RE: problem connecting from windows xp to pptp server
After a lot of help from Thibault I was able to connect from xp client. the causes for the problem was : 1. missing raddattr plug-in to option.pptpd raddattr.so # after radius.so 2. un update dictionary (Microsoft & merit) both in /etc/raddb & /etc/radiusclient attached my dictionaries Microsoft & merit (both client & server) 3. include dictionary syntax – should be : $INCLUDE /etc/raddb/dictionary.microsoft $INCLUDE /etc/raddb/dictionary.merit 4. need to config the following options in option.pptpd refuse-pap refuse-chap refuse-mschap require-mppe +mschap +mschap-v2 Thanks Danny _____ From: Danny Milshtein [mailto:danny@videocells.com] Sent: Monday, May 28, 2007 8:59 AM To: 'FreeRadius users mailing list' Subject: RE: problem connecting from windows xp to pptp server Hi, All the check options are checked. Maybe the PPTPD strip the CHAP-Password in some way ? Danny Milshtein -----Original Message----- From: freeradius-users-bounces+danny=videocells.com@lists.freeradius.org [mailto:freeradius-users-bounces+danny=videocells.com@lists.freeradius.org] On Behalf Of tnt@kalik.co.yu Sent: Sunday, May 27, 2007 9:05 PM To: FreeRadius users mailing list Subject: Re: problem connecting from windows xp to pptp server Yes. There is no password in your request: rad_recv: Access-Request packet from host 127.0.0.1:32787, id=39, length=69 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "danielmi" Calling-Station-Id = "192.168.8.244" NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Check your connection properties and see if "Check for name, password etc." is ticked (Options tab). Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.8.0/819 - Release Date: 5/26/2007 10:47 AM No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.8.0/819 - Release Date: 5/26/2007 10:47 AM No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.8.4/825 - Release Date: 5/30/2007 3:03 PM
Hi Danny, Let me correct just some things... can you confirm ?
After a lot of help from Thibault I was able to connect from xp client.
the causes for the problem was :
1. missing raddattr plug-in to option.pptpd raddattr.so # after radius.so
2. un update dictionary (Microsoft & merit) both in /etc/raddb & /etc/radiusclient
I think you don't have to update your FreeRADIUS dictionary at all: _you_ had to because you did some tests and willingly modified them, but I'm quite sure the one provided by the FreeRADIUS project are good enough for this purpose ;-)
3. include dictionary syntax ? should be :
$INCLUDE /etc/raddb/dictionary.microsoft
$INCLUDE /etc/raddb/dictionary.merit
This is the standard syntax for FreeRADIUS, but INCLUDE syntax for radiusclient /etc/radiusclient/dictionary file was (as you wrote me in a private email): INCLUDE /etc/radiusclient/dictionary.microsoft INCLUDE /etc/radiusclient/dictionary.merit
4. need to config the following options in option.pptpd refuse-pap refuse-chap refuse-mschap require-mppe +mschap +mschap-v2
Thanks Danny, for your summary to the list. For everyone else: I've begun a small tutorial on Poptop integration with FreeRADIUS: http://wiki.freeradius.org/PopTop It is currently linked to the http://wiki.freeradius.org/Example_Setups page. Feel free to update it and/or move it to a more appropriate page on the Wiki (maybe in howto) ? Regards, Thibault
participants (2)
-
Danny Milshtein -
Thibault Le Meur