Alex Mizrahi writes: > when doing MS-CHAPv2 authenification it fails just as if password was > invalid, but i'm 100% sure it's valid because i've copied chap-secrets fine > from Linux installation that has no problems authentificating. i've tested > this both on my ISP and on local Linux installation.
I'd start by suggesting that you post debug logs and configuration options. > actually i'm using pppd for PPTP VPN, that's not officially supported > configuration, but it's quite easy to build slighly patched pptp Linux > client, and since ppp session goes normally (see > here:http://groups.google.com/group/comp.unix.solaris/browse_thread/thread/033e9f99949d913a#a51892187d61aebc) > i believe pptp part works correctly and problem is CHAP. > > i've tried to build open source pppd, but it fails -- latest version 2.4.4 > fails to attach it driver, prev. version 2.4.3 doesn't have x86_64 support. Have you reported those failures to [EMAIL PROTECTED] The last I tried, which was a few weeks ago, the current 2.4.4 (in the CVS repository) worked fine on Nevada, compiling with either gcc or Sun's cc. I can give it another try soon. > is it possible to get Sun's pppd source? other suggestions? Sure; the source is in the ON consolidation, and is based off an older version of that same open source code, but with a lot of local customizations (some of which haven't yet made it out to the open source). Have a look at: http://src.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/cmd-inet/usr.bin/pppd/ > i've read MS-CHAP support was re-written in pppd 2.4.3, so probably it would > be nice to update Sun's pppd to this version. We'd need to sync in both directions -- to get the bug fixes only in Solaris out to the upstream repository and to get the current code down to Solaris -- but anyone who is interested in working on this is certainly welcome to it. I don't _think_ it's related to the problem you're having, as the MS-CHAP and MS-CHAPv2 code currently in Solaris were originally tested against Microsoft's implementation. I suspect that more is in play here. (The big rewrite upstream, besides code refactoring, was the old Standard CHAP module. The license was good enough for Sun, but some other vendors didn't like the fact that we'd lost track of the original author [Greg Christy -- coincidentally a childhood friend of mine]. So, a clean-room rewrite was done by one of the other maintainers. I don't know of any similar large issues with either MS-CHAP or MS-CHAPv2.) -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 35 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 _______________________________________________ networking-discuss mailing list [email protected]
