pptp chap81 aaaargh

Brian Somers brian at freebsd-services.com
Fri Sep 21 09:29:23 BST 2001


> Does anyone have any tips for getting pptp working with win95 using
> chap81 and mppe? Trying both mpd and poptop+ppp I can get a good connection
> without encryption but when I try to introduce chap81, there are problems.
> (Don't think it's relevant but I'm running poptop's pptpctrl from inetd).
> 
> On win9x side I'm using the export (128-bit) version of MSDUN 1.4, on
> FreeBSD side have tried ppp from 4.4-rc4 and 010731. With "enable chap81
> chap" it works (but chap81 not negotiated so obviously no mppe), with
> "enable chap81/deny chap" there's a chap failure:
> 
> Sep 21 03:06:35 gate ppp[4543]: tun0: LCP: deflink: SendIdent(0) state = Opened
> Sep 21 03:06:35 gate ppp[4543]: tun0: Phase: bundle: Authenticate
> Sep 21 03:06:35 gate ppp[4543]: tun0: Phase: deflink: his = none, mine = CHAP 0x81
> Sep 21 03:06:35 gate ppp[4543]: tun0: Phase: Chap Output: CHALLENGE
> Sep 21 03:06:35 gate ppp[4543]: tun0: LCP: deflink: RecvCodeRej(2) state = Opened
> Sep 21 03:06:35 gate ppp[4543]: tun0: Phase: Chap Input: RESPONSE (49 bytes from DOMAIN\user)
> Sep 21 03:06:35 gate ppp[4543]: tun0: Phase: Chap Output: FAILURE
> Sep 21 03:06:35 gate ppp[4543]: tun0: LCP: deflink: LayerDown

Well, it looks like your passwords don't agree.  Are you doubling up 
the \ in the username in ppp.secret so that it's not treated as an 
escape character ?

> I am accounting for the DOMAIN\ prefix in ppp config (otherwise it would
> fail with "enable chap" too) and the password is correct, any ideas? (please
> let me know if additional logging or a packet trace would assist). (Very
> tempted to trade mppe for an easier life and working V42bis this time, but
> if it's not too fiddly it would be nice to be able to compare speeds ;)

MPPE is encryption only.  It'll just make things slower.

> Mtia/
> -Stu

-- 
Brian <brian at freebsd-services.com>                <brian at Awfulhak.org>
      http://www.freebsd-services.com/        <brian@[uk.]FreeBSD.org>
Don't _EVER_ lose your sense of humour !      <brian@[uk.]OpenBSD.org>






More information about the Ukfreebsd mailing list