headers
James Cameron | 1 May 2003 02:52
Picon
Favicon

Re: PPTP + mppe-128 + Windows XP

On Wed, Apr 30, 2003 at 10:53:17AM -0500, Clifford Kite wrote:
> The peer wants MPPE encryption (Microsoft encryption) but uncompressed
> data.  Pppd doesn't support MPPE since it is patented and requires a
> license.  You may be able to find a modified pppd somewhere that supports
> it, but it would not be legal in many countries.

While I know that MPPC is patented and licensed, I do not think MPPE
is.  Contrary to what you say, MPPE support is in PPP CVS now, and is 
quite stable; a part of the current snapshots (2.4.2b3).

The reason the original poster's PPP refused CCP was that they asked it 
to, using the noccp option.  Removing that might help.  The peer may be
configured to accept a connection without encryption.

--

-- 
James Cameron                                     (james.cameron <at> hp.com)

http://quozl.linux.org.au/         (or)         http://quozl.netrek.org/
-
To unsubscribe from this list: send the line "unsubscribe linux-ppp" in
the body of a message to majordomo <at> vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Permalink | Reply | 1 comment |
headers
Clifford Kite | 1 May 2003 04:35
Favicon

Re: PPTP + mppe-128 + Windows XP

On Thu, 1 May 2003, James Cameron wrote:

|On Wed, Apr 30, 2003 at 10:53:17AM -0500, Clifford Kite wrote:
|> The peer wants MPPE encryption (Microsoft encryption) but uncompressed
|> data.  Pppd doesn't support MPPE since it is patented and requires a
|> license.  You may be able to find a modified pppd somewhere that supports
|> it, but it would not be legal in many countries.
|
|While I know that MPPC is patented and licensed, I do not think MPPE
|is.  Contrary to what you say, MPPE support is in PPP CVS now, and is 
|quite stable; a part of the current snapshots (2.4.2b3).

Right, I had that wrong, it's MPPC that needs the license.

|The reason the original poster's PPP refused CCP was that they asked it 
|to, using the noccp option.  Removing that might help.  The peer may be
|configured to accept a connection without encryption.

One can always hope.  But even though every Informational MPPE RFC I've
seen said the link SHOULD be terminated if MPPE negotiation is attempted
and fails, I've never seen any posts that showed MPPE was negotiated away.

However, removing the noccp option and using pppd 2.4.2b3 might solve the
problem since the peer didn't ask for MPPC.

---
Clifford Kite                                 http://ckite.no-ip.net

-
To unsubscribe from this list: send the line "unsubscribe linux-ppp" in
(Continue reading)

Permalink | Reply | 0 comments |
headers
Jussi Jääskeläinen | 2 May 2003 07:18
Picon

RE: PPTP + mppe-128 + Windows XP


> -----Original Message-----
> However, removing the noccp option and using pppd 2.4.2b3 
> might solve the
> problem since the peer didn't ask for MPPC.

Actually it didn't... After installing pppd 2.4.2b3 it don't know anymore
what "require-chapms-v2" means.. So I installed back older
"ppp-mppe-2.4.0-4.i386.rpm" packet..

But... Something has happend in Windows 2000 too.. After rebooting and
windows start using "newest" autoloaded patches from M$ and start acting
like Windows XP.. So W2000 can't make crypted connection to VPN server
anymore.. ;-(

If I have that "noccp" it says:
Error 742: The remote computer does not support the required data encrytion
type.

If I take that "noccp" away it says:
Error 619: The specified port is not connected.

/var/log/messages says:
May  2 07:04:13 ws9 pptpd[3684]: MGR: Launching /usr/sbin/pptpctrl to handle
client
May  2 07:04:13 ws9 pptpd[3684]: CTRL: local address = 192.168.2.2
May  2 07:04:13 ws9 pptpd[3684]: CTRL: remote address = 192.168.1.3
May  2 07:04:13 ws9 pptpd[3684]: CTRL: pppd options file =
/etc/ppp/options.pptp
May  2 07:04:13 ws9 pptpd[3684]: CTRL: Client 193.65.204.21 control
(Continue reading)

Permalink | Reply | 2 comments |
headers
Frank Cusack | 2 May 2003 07:30

Re: PPTP + mppe-128 + Windows XP

On Fri, May 02, 2003 at 08:18:47AM +0300, Jussi Jääskeläinen wrote:
> Actually it didn't... After installing pppd 2.4.2b3 it don't know anymore
> what "require-chapms-v2" means.. So I installed back older
> "ppp-mppe-2.4.0-4.i386.rpm" packet..

Dunno what that is; it's not from ftp.samba.org.

> May  2 07:04:13 ws9 pppd[3685]: pppd 2.4.0 started by root, uid 0

2.4.2b1 is the first version to support MPPE.  See the man page for
the option names.  They changed slightly from the patches that were
floating around.  The change was to more closely match the existing
option names.

/fc
-
To unsubscribe from this list: send the line "unsubscribe linux-ppp" in
the body of a message to majordomo <at> vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Permalink | Reply | 0 comments |
headers
James Cameron | 2 May 2003 07:48
Picon
Favicon

Re: PPTP + mppe-128 + Windows XP

On Fri, May 02, 2003 at 08:18:47AM +0300, Jussi J??skel?inen wrote:
> Actually it didn't... After installing pppd 2.4.2b3 it don't know anymore
> what "require-chapms-v2" means.. 

The correct option is require-mschap-v2 ... your options file was
incorrect, not pppd.

> So I installed back older "ppp-mppe-2.4.0-4.i386.rpm" packet..

I wouldn't.

> But... Something has happend in Windows 2000 too.. After rebooting and
> windows start using "newest" autoloaded patches from M$ and start acting
> like Windows XP.. So W2000 can't make crypted connection to VPN server
> anymore.. ;-(

You let it make that change?  Sigh.  ;-)

--

-- 
James Cameron                                     (james.cameron <at> hp.com)

http://quozl.linux.org.au/         (or)         http://quozl.netrek.org/
-
To unsubscribe from this list: send the line "unsubscribe linux-ppp" in
the body of a message to majordomo <at> vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Permalink | Reply | 0 comments |
headers
Jussi Jääskeläinen | 2 May 2003 09:07
Picon

RE: PPTP + mppe-128 + Windows XP

OK, now I have that 2.4.2b3 back again..

My options.pptp is now:
debug
name ws9
auth
ipcp-accept-remote
require-mschap-v2
#require-mppe
#require-mppe-128

> > windows start using "newest" autoloaded patches from M$ and 
> start acting
> > like Windows XP.. So W2000 can't make crypted connection to 
> VPN server
> > anymore.. ;-(
> 
> You let it make that change?  Sigh.  ;-)

Only little bit...
if require-mppe and require-mppe-128 is commented out I get (in W2000):
Disconnected.
Error 742: The remote computer does not support the required data encryption
type.

With debug messages:
May  2 09:42:37 ws9 pptpd[5022]: MGR: Launching /usr/sbin/pptpctrl to handle
client
May  2 09:42:37 ws9 pptpd[5022]: CTRL: local address = 192.168.2.2
May  2 09:42:37 ws9 pptpd[5022]: CTRL: remote address = 192.168.1.3
(Continue reading)

Permalink | Reply | 1 comment |
headers
Usha Joe | 2 May 2003 09:28
Favicon

/AutoPPP/ log in failed

Iam trying out a dial-in linux server.

The PPP Client is sending LCP req.
Linux PPP Server is failing to send a LCP response to the PPP 
Client becoz of bad username at PPP-Server.

I configured the following in the PPP Server Machine(Dial-In):

1)In /etc/mgetty+sendfax/login.config
/AutoPPP/ -    a_ppp /usr/sbin/pppd -detach auth -chap +pap 
login
*       -       -       /bin/login  <at> 

2)In /etc/mgetty+sendfax/mgetty.config

port ttyS1
modem-type data
debug 9
speed 9600
direct no
#init-chat "" AT&F OK AT#CID=1 OK ##cid is only needed for Caller 
ID
init-chat "" AT&D2 OK AT
modem-check-time 600 ## this keeps the modem awake

3)/etc/ppp/options
-detach debug /dev/ttyS1 asyncmap 0 crtscts 
10.10.10.100:10.10.10.101 noauth nobsdcomp noccp nopcomp noaccomp  
novj
(Continue reading)

Permalink | Reply | 1 comment |
headers
James Cameron | 2 May 2003 11:59
Picon
Favicon

Re: PPTP + mppe-128 + Windows XP

On Fri, May 02, 2003 at 10:07:13AM +0300, Jussi J??skel?inen wrote:
> OK, now I have that [ppp] 2.4.2b3 back again..

Good.

> if require-mppe and require-mppe-128 is commented out I get (in W2000):
> Disconnected.
> Error 742: The remote computer does not support the required data encryption
> type.

Expected.  Normal.  You can probably work around this by configuring the
connection at the client to not require encryption.  But I expect you
would want encryption.

> If I enabled those required-mppe* lines I get error message in
> /var/log/messages 
> May  2 09:44:17 ws9 pppd[5056]: sent [LCP TermReq id=0x4 "MPPE required but
> not available"]
> 
> even [though] I have mppe.o loaded as module

Wrong module name!  You are probably using a ppp-mppe-2.4.0 version 
of the MPPE kernel module.  Upgrade to the 2.4.2b3 version, or similar.
Use kernelmod (0.6 with -b, or 0.7 without -b).

> Have something changed in pppd that it don't accept anymore that mppe.o (and
> yes, I have re-compiled all modules)

Effectively, yes.
(Continue reading)

Permalink | Reply | 0 comments |
headers
Jussi Jääskeläinen | 2 May 2003 12:18
Picon

RE: PPTP + mppe-128 + Windows XP

> Wrong module name!  You are probably using a ppp-mppe-2.4.0 version 
> of the MPPE kernel module.

Yes..

>  Upgrade to the 2.4.2b3 version, 
> or similar.
> Use kernelmod (0.6 with -b, or 0.7 without -b).

???
When I untar that 2.4.2b3 packet I got ppp/ directory.. Is there somewhere,
needed stuff and where I should move them? 

--
Computers are like airconditioners: They stop working properly if you open
Windows!

Jussi Jääskeläinen
Tietotili Consulting Oy
-
To unsubscribe from this list: send the line "unsubscribe linux-ppp" in
the body of a message to majordomo <at> vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Permalink | Reply | 1 comment |
headers
James Cameron | 2 May 2003 12:39
Picon
Favicon

Re: PPTP + mppe-128 + Windows XP

On Fri, May 02, 2003 at 01:18:15PM +0300, Jussi J??skel?inen wrote:
> When I untar that 2.4.2b3 packet I got ppp/ directory.. Is there somewhere,
> needed stuff and where I should move them? 

You have a choice ... choose one only:

a) apply the patch from the ppp-2.4.2b3 source, using the script and
patches in the package;

	# cd linux/mppe
	# chmod +x mppeinstall.sh
	# ./mppeinstall.sh /usr/src/kernel-source-2.4.20
	Is this a 2.2 kernel or 2.4 kernel: 2.4
	I will now patch the kernel in directory
	/usr/src/kernel-source-2.4.20
	Press ret to continue, CTRL-C to exit:
	...

b) use the kernelmod package on the PPTP server project (poptop) which
will apply the patch for you, and compile the modules;

	# ./kernelmod.sh -b

References:
http://pptpclient.sourceforge.net/howto-debian.phtml
http://pptpclient.sourceforge.net/howto-redhat-90-build.phtml

--

-- 
James Cameron                                     (james.cameron <at> hp.com)
(Continue reading)

Permalink | Reply | 0 comments |

Gmane