James Cameron | 9 Aug 2007 04:32
Picon
Favicon

RFC: Red Hat pptpd HOWTO updated with Yum repository details

http://poptop.sourceforge.net/dox/redhat-howto.phtml has been updated
with brief instructions for use of the yum repositories.

Needs review and further work to make the sequence simpler.

Please send feedback to me or the mailing list, thanks.

--

-- 
James Cameron                         http://quozl.netrek.org/
HP Open Source, Volunteer             http://opensource.hp.com/
PPTP Client Project, Release Engineer http://pptpclient.sourceforge.net/

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
James Cameron | 9 Aug 2007 09:09
Picon
Favicon

Re: PopTop does not log why I can't connect when ip-pool is exhausted.

On Thu, Jul 19, 2007 at 09:46:08AM -0700, Eivind wrote:
> You sit there and watch the logs pass by for 5 min and then you try to
> connect with a third client. No response which is expected at this time
> since you have exhausted the pool of ip-addresses. However, for debugging
> purposes I'd still think that displaying the message would be appropriate. 

I've reviewed this section of the code.  It is lines 243 to 254 of
pptpmanager.c.

The logic of the program is that it is normally woken up to process an
incoming connection.  But once the available connection slots are filled
it will not ask the operating system to wake it until it has a child
process terminate.

As a result, the listening queue on the socket becomes the pending
connection queue, and file descriptors are not consumed.

This could be changed.  Do you have a proposed implementation?

> After studied the code for a bit, it seems like the fd that pptpd listens
> for incoming connections is never added to the file descriptor set in
> pptpmanager.c and hence why the select() never wakes up to tell us about it.

What should happen is that the SIGCHLD from an exiting child will cause
select(2) to return, and when the event loop restarts slot_find_empty()
will return the empty slot, and so the file descriptor set will be set
up with the listening socket.

Perhaps what is happening is that the pptpctrl processes are not exiting
fast enough?
(Continue reading)

Eivind | 9 Aug 2007 20:09
Picon

Re: PopTop does not log why I can't connect when ip-pool is exhausted.


James,

Yes it does add complexity, and I've tested poptop 1.3.4 with this patch and
it passed my unit tests. Yet, I am limited to the hardware that I am working
on an XScale CPU on a IXP425 platform. 

The only impact I've seen this have, is that Windows would normally try to
connect for approx. 60s before it is giving up. Once it gives up, it
displays "Error 678: blah ..." stating that the server could not be
connected.

In the case you do pick up that connection, and terminate the link due to
high load / user count, it will display a different error message (I have to
go back and check, but I think it was 629 --
http://msdn2.microsoft.com/en-us/library/bb530704.aspx). 

But again, a sysadmin will have the ability to go and check the logs emitted
by the server. I think that would be expected in this case.

Best Regards,
- Eivind

James Cameron-2 wrote:
> 
> On Thu, Jul 19, 2007 at 09:46:08AM -0700, Eivind wrote:
>> You sit there and watch the logs pass by for 5 min and then you try to
>> connect with a third client. No response which is expected at this time
>> since you have exhausted the pool of ip-addresses. However, for debugging
>> purposes I'd still think that displaying the message would be
(Continue reading)

James Cameron | 10 Aug 2007 06:52
Picon
Favicon

Re: PopTop does not log why I can't connect when ip-pool is exhausted.

Okay, so it passed your tests.  I could either take the patch as-is or
ask for review by others.  I think a review would be useful, since the
project is in slow maintenance mode and there is a risk of releasing
new defects.

So can anyone else confirm this patch works for them?

--

-- 
James Cameron                         http://quozl.netrek.org/
HP Open Source, Volunteer             http://opensource.hp.com/
PPTP Client Project, Release Engineer http://pptpclient.sourceforge.net/

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
Reza Behroozi | 11 Aug 2007 01:24

[flash taturial]VPN-PPTP server on Debian

http://www.en.persianadmins.com/article/linux/VPN-PPTP_server_on_Debian_2007081119.html

--
Best Regards
Reza Behroozi
Weblog :
http://reza.behroozi.info
Persian Site :
http://www.persianadmins.com
English site :
http://en.persianadmins.com
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Poptop-server mailing list
Poptop-server <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/poptop-server
hadi golestani | 18 Aug 2007 13:16
Picon

error 628

I've installed pptpd server, but when I try to connect to this server from my house to the server in a real data center, from windows xp sp2, I got an error (628)
The connection was terminated by the remote computer before it could be completed, for further assistance , click more info ..............



It usually occurs after verifying username and password.
what's the cause?

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Poptop-server mailing list
Poptop-server <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/poptop-server
James Cameron | 20 Aug 2007 01:55
Picon
Favicon

Re: error 628

Error 628 is generic.  There are many causes.  To diagnose further you
will have to capture and analyse logs from the host running pptpd.

The most recent posting to this mailing list on the same error ... was
discovered to be incorrect installation of pptpd.

--

-- 
James Cameron                         http://quozl.netrek.org/
HP Open Source, Volunteer             http://opensource.hp.com/
PPTP Client Project, Release Engineer http://pptpclient.sourceforge.net/

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
Bart Steens | 21 Aug 2007 09:42
Picon

Broken connections persisting at server side

Hi all,
 
I am using pptpd V1.3.0 on a Debian distribution. Everything is working fine, except for one small thing, which I will try to explain below.
 
Most of the users listed in my chap-secrets are set to receive a dynamic IP address. Some users however have a fixed IP address assigned to them for rendezvous purposes. 
 
When a client that has a fixed IP address assigned logs on to the VPN server a connection is established. If the connection breaks abnormally after this point at the client side (caused by a bad physical network connection, Windows crashing et cetera) the server does not notice.
If then the client reconnects after this all seems fine, but on the server side two PPP connections are showing which are bound to the same IP address (visible when doing a 'route'). In this state the client is unable to use the network connection because of the apparant routing problem that now exists on the VPN server. The old 'zombie' connection disappears only after a long time or after restarting.
 
Is this a known issue and how can I fix it?
 
Thanks in advance.
 
Kind regards,
Bart Steens
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Poptop-server mailing list
Poptop-server <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/poptop-server
Sergio Restrepo | 21 Aug 2007 22:59
Picon

Client cannot connect

Hello,

I am trying to set up a pptpd under debian with kernel 2.6.18-3-686, the server starts correctly with what I assume to be a correct configuration, however the clients cannot connect.

the pptpd/pppd log looks the same as every other log Ive seen out there except for this

Aug 21 15:49:11 remoto pppd[17267]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0xb1925ce0> <pcomp> <accomp>]

However, I never get a response from the client and the connection is never completed.

How can I fix this? What other information would be useful in order to solve this problem?

Thank you,

Sergio Restrepo

--
"Pensar, analizar, inventar... no son actos anómalos, son la normal respiración de la inteligencia. Glorificar el ocasional cumplimiento de esa función, atesorar antiguos y ajenos pensamientos, recordar con incrédulo estupor lo que el doctor universalis pensó, es confesar nuestra languidez o nuestra barbarie. Todo hombre debe ser capaz de todas las ideas y entiendo que en el porvenir lo será."

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Poptop-server mailing list
Poptop-server <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/poptop-server
Gene Nazarov | 21 Aug 2007 23:48

Re: Client cannot connect

Not to be snarky and all.

 

But what is the client configuration and OS? what is the server configuration? Can any other clients connect or just this one that doesn’t work? Are there any firewalls in between? Does it work if you disable firewall? If you do have firewall enabled, did you open proper ports and enable GRE protocol acceptance? Can you connect a test client on local unsecured LAN? Can the client ping the server, do the packets make it all the way into the server (verify with tcpdump or something)? Etc.

 

Please give more info.

 

From: poptop-server-bounces <at> lists.sourceforge.net [mailto:poptop-server-bounces <at> lists.sourceforge.net] On Behalf Of Sergio Restrepo
Sent: Tuesday, August 21, 2007 4:00 PM
To: poptop-server <at> lists.sourceforge.net
Subject: [Poptop-server] Client cannot connect

 

Hello,

I am trying to set up a pptpd under debian with kernel 2.6.18-3-686, the server starts correctly with what I assume to be a correct configuration, however the clients cannot connect.

the pptpd/pppd log looks the same as every other log Ive seen out there except for this

Aug 21 15:49:11 remoto pppd[17267]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0xb1925ce0> <pcomp> <accomp>]

However, I never get a response from the client and the connection is never completed.

How can I fix this? What other information would be useful in order to solve this problem?

Thank you,

Sergio Restrepo

--
"Pensar, analizar, inventar... no son actos anómalos, son la normal respiración de la inteligencia. Glorificar el ocasional cumplimiento de esa función, atesorar antiguos y ajenos pensamientos, recordar con incrédulo estupor lo que el doctor universalis pensó, es confesar nuestra languidez o nuestra barbarie. Todo hombre debe ser capaz de todas las ideas y entiendo que en el porvenir lo será."

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Poptop-server mailing list
Poptop-server <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/poptop-server

Gmane