FreeRADIUS + PoPToP Error: rc_send_server: no reply...

RageD · 06-03-2008, 04:34 PM

Ok. I'm receiving this error, any ideas?

Quote:

Originally Posted by /var/log/messages

Jun 3 04:27:57 vpnserver1 pptpd[5011]: CTRL: Client MY_IP control connection started
Jun 3 04:27:57 vpnserver1 pptpd[5011]: CTRL: Starting call (launching pppd, opening GRE)
Jun 3 04:27:57 vpnserver1 pppd[5012]: Plugin radius.so loaded.
Jun 3 04:27:57 vpnserver1 pppd[5012]: RADIUS plugin initialized.
Jun 3 04:27:57 vpnserver1 pppd[5012]: Plugin radattr.so loaded.
Jun 3 04:27:57 vpnserver1 pppd[5012]: RADATTR plugin initialized.
Jun 3 04:27:57 vpnserver1 pppd[5012]: Plugin /usr/lib/pptpd/pptpd-logwtmp.so loaded.
Jun 3 04:27:57 vpnserver1 pppd[5012]: pptpd-logwtmp: $Version$
Jun 3 04:27:57 vpnserver1 pppd[5012]: pppd 2.4.4 started by root, uid 0
Jun 3 04:27:57 vpnserver1 pppd[5012]: Using interface ppp0
Jun 3 04:27:57 vpnserver1 pppd[5012]: Connect: ppp0 <--> /dev/pts/1
Jun 3 04:28:01 vpnserver1 pptpd[5011]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
Jun 3 04:28:31 vpnserver1 pppd[5012]: rc_send_server: no reply from RADIUS server RDNS_OF_SERVER_IP:1812
Jun 3 04:28:31 vpnserver1 pppd[5012]: Peer Dennis failed CHAP authentication
Jun 3 04:28:31 vpnserver1 pppd[5012]: Modem hangup
Jun 3 04:28:31 vpnserver1 pppd[5012]: Connection terminated.
Jun 3 04:28:31 vpnserver1 pppd[5012]: Exit.
Jun 3 04:28:31 vpnserver1 pptpd[5011]: CTRL: Client MY_IP control connection finished

I have properly set everything up I believe. RADIUS server is running on proper server on proper port. IP:1812 this is set in both /etc/radiusclient/radiusclient.conf and /etc/raddb/radius.conf.

Any ideas?

mppe is enabled under MS-CHAP.

Without running it through RADIUS connection is fine.

-RageD

RageD · 06-03-2008, 06:30 PM

New error. I fixed all the connection problems (I think) but here's what I'm getting now:

Quote:

Originally Posted by /var/log/radius/radius.log

Tue Jun 3 06:28:23 2008 : Auth: Login incorrect: [Dennis/<no User-Password attribute>] (from client VPN port 0 cli MY_IP)

and

Quote:

Originally Posted by /var/log/messages

Jun 3 06:28:20 vpnserver1 pptpd[18171]: CTRL: Client MY_IP control connection started
Jun 3 06:28:20 vpnserver1 pptpd[18171]: CTRL: Starting call (launching pppd, opening GRE)
Jun 3 06:28:20 vpnserver1 pppd[18172]: Plugin radius.so loaded.
Jun 3 06:28:20 vpnserver1 pppd[18172]: RADIUS plugin initialized.
Jun 3 06:28:20 vpnserver1 pppd[18172]: Plugin radattr.so loaded.
Jun 3 06:28:20 vpnserver1 pppd[18172]: RADATTR plugin initialized.
Jun 3 06:28:20 vpnserver1 pppd[18172]: Plugin /usr/lib/pptpd/pptpd-logwtmp.so loaded.
Jun 3 06:28:20 vpnserver1 pppd[18172]: pptpd-logwtmp: $Version$
Jun 3 06:28:20 vpnserver1 pppd[18172]: pppd 2.4.4 started by root, uid 0
Jun 3 06:28:20 vpnserver1 pppd[18172]: Using interface ppp0
Jun 3 06:28:20 vpnserver1 pppd[18172]: Connect: ppp0 <--> /dev/pts/2
Jun 3 06:28:23 vpnserver1 pptpd[18171]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
Jun 3 06:28:33 vpnserver1 pppd[18172]: rc_check_reply: received invalid reply digest from RADIUS server
Jun 3 06:28:33 vpnserver1 pppd[18172]: Peer Dennis failed CHAP authentication
Jun 3 06:28:33 vpnserver1 pppd[18172]: Connection terminated.
Jun 3 06:28:34 vpnserver1 pppd[18172]: Exit.
Jun 3 06:28:34 vpnserver1 pptpd[18171]: GRE: read(fd=6,buffer=8059660,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
Jun 3 06:28:34 vpnserver1 pptpd[18171]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7)
Jun 3 06:28:34 vpnserver1 pptpd[18171]: CTRL: Client MY_IP control connection finished

Anyone?

-RageD

RageD · 06-03-2008, 07:43 PM

Some more output - (ran FreeRADIUS in Debug mode)

Code:

rad_recv: Access-Request packet from host SERVER_IP:32782, id=171, length=147
        Service-Type = Framed-User
        Framed-Protocol = PPP
        User-Name = "Dennis"
        MS-CHAP-Challenge = 0x6aa528a15267f23d56d429876afe98bd
        MS-CHAP2-Response = 0xd000235258fe0c6a2637e9acbecbc8a1f6810000000000000000f9da1e9a9500d877c31957e7a77942d3363091d894a38d31
        Calling-Station-Id = "MY_IP"
        NAS-IP-Address = 127.0.0.1
        NAS-Port = 0
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 1
  modcall[authorize]: module "preprocess" returns ok for request 1
  modcall[authorize]: module "chap" returns noop for request 1
  rlm_mschap: Found MS-CHAP attributes.  Setting 'Auth-Type  = mschap'
  modcall[authorize]: module "mschap" returns ok for request 1
    rlm_realm: No '@' in User-Name = "Dennis", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for request 1
  rlm_eap: No EAP-Message, not doing EAP
  modcall[authorize]: module "eap" returns noop for request 1
    users: Matched entry DEFAULT at line 157
    users: Matched entry DEFAULT at line 176
    users: Matched entry DEFAULT at line 188
  modcall[authorize]: module "files" returns ok for request 1
modcall: leaving group authorize (returns ok) for request 1
  rad_check_password:  Found Auth-Type MS-CHAP
auth: type "MS-CHAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group MS-CHAP for request 1
  rlm_mschap: No User-Password configured.  Cannot create LM-Password.
  rlm_mschap: No User-Password configured.  Cannot create NT-Password.
  rlm_mschap: Told to do MS-CHAPv2 for Dennis with NT-Password
  rlm_mschap: FAILED: No NT/LM-Password.  Cannot perform authentication.
  rlm_mschap: FAILED: MS-CHAP2-Response is incorrect
  modcall[authenticate]: module "mschap" returns reject for request 1
modcall: leaving group MS-CHAP (returns reject) for request 1
auth: Failed to validate the user.
Login incorrect: [Dennis/<no User-Password attribute>] (from client VPN port 0 cli MY_IP)

RageD · 06-04-2008, 12:06 PM

Anyone? This is an attempt to connect to PopTop through windows client.

-RageD

easyhorpak · 04-08-2009, 08:45 AM

Login incorrect: [Dennis/<no User-Password attribute>] (from client VPN port 0 cli MY_IP)

you didn't add the attribute User-Password to table radcheck for radius to check username and password