
E quindi? Basta solo che metti openvpn anche sui clients.
-- 
Flavio Visentin
Membro del CICAP
Comitato Italiano per il Controllo delle Affermazioni di P4

 
Magari se posti il pptp.conf e il chap/pap-secret (ovviamente oscurato
dove necessario) ti posso (o possiamo) aiutare.

 dove necessario) ti posso (o possiamo) aiutare.
Grazie, ma ho risolto rimuovendo i pacchetti sia lato client che server e
reinstallandoli.