Hey guys,<br><br>i force in WIndows Client to use only mschap2, but the problem continue:<br><br>-<br>Module: Instantiated radutmp (radutmp) <br>Listening on authentication *:1812<br>Listening on accounting *:1813<br>Ready to process requests.<br>
rad_recv: Access-Request packet from host <a href="http://150.162.67.254:32858">150.162.67.254:32858</a>, id=109, length=53<br> Service-Type = Framed-User<br> Framed-Protocol = PPP<br> User-Name = "douglas"<br>
NAS-IP-Address = <a href="http://1.1.1.1">1.1.1.1</a><br> NAS-Port = 0<br> Processing the authorize section of radiusd.conf<br>modcall: entering group authorize for request 0<br> modcall[authorize]: module "preprocess" returns ok for request 0<br>
modcall[authorize]: module "mschap" returns noop for request 0<br> rlm_realm: No '@' in User-Name = "douglas", looking up realm NULL<br> rlm_realm: No such realm "NULL"<br> modcall[authorize]: module "suffix" returns noop for request 0<br>
modcall: leaving group authorize (returns ok) for request 0<br>auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user<br>auth: Failed to validate the user.<br>Login incorrect: [douglas] (from client access-vpn port 0)<br>
Delaying request 0 for 1 seconds<br>Finished request 0<br>Going to the next request<br>--<br><br>In PPTP debug show:<br><br>--<br>Nov 27 11:35:39 epiderme pptpd[12253]: MGR: Launching /usr/sbin/pptpctrl to handle client<br>
Nov 27 11:35:39 epiderme pptpd[12253]: CTRL: local address = <a href="http://150.162.67.200">150.162.67.200</a><br>Nov 27 11:35:39 epiderme pptpd[12253]: CTRL: remote address = <a href="http://150.162.67.201">150.162.67.201</a><br>
Nov 27 11:35:39 epiderme pptpd[12253]: CTRL: pppd options file = /etc/ppp/pptpd-options<br>Nov 27 11:35:39 epiderme pptpd[12253]: CTRL: Client <a href="http://150.162.67.54">150.162.67.54</a> control connection started<br>
Nov 27 11:35:39 epiderme pptpd[12253]: CTRL: Received PPTP Control Message (type: 1)<br>Nov 27 11:35:39 epiderme pptpd[12253]: CTRL: Made a START CTRL CONN RPLY packet<br>Nov 27 11:35:39 epiderme pptpd[12253]: CTRL: I wrote 156 bytes to the client.<br>
Nov 27 11:35:39 epiderme pptpd[12253]: CTRL: Sent packet to client<br>Nov 27 11:35:39 epiderme pptpd[12253]: CTRL: Received PPTP Control Message (type: 7)<br>Nov 27 11:35:39 epiderme pptpd[12253]: CTRL: Set parameters to 100000000 maxbps, 64 window size<br>
Nov 27 11:35:39 epiderme pptpd[12253]: CTRL: Made a OUT CALL RPLY packet<br>Nov 27 11:35:39 epiderme pptpd[12253]: CTRL: Starting call (launching pppd, opening GRE)<br>Nov 27 11:35:39 epiderme pptpd[12253]: CTRL: pty_fd = 6<br>
Nov 27 11:35:39 epiderme pptpd[12253]: CTRL: tty_fd = 7<br>Nov 27 11:35:39 epiderme pptpd[12254]: CTRL (PPPD Launcher): program binary = /usr/sbin/pppd<br>Nov 27 11:35:39 epiderme pptpd[12254]: CTRL (PPPD Launcher): local address = <a href="http://150.162.67.200">150.162.67.200</a><br>
Nov 27 11:35:39 epiderme pptpd[12254]: CTRL (PPPD Launcher): remote address = <a href="http://150.162.67.201">150.162.67.201</a><br>Nov 27 11:35:39 epiderme pppd[12254]: Plugin radius.so loaded.<br>Nov 27 11:35:39 epiderme pppd[12254]: RADIUS plugin initialized.<br>
Nov 27 11:35:39 epiderme pppd[12254]: Plugin /usr/lib/pptpd/pptpd-logwtmp.so loaded.<br>Nov 27 11:35:39 epiderme pppd[12254]: pptpd-logwtmp: $Version$<br>Nov 27 11:35:39 epiderme pppd[12254]: pppd 2.4.4 started by root, uid 0<br>
Nov 27 11:35:39 epiderme pptpd[12253]: CTRL: I wrote 32 bytes to the client.<br>Nov 27 11:35:39 epiderme pptpd[12253]: CTRL: Sent packet to client<br>Nov 27 11:35:39 epiderme pppd[12254]: using channel 291<br>Nov 27 11:35:39 epiderme pppd[12254]: Using interface ppp0<br>
Nov 27 11:35:39 epiderme pppd[12254]: Connect: ppp0 <--> /dev/pts/1<br>Nov 27 11:35:39 epiderme pppd[12254]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x7ba9ed09> <pcomp> <accomp>]<br>
Nov 27 11:35:39 epiderme pptpd[12253]: GRE: Bad checksum from pppd.<br>Nov 27 11:35:39 epiderme pptpd[12253]: CTRL: Received PPTP Control Message (type: 15)<br>Nov 27 11:35:39 epiderme pptpd[12253]: CTRL: Got a SET LINK INFO packet with standard ACCMs<br>
Nov 27 11:35:39 epiderme pptpd[12253]: GRE: accepting packet #0<br>Nov 27 11:35:39 epiderme pptpd[12253]: GRE: accepting packet #1<br>Nov 27 11:35:39 epiderme pppd[12254]: rcvd [LCP ConfReq id=0x0 <mru 1400> <magic 0x2f814697> <pcomp> <accomp> <callback CBCP>]<br>
Nov 27 11:35:39 epiderme pppd[12254]: sent [LCP ConfRej id=0x0 <callback CBCP>]<br>Nov 27 11:35:39 epiderme pppd[12254]: rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x7ba9ed09> <pcomp> <accomp>]<br>
Nov 27 11:35:39 epiderme pptpd[12253]: GRE: accepting packet #2<br>Nov 27 11:35:39 epiderme pppd[12254]: rcvd [LCP ConfReq id=0x1 <mru 1400> <magic 0x2f814697> <pcomp> <accomp>]<br>Nov 27 11:35:39 epiderme pppd[12254]: sent [LCP ConfAck id=0x1 <mru 1400> <magic 0x2f814697> <pcomp> <accomp>]<br>
Nov 27 11:35:39 epiderme pppd[12254]: sent [LCP EchoReq id=0x0 magic=0x7ba9ed09]<br>Nov 27 11:35:39 epiderme pppd[12254]: sent [CHAP Challenge id=0xed <f0334ca2b790e04dd584cd16234b2d12>, name = "pptpd"]<br>
Nov 27 11:35:39 epiderme pptpd[12253]: GRE: accepting packet #3<br>Nov 27 11:35:39 epiderme pptpd[12253]: GRE: accepting packet #4<br>Nov 27 11:35:39 epiderme pptpd[12253]: GRE: accepting packet #5<br>Nov 27 11:35:39 epiderme pppd[12254]: rcvd [LCP Ident id=0x2 magic=0x2f814697 "MSRASV5.10"]<br>
Nov 27 11:35:39 epiderme pppd[12254]: rcvd [LCP Ident id=0x3 magic=0x2f814697 "MSRAS-0-MOLAR"]<br>Nov 27 11:35:39 epiderme pppd[12254]: rcvd [LCP Ident id=0x2 magic=0x2f814697 "MSRASV5.10"]<br>Nov 27 11:35:39 epiderme pppd[12254]: rcvd [LCP Ident id=0x3 magic=0x2f814697 "MSRAS-0-MOLAR"]<br>
Nov 27 11:35:39 epiderme pppd[12254]: rcvd [LCP EchoRep id=0x0 magic=0x2f814697]<br>Nov 27 11:35:39 epiderme pptpd[12253]: GRE: accepting packet #6<br>Nov 27 11:35:39 epiderme pppd[12254]: rcvd [CHAP Response id=0xed <4231ee0d3b4c2d2ae9cfb13528b2449a0000000000000000a70bfbedcf96842050bbf5c9ebcb329e326d29c3190e5d1a00>, name = "douglas"]<br>
Nov 27 11:35:39 epiderme pppd[12254]: rc_avpair_new: unknown attribute 11<br>Nov 27 11:35:39 epiderme pppd[12254]: rc_avpair_new: unknown attribute 25<br>Nov 27 11:35:39 epiderme pptpd[12253]: CTRL: Received PPTP Control Message (type: 15)<br>
Nov 27 11:35:39 epiderme pptpd[12253]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!<br>Nov 27 11:35:41 epiderme pptpd[12253]: GRE: accepting packet #7<br>Nov 27 11:35:41 epiderme pppd[12254]: Peer douglas failed CHAP authentication<br>
Nov 27 11:35:41 epiderme pppd[12254]: sent [CHAP Failure id=0xed ""]<br>Nov 27 11:35:41 epiderme pppd[12254]: sent [LCP TermReq id=0x2 "Authentication failed"]<br>Nov 27 11:35:41 epiderme pppd[12254]: rcvd [CHAP Response id=0xed <4231ee0d3b4c2d2ae9cfb13528b2449a0000000000000000a70bfbedcf96842050bbf5c9ebcb329e326d29c3190e5d1a00>, name = "douglas"]<br>
Nov 27 11:35:41 epiderme pppd[12254]: Discarded non-LCP packet when LCP not open<br>Nov 27 11:35:41 epiderme pptpd[12253]: CTRL: Received PPTP Control Message (type: 15)<br>Nov 27 11:35:41 epiderme pptpd[12253]: CTRL: Got a SET LINK INFO packet with standard ACCMs<br>
Nov 27 11:35:41 epiderme pptpd[12253]: GRE: accepting packet #8<br>Nov 27 11:35:41 epiderme pppd[12254]: rcvd [LCP TermAck id=0x2 "Authentication failed"]<br>Nov 27 11:35:41 epiderme pppd[12254]: Connection terminated.<br>
Nov 27 11:35:41 epiderme pptpd[12253]: CTRL: Received PPTP Control Message (type: 12)<br>Nov 27 11:35:41 epiderme pptpd[12253]: CTRL: Made a CALL DISCONNECT RPLY packet<br>Nov 27 11:35:41 epiderme pptpd[12253]: CTRL: Received CALL CLR request (closing call)<br>
Nov 27 11:35:41 epiderme pptpd[12253]: CTRL: Reaping child PPP[12254]<br>Nov 27 11:35:41 epiderme pppd[12254]: Exit.<br>Nov 27 11:35:41 epiderme pptpd[12253]: CTRL: Client <a href="http://150.162.67.54">150.162.67.54</a> control connection finished<br>
Nov 27 11:35:41 epiderme pptpd[12253]: CTRL: Exiting now<br>Nov 27 11:35:41 epiderme pptpd[11948]: MGR: Reaped child 12253<br>--<br><br>My pptp-options:<br><br>--<br>epiderme:/etc/ppp# cat pptpd-options<br>lock<br>debug<br>
name pptpd<br>proxyarp<br>asyncmap 0<br>-chap<br>-mschap<br>+mschap-v2<br>require-mppe<br>lcp-echo-failure 30<br>lcp-echo-interval 5<br>ipcp-accept-local<br>ipcp-accept-remote<br>plugin radius.so<br>radius-config-file /etc/radiusclient/radiusclient.conf<br>
--<br><br>Anyone can help me? Please ...<br><br>Thanks in advanced,<br>Douglas<br><br><div class="gmail_quote">On Wed, Nov 26, 2008 at 7:34 PM, <span dir="ltr"><<a href="mailto:tnt@kalik.net">tnt@kalik.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div class="Ih2E3d">>if I try mschapv2 in Windons client:<br>
><br>
>--<br>
>rad_recv: Access-Request packet from host <a href="http://150.162.67.254:32839" target="_blank">150.162.67.254:32839</a>, id=46,<br>
>length=52<br>
> Service-Type = Framed-User<br>
> Framed-Protocol = PPP<br>
> User-Name = "nobody"<br>
> NAS-IP-Address = <a href="http://1.1.1.1" target="_blank">1.1.1.1</a><br>
> NAS-Port = 0<br>
<br>
</div>This is not an mschap request.<br>
<br>
<a href="http://wiki.freeradius.org/index.php/FreeRADIUS_Wiki:FAQ#How_do_I_make_Windows_XP_clients_use_only_PAP_.28Not_CHAP.29" target="_blank">http://wiki.freeradius.org/index.php/FreeRADIUS_Wiki:FAQ#How_do_I_make_Windows_XP_clients_use_only_PAP_.28Not_CHAP.29</a><br>
<br>
In your case, leave only mschapv2. That will force Windows to use it (if<br>
mschapv2 is not enabled on the pptp server connection will fail without<br>
authentication).<br>
<br>
Ivan Kalik<br>
Kalik Informatika ISP<br>
<div><div></div><div class="Wj3C7c"><br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>Douglas Macedo<br><a href="mailto:dmacedo@gmail.com">dmacedo@gmail.com</a><br>--<br>Avalia-se a inteligência de um indivíduo pela quantidade de incertezas que ele é capaz de suportar.<br>
(Immanuel Kant)<br>