poptop pptpd + freeradius
Guys, Same server, i am trying to configure pptpd with radius, please give advice, why it is not working. Radius auth is succesfull.. /var/log/messages (pppd log): http://dpaste.com/832022/ /etc/pptpd.conf http://dpaste.com/832024/ /etc/ppp/options.pptpd http://dpaste.com/832026/ freeradius -X log: http://dpaste.com/832027/ client side: /etc/ppp/chap-secrets: user * "userpass" * /etc/ppp/peers/bde: # written by pptpsetup pty "pptp PPTPD_SERVER_IP --nolaunchpppd" lock noauth debug nobsdcomp refuse-eap nodeflate novj novjccomp nologfd name user user user password userpass Best Regards, Dmitry --- Dmitry KORZHEVIN System Administrator STIDIA S.A. - Luxembourg e: dmitry.korzhevin@stidia.com m: +38 093 874 5453 w: http://www.stidia.com
I have done poptop+freeraius+AD integration successfully : But i see you have some sql stuff enabled. I have pptpd server, radius handles all auth, ippool and accounting -- AD is for user athuentication. if this is the case buzz me i will try to help you out. K On Fri, Nov 16, 2012 at 11:20 AM, Dmitry Korzhevin < dmitry.korzhevin@stidia.com> wrote:
Guys,
Same server, i am trying to configure pptpd with radius, please give advice, why it is not working. Radius auth is succesfull..
/var/log/messages (pppd log): http://dpaste.com/832022/ /etc/pptpd.conf http://dpaste.com/832024/ /etc/ppp/options.pptpd http://dpaste.com/832026/
freeradius -X log: http://dpaste.com/832027/
client side:
/etc/ppp/chap-secrets:
user * "userpass" *
/etc/ppp/peers/bde:
# written by pptpsetup pty "pptp PPTPD_SERVER_IP --nolaunchpppd" lock noauth debug nobsdcomp refuse-eap nodeflate novj novjccomp nologfd name user user user password userpass
Best Regards, Dmitry
--- Dmitry KORZHEVIN System Administrator STIDIA S.A. - Luxembourg
e: dmitry.korzhevin@stidia.com m: +38 093 874 5453 w: http://www.stidia.com
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thank you, I think, my problem somewhere in pptpd configs.. because freeradius auth user successfully. Can you please look at my pptpd configs, maby a did mistake somewhere 16.11.2012 13:29, Khapare Joshi пишет:
I have done poptop+freeraius+AD integration successfully :
But i see you have some sql stuff enabled. I have pptpd server, radius handles all auth, ippool and accounting -- AD is for user athuentication. if this is the case buzz me i will try to help you out.
K
On Fri, Nov 16, 2012 at 11:20 AM, Dmitry Korzhevin <dmitry.korzhevin@stidia.com <mailto:dmitry.korzhevin@stidia.com>> wrote:
Guys,
Same server, i am trying to configure pptpd with radius, please give advice, why it is not working. Radius auth is succesfull..
/var/log/messages (pppd log): http://dpaste.com/832022/ /etc/pptpd.conf http://dpaste.com/832024/ /etc/ppp/options.pptpd http://dpaste.com/832026/
freeradius -X log: http://dpaste.com/832027/
client side:
/etc/ppp/chap-secrets:
user * "userpass" *
/etc/ppp/peers/bde:
# written by pptpsetup pty "pptp PPTPD_SERVER_IP --nolaunchpppd" lock noauth debug nobsdcomp refuse-eap nodeflate novj novjccomp nologfd name user user user password userpass
Best Regards, Dmitry
--- Dmitry KORZHEVIN System Administrator STIDIA S.A. - Luxembourg
e: dmitry.korzhevin@stidia.com <mailto:dmitry.korzhevin@stidia.com> m: +38 093 874 5453 <tel:%2B38%20093%20874%205453> w: http://www.stidia.com
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Best Regards, Dmitry --- Dmitry KORZHEVIN System Administrator STIDIA S.A. - Luxembourg e: dmitry.korzhevin@stidia.com m: +38 093 874 5453 w: http://www.stidia.com
On 16/11/12 11:20, Dmitry Korzhevin wrote:
Guys,
Same server, i am trying to configure pptpd with radius, please give advice, why it is not working. Radius auth is succesfull..
RADIUS is fine, this isn't a question for the FR list.
/etc/ppp/options.pptpd http://dpaste.com/832026/
I think this is wrong. You need: -chap -mschap +mschap-v2 We use this "options" file: lock #uncomment when testing: #debug name pptpd asyncmap 0 -chap -mschap +mschap-v2 require-mppe lcp-echo-failure 30 lcp-echo-interval 5 ipcp-accept-local ipcp-accept-remote ms-wins ... ms-wins ... ms-dns ... ms-dns ... plugin radius.so
here is my option files if this helps : name pptpd refuse-pap refuse-chap refuse-mschap require-mschap-v2 require-mppe-128 ms-dns 192.168.1.1 ms-dns 192.168.1.2 ms-wins 192.168.1.3 proxyarp debug lock nobsdcomp novj novjccomp nologfd auth nodefaultroute plugin radius.so plugin radattr.so On Fri, Nov 16, 2012 at 12:54 PM, Phil Mayers <p.mayers@imperial.ac.uk>wrote:
On 16/11/12 11:20, Dmitry Korzhevin wrote:
Guys,
Same server, i am trying to configure pptpd with radius, please give advice, why it is not working. Radius auth is succesfull..
RADIUS is fine, this isn't a question for the FR list.
/etc/ppp/options.pptpd http://dpaste.com/832026/
I think this is wrong. You need:
-chap -mschap +mschap-v2
We use this "options" file:
lock #uncomment when testing: #debug name pptpd asyncmap 0 -chap -mschap +mschap-v2 require-mppe lcp-echo-failure 30 lcp-echo-interval 5 ipcp-accept-local ipcp-accept-remote ms-wins ... ms-wins ... ms-dns ... ms-dns ... plugin radius.so
- List info/subscribe/unsubscribe? See http://www.freeradius.org/** list/users.html <http://www.freeradius.org/list/users.html>
participants (4)
-
Alan DeKok -
Dmitry Korzhevin -
Khapare Joshi -
Phil Mayers