> I'd start by suggesting that you post debug logs and configuration
options.

pppd pty "pptp 192.168.26.128 --nolaunchpppd" noauth debug nodetach user 
killers remotename pptpd

Using /dev/pts/3; master fd 6, slave fd 7
pty speed set to 9600 bps
pty option: 'pptp 192.168.26.128 --nolaunchpppd' started (pid 748)
Using interface sppp0
Connect: sppp0 <--> /dev/pts/3
/etc/ppp/pap-secrets is apparently empty
sent [LCP ConfReq id=0xd6 <asyncmap 0x0> <magic 0xeed4171c> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap m$oft-v2> <magic 0xffc4f0a3> 
<pcomp> <accomp>]
sent [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap m$oft-v2> <magic 0xffc4f0a3> 
<pcomp> <accomp>]
rcvd [LCP ConfAck id=0xd6 <asyncmap 0x0> <magic 0xeed4171c> <pcomp> <accomp>]
sent [LCP Ident id=0xd7 magic=0xeed4171c "ppp-2.4.0b1 (Sun Microsystems, Inc.)"]
Authenticating to peer with MS-CHAPv2
rcvd [LCP EchoReq id=0x0 magic=0xffc4f0a3]
sent [LCP EchoRep id=0x0 magic=0xeed4171c]
rcvd [CHAP Challenge id=0x50 <cf1f4d78f11fda173bd283e580c850de>, name = "pptpd"]
CHAP:  Peer gave no name; using 'pptpd' as remote name
sent [CHAP Response id=0x50 
<0ff46b98f19dc359f9a65b303e26376100000000000000005792aaab8702891ae0a5a4d32e7c4ef6537309002391a42700>,
 name = "killers"]
rcvd [CHAP Failure id=0x50 "E=691 R=1 C=cf1f4d78f11fda173bd283e580c850de V=0 
M=Access denied"]
Remote message: E=691 R=1 C=cf1f4d78f11fda173bd283e580c850de V=0 M=Access denied
CHAP authentication failed
sent [LCP TermReq id=0xd8 "Failed to authenticate ourselves to peer"]
rcvd [LCP TermReq id=0x2 "Authentication failed"]
sent [LCP TermAck id=0x2]
rcvd [LCP TermAck id=0xd8]
Connection terminated.

same for MS-CHAPv1, but simple CHAP works fine.

> The last I tried, which was a few weeks ago, the current 2.4.4 (in the
> CVS repository) worked fine on Nevada, compiling with either gcc or
> Sun's cc. I can give it another try soon.

indeed, version in cvs works. i had following issues:

 * make install in solaris directory is not called automatically, i had to do 
it manually
 * MS-CHAP support is not enabled by default, i had to uncomment two linex in 
makefile
 * in order to compile sha1 i had to do #define u_int32_t uint32_t

with this changes it successfully authenticated via MS-CHAPv2 and was working.

 > Sure; the source is in the ON consolidation, and is based off an older
 > version of that same open source code, but with a lot of local
 > customizations (some of which haven't yet made it out to the open
 > source).

ok, i'll try to compile it too -- maybe it works if freshly compiled..

 > I don't _think_ it's related to the problem you're having, as the
 > MS-CHAP and MS-CHAPv2 code currently in Solaris were originally tested
 > against Microsoft's implementation. 

some change in compiler could cause one of hash functions used invalid. or if 
you say "originally" it can be tested only on SPARC.

if i'll compile it from source code, i hope i'll be able to dump all the stuff 
there and identify how it differs.
 
 
This message posted from opensolaris.org
_______________________________________________
networking-discuss mailing list
[email protected]

Reply via email to