Dotan Cohen wrote:
On 11/21/05, Kostas Sfakiotakis <kostassf@xxxxxxxxxxxxxxx> wrote:
Greetings Paul,
Well am not an expert in VPN connections so this might be something stupid
but anyway here it goes .
Paul Smith wrote:
On 11/20/05, Dotan Cohen <dotancohen@xxxxxxxxx> wrote:
I can't figure out how to get it to authorize with MS-CHAP. I have
checked "Require Microsoft point-to-point Encryption" under the
encryption menu. This is the output:
Using interface ppp1pptpconfig: monitoring interface ppp1
Connect: ppp1 <--> /dev/pts/2
Warning - secret file /etc/ppp/pap-secrets has world and/or group access
Warning - secret file /etc/ppp/pap-secrets has world and/or group access
First of all here we have a permissions problem . I guess a login as root
and then "chmod 700 /etc/ppp/pap-secrets" could resolve the problem .
PAP authentication succeeded
Well the above line says PAP ( Password Authentication Protocol ) succeded
How do we know that the VPN Server actually offers CHAP Authentication
and not just PAP Authentication since the two of them are entirely
different
things.
I'm sorry to ask for the hand-holding. There just doesn't seem to be
any information on this available. When I get this working, I'll piece
together a howto on the subject. In the meantime, how do I get it to
authenticate with MS-CRAP?
I have no knowledge of MS-CRAP ????? What's it's meaning ???
Does it actually mean MS- CHAP as of ( MS - Chalenge Host Authentication
Protocol )
Btw if there is a CHAP Authentication to be performed is there
any /etc/ppp/chap-secrets file available ???
Kind Regards,
Kostas
I did a quick locate:
[root@localhost ~]# locate chap
/etc/ppp/chap-secrets
/root/.kde/share/apps/RecentDocuments/chap_ms.h.desktop
/usr/share/slib/chap.scm
/usr/share/doc/HTML/en/kppp/chap.docbook
/usr/include/pppd/chap_ms.h
/usr/include/pppd/chap-new.h
I opened up the chap_ms.h file and it contains this line:
# client server secret IP addresses
But what could my secret be? I don't know.
Edit the file /etc/ppp/chap-secrets
Assuming you are trying to log into domain MYDOMAIN, username MYUSER,
with password MYPW, try this:
# client server secret IP addresses
MYDOMAIN\\MYUSER PPTP MYPW
PPTP MYDOMAIN\\MYUSER MYPW
Paul.
