Matthew Percival | 1 Feb 06:06
Favicon

Hot to perform a null login?

G'Day,

	I am trying to use a GSM modem to create a GPRS connection via pppd.  I
have managed to work most things out, but am finding authentication a
stumbling block: I need to send a blank name and password, but pppd is
sending my local name (which is obviously being treated as incorrect by
the server).  Looking through the pppd code, I came across null_login(),
which looks like it may provide what I need, but I cannot seem to get
pppd to call it --- obviously I am misunderstanding something along the
way, and have something set up wrong.

	Could someone please tell me how to configure pppd to reply to a PAP
request with a blank name and password?  I'll include dumps of my pppd
and chat scripts below, in case they are relevant.

	-- Matthew

/etc/ppp/peers/gprs-script:
115200
noauth
debug
crtscts
noipdefault
modem
usepeerdns
defaultroute
pap-max-authreq 3
connect-delay 10000
connect '/usr/sbin/chat -v -f /etc/ppp/gprs-init'

(Continue reading)

Bill Unruh | 1 Feb 06:16
Picon
Picon
Favicon

Re: Hot to perform a null login?

On Wed, 1 Feb 2006, Matthew Percival wrote:

> G'Day,
>
> 	I am trying to use a GSM modem to create a GPRS connection via pppd.  I
> have managed to work most things out, but am finding authentication a
> stumbling block: I need to send a blank name and password, but pppd is
> sending my local name (which is obviously being treated as incorrect by
> the server).  Looking through the pppd code, I came across null_login(),
> which looks like it may provide what I need, but I cannot seem to get
> pppd to call it --- obviously I am misunderstanding something along the
> way, and have something set up wrong.
>
> 	Could someone please tell me how to configure pppd to reply to a PAP
> request with a blank name and password?  I'll include dumps of my pppd
> and chat scripts below, in case they are relevant.

Why would you want to do this? It is not at all clear that anything can
understand a null login name.  Why do you think you need to send a null
username

You might have a line

''    GSM  ''
in /etc/pap-secrets and have
user ''
as an option for pppd.

>
> 	-- Matthew
(Continue reading)

Matthew Percival | 1 Feb 06:34
Favicon

Re: Hot to perform a null login?

G'Day,

> Why would you want to do this? It is not at all clear that anything can
> understand a null login name.  Why do you think you need to send a null
> username

	Apparently that is what is required for the server I am connecting to.
You would need to ask the provider for why or how: I am just trying to
do what I have been told.

> You might have a line
> 
> ''    GSM  ''
> in /etc/pap-secrets and have
> user ''
> as an option for pppd.

	I just tried that, but it still defaulted to my local name.
>From /var/log/syslog:
Feb  1 16:28:29 localhost pppd[15869]: sent [PAP AuthReq id=0x1
user="matthew" password=<hidden>]

	-- Matthew

-
To unsubscribe from this list: send the line "unsubscribe linux-ppp" in
the body of a message to majordomo <at> vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

(Continue reading)

Bill Unruh | 1 Feb 07:00
Picon
Picon
Favicon

Re: Hot to perform a null login?

On Wed, 1 Feb 2006, Matthew Percival wrote:

> G'Day,
>
>> Why would you want to do this? It is not at all clear that anything can
>> understand a null login name.  Why do you think you need to send a null
>> username
>
> 	Apparently that is what is required for the server I am connecting to.
> You would need to ask the provider for why or how: I am just trying to
> do what I have been told.

Surely not.

>
>> You might have a line
>>
>> ''    GSM  ''
>> in /etc/pap-secrets and have
>> user ''
>> as an option for pppd.
>
> 	I just tried that, but it still defaulted to my local name.
>> From /var/log/syslog:
> Feb  1 16:28:29 localhost pppd[15869]: sent [PAP AuthReq id=0x1
> user="matthew" password=<hidden>]

Uh, you have the login  option set.  Don't.

However a blank username could well get badly interpreted by various
(Continue reading)

James Cameron | 1 Feb 07:12
Picon
Favicon

Re: Hot to perform a null login?

Given that it's Telstra, the dominant carrier in Australia, requiring a
null username on a GSM call is not at all unusual, and probably
something that Matthew won't ever be able to work around as far as the
provider is concerned.  Authentication and billing is done using the GSM
number, and not the authentication username.  On the CDMA modem that I
have with the same carrier, a non-null shared username is used.
Everybody uses the same username as far as I can tell.

Matthew, could you show us a debug log of the connection attempt?  Bill
asked for that before, and it would be really helpful.  Add the option
debug to the command line you use to start pppd.

I agree with Bill that the "sent [PAP AuthReq" suggests that your end is
attempting to authenticate the peer.  Use the dump option to find out
where the options are coming from.

--

-- 
James Cameron
http://ftp.hp.com.au/sigs/jc/
-
To unsubscribe from this list: send the line "unsubscribe linux-ppp" in
the body of a message to majordomo <at> vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

James Carlson | 1 Feb 12:40

Re: Hot to perform a null login?

James Cameron writes:
> I agree with Bill that the "sent [PAP AuthReq" suggests that your end is
> attempting to authenticate the peer.  Use the dump option to find out
> where the options are coming from.

No.  With PAP, the authenticatee ("client") sends PAP Authenticate-
Request to the authenticator ("server").  It's the reverse of the
somewhat more familiar CHAP procedure.

--

-- 
James Carlson         42.703N 71.076W         <carlsonj <at> workingcode.com>
-
To unsubscribe from this list: send the line "unsubscribe linux-ppp" in
the body of a message to majordomo <at> vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

James Cameron | 1 Feb 12:45
Picon
Favicon

Re: Hot to perform a null login?

On Wed, Feb 01, 2006 at 06:40:50AM -0500, James Carlson wrote:
> No.  With PAP, the authenticatee ("client") sends PAP Authenticate-
> Request to the authenticator ("server").  It's the reverse of the
> somewhat more familiar CHAP procedure.

Ah yes, agreed.  My mistake.  Too much PPTP for me.  ;-}

--

-- 
James Cameron
-
To unsubscribe from this list: send the line "unsubscribe linux-ppp" in
the body of a message to majordomo <at> vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Matthew Percival | 1 Feb 23:09
Favicon

Re: Hot to perform a null login?

G'Day,

> Matthew, could you show us a debug log of the connection attempt?  Bill
> asked for that before, and it would be really helpful.  Add the option
> debug to the command line you use to start pppd.

	Here's the full log from what I sent yesterday:

Feb  1 16:28:16 localhost chat[15870]: timeout set to 10 seconds
Feb  1 16:28:16 localhost chat[15870]: abort on (NO CARRIER)
Feb  1 16:28:16 localhost chat[15870]: abort on (NO DIALTONE)
Feb  1 16:28:16 localhost chat[15870]: abort on (BUSY)
Feb  1 16:28:16 localhost chat[15870]: abort on (ERROR)
Feb  1 16:28:16 localhost chat[15870]: send (AT+WOPEN=1^M)
Feb  1 16:28:16 localhost chat[15870]: expect (OK)
Feb  1 16:28:16 localhost chat[15870]: AT+WOPEN=1^M^M
Feb  1 16:28:16 localhost chat[15870]: OK
Feb  1 16:28:16 localhost chat[15870]:  -- got it 
Feb  1 16:28:16 localhost chat[15870]: send (\dAT+CPIN?^M)
Feb  1 16:28:18 localhost chat[15870]: timeout set to 5 seconds
Feb  1 16:28:18 localhost chat[15870]: expect (READY)
Feb  1 16:28:18 localhost chat[15870]: ^M
Feb  1 16:28:18 localhost chat[15870]: AT+CPIN?^M^M
Feb  1 16:28:18 localhost chat[15870]: +CPIN: SIM PIN^M
Feb  1 16:28:23 localhost chat[15870]: alarm
Feb  1 16:28:23 localhost chat[15870]: send (\dAT+CPIN=xxxx^M)
Feb  1 16:28:24 localhost chat[15870]: expect (OK)
Feb  1 16:28:24 localhost chat[15870]: AT+CPIN=xxxx^M^M
Feb  1 16:28:24 localhost chat[15870]: OK
Feb  1 16:28:24 localhost chat[15870]:  -- got it 
(Continue reading)

Bill Unruh | 1 Feb 23:26
Picon
Picon
Favicon

Re: Hot to perform a null login?


OK, they ask for pap, and when you send them pap, they refuse to respond.
The problem is at the other end. There is nothing you can do. Shout at
them.
Now maybe it takes them more than 9 sec to respond. I see no reason why,
but you need to take it up with them.

It may be that you have the wrong username or password and this is their
way of letting you know.

On Thu, 2 Feb 2006, Matthew Percival wrote:

> G'Day,
>
>> Matthew, could you show us a debug log of the connection attempt?  Bill
>> asked for that before, and it would be really helpful.  Add the option
>> debug to the command line you use to start pppd.
>
> 	Here's the full log from what I sent yesterday:
>
> Feb  1 16:28:16 localhost chat[15870]: timeout set to 10 seconds
> Feb  1 16:28:16 localhost chat[15870]: abort on (NO CARRIER)
> Feb  1 16:28:16 localhost chat[15870]: abort on (NO DIALTONE)
> Feb  1 16:28:16 localhost chat[15870]: abort on (BUSY)
> Feb  1 16:28:16 localhost chat[15870]: abort on (ERROR)
> Feb  1 16:28:16 localhost chat[15870]: send (AT+WOPEN=1^M)
> Feb  1 16:28:16 localhost chat[15870]: expect (OK)
> Feb  1 16:28:16 localhost chat[15870]: AT+WOPEN=1^M^M
> Feb  1 16:28:16 localhost chat[15870]: OK
> Feb  1 16:28:16 localhost chat[15870]:  -- got it
(Continue reading)

Bill Unruh | 1 Feb 23:29
Picon
Picon
Favicon

Re: Hot to perform a null login?

PS:

> pap-max-authreq 3               # (from /etc/ppp/peers/gprs-script)

Make this one 5 or 7 to make sure that it is not just a timeout.

> defaultroute            # (from /etc/ppp/peers/gprs-script)
> proxyarp                # (from /etc/ppp/options)

It makes no sense to have both proxyarp and defaultroute. GEt rid of the
proxyarp.

-
To unsubscribe from this list: send the line "unsubscribe linux-ppp" in
the body of a message to majordomo <at> vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html


Gmane