Re: pppd in a vserver

[Sjoerd Hardeman]

Tzafrir Cohen schreef:

On Mon, Jul 20, 2009 at 12:01:17PM +0200, Sjoerd Hardeman wrote:

Hi list,


Jul 19 23:09:02 vserver pppd[18802]: Interface configuration failed
(see the full log below)

Does anybody know if it is possible to use pppd in a vserver? I am currently trying to set up a pptpd vpn server inside a vserver environment, but it fails on Jul 19 23:09:02 vserver pppd[18802]: ioctl(SIOCSIFDSTADDR): Cannot assign requested address (line 2387)

Can a vserver guest create an extra network interface?

Well, apparently not. But you can set many capabilities and flags which allow you to do many more things. I did find some claims on how to do this via google, but did not succeed to get it working. I hoped to find somebody succeeded and could tell me how. Of course with all those extra capabilities the added security of a vserver is minimal. For me, that's not a real problem, as the vserver is just a nice way to separate services in a container that I can eg. reboot without rebooting the whole machine.

Sjoerd

Thanks for your answers!
Sjoerd

Full log:
(pptpd stuff, succesfully connecting)

Jul 19 23:09:02 vserver pppd[18802]: pptpd-logwtmp: $Version$
Jul 19 23:09:02 vserver pppd[18802]: pppd 2.4.4 started by root, uid 0
Jul 19 23:09:02 vserver pppd[18802]: using channel 9
Jul 19 23:09:02 vserver pppd[18802]: Using interface ppp0
Jul 19 23:09:02 vserver pppd[18802]: Connect: ppp0 <--> /dev/pts/2

Jul 19 23:09:02 vserver pptpd[18795]: GRE: Bad checksum from pppd.
Jul 19 23:09:02 vserver pptpd[18795]: GRE: accepting packet #1

Jul 19 23:09:02 vserver pptpd[18795]: GRE: accepting packet #2

Jul 19 23:09:02 vserver pptpd[18795]: GRE: accepting packet #3
Jul 19 23:09:02 vserver pptpd[18795]: GRE: accepting packet #4

Jul 19 23:09:02 vserver pptpd[18795]: GRE: accepting packet #5

Jul 19 23:09:02 vserver pptpd[18795]: GRE: accepting packet #6
Jul 19 23:09:02 vserver pptpd[18795]: GRE: accepting packet #7

Jul 19 23:09:02 vserver pptpd[18795]: GRE: accepting packet #8
Jul 19 23:09:02 vserver pptpd[18795]: GRE: accepting packet #9

Jul 19 23:09:02 vserver pptpd[18795]: GRE: accepting packet #10

Jul 19 23:09:02 vserver pppd[18802]: Interface configuration failed
Jul 19 23:09:02 vserver pppd[18802]: pptpd-logwtmp.so ip-down ppp0
Jul 19 23:09:02 vserver pppd[18802]: Connect time 0.0 minutes.
Jul 19 23:09:02 vserver pppd[18802]: Sent 86 bytes, received 92 bytes.

Jul 19 23:09:02 vserver pptpd[18795]: GRE: accepting packet #11
Jul 19 23:09:02 vserver pppd[18802]: rcvd [IPCP TermAck id=0x2]
Jul 19 23:09:02 vserver pppd[18802]: MPPE disabled

Jul 19 23:09:02 vserver pptpd[18795]: GRE: accepting packet #12
Jul 19 23:09:02 vserver pptpd[18795]: GRE: accepting packet #13
Jul 19 23:09:02 vserver pppd[18802]: rcvd [LCP TermAck id=0x2]
Jul 19 23:09:02 vserver pppd[18802]: Connection terminated.
Jul 19 23:09:02 vserver pppd[18802]: Connect time 0.0 minutes.
Jul 19 23:09:02 vserver pppd[18802]: Sent 120 bytes, received 96 bytes.
Jul 19 23:09:02 vserver pppd[18802]: Exit.
(more pptpd stuff to end connection after failure of pppd)

Jul 19 23:09:02 vserver pppd[18802]: Plugin /usr/lib/pptpd/pptpd-logwtmp.so loaded. Jul 19 23:09:02 vserver pppd[18802]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x3e2e6464> <pcomp> <accomp>] Jul 19 23:09:02 vserver pppd[18802]: rcvd [LCP ConfReq id=0x1 <mru 1492> <asyncmap 0x0> <magic 0x40c24d4c> <pcomp> <accomp>] Jul 19 23:09:02 vserver pppd[18802]: sent [LCP ConfAck id=0x1 <mru 1492> <asyncmap 0x0> <magic 0x40c24d4c> <pcomp> <accomp>] Jul 19 23:09:02 vserver pppd[18802]: rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x3e2e6464> <pcomp> <accomp>] Jul 19 23:09:02 vserver pppd[18802]: sent [LCP EchoReq id=0x0 magic=0x3e2e6464] Jul 19 23:09:02 vserver pppd[18802]: sent [CHAP Challenge id=0xb5 <a3fe3001e997ff974274aeb9e033cf5b>, name = "pptpd"] Jul 19 23:09:02 vserver pppd[18802]: rcvd [LCP EchoReq id=0x0 magic=0x40c24d4c] Jul 19 23:09:02 vserver pppd[18802]: sent [LCP EchoRep id=0x0 magic=0x3e2e6464] Jul 19 23:09:02 vserver pppd[18802]: rcvd [LCP EchoRep id=0x0 magic=0x40c24d4c] Jul 19 23:09:02 vserver pppd[18802]: rcvd [CHAP Response id=0xb5 <95ef701f762af8f2d852740c394cb1270000000000000000ea091945aa05d9c94371ba3d07a75891e128d6cea9216f0400>, name = "xxxxx"] Jul 19 23:09:02 vserver pppd[18802]: sent [CHAP Success id=0xb5 "S=C275CED30518026F0CFE920DE67C9B6F1B1544BE M=Access granted"] Jul 19 23:09:02 vserver pppd[18802]: sent [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>] Jul 19 23:09:02 vserver pppd[18802]: rcvd [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>] Jul 19 23:09:02 vserver pppd[18802]: sent [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>] Jul 19 23:09:02 vserver pppd[18802]: rcvd [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>] Jul 19 23:09:02 vserver pppd[18802]: MPPE 128-bit stateless compression enabled Jul 19 23:09:02 vserver pppd[18802]: sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 10.1.2.10>] Jul 19 23:09:02 vserver pppd[18802]: rcvd [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns3 0.0.0.0>] Jul 19 23:09:02 vserver pppd[18802]: sent [IPCP ConfNak id=0x1 <addr xx.xx.xx.xx> <ms-dns1 xx.xx.xx.xx> <ms-dns3 xx.xx.xx.xx>] Jul 19 23:09:02 vserver pppd[18802]: rcvd [IPCP ConfAck id=0x1 <compress VJ 0f 01> <addr xx.xx.xx.xx>] Jul 19 23:09:02 vserver pppd[18802]: rcvd [IPCP ConfReq id=0x2 <compress VJ 0f 01> <addr xx.xx.xx.xx> <ms-dns1 xx.xx.xx.xx> <ms-dns3 xx.xx.xx.xx>] Jul 19 23:09:02 vserver pppd[18802]: sent [IPCP ConfAck id=0x2 <compress VJ 0f 01> <addr xx.xx.xx.xx> <ms-dns1 xx.xx.xx.xx> <ms-dns3 xx.xx.xx.xx>] Jul 19 23:09:02 vserver pppd[18802]: ioctl(SIOCSIFDSTADDR): Cannot assign requested address (line 2387) Jul 19 23:09:02 vserver pppd[18802]: sent [IPCP TermReq id=0x2 "Interface configuration failed"] Jul 19 23:09:02 vserver pppd[18802]: sent [LCP TermReq id=0x2 "MPPE disabled"] Jul 19 23:09:02 vserver pppd[18802]: sent [LCP TermReq id=0x3 "MPPE disabled"]

signature.asc
Description: OpenPGP digital signature