LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 12-15-2005, 10:29 AM   #1
emphaze
LQ Newbie
 
Registered: Oct 2003
Posts: 14

Rep: Reputation: 0
Poptop + Freeradius + MySQL + DNAT


Hi all.
I'm using poptop vpn server together with free radius and mysql for authentication and accounting. Due to increased load of main servers, it was necessary to install several new pptpds.
Since i don't want to change settings on every client pc , i've decided to do port forwarding, so clients can be automaticly redirected to the new VPN servers. Connection between client and pptpd is established but radius server does not "see" the request for some reason (i'm using radiusd -X), so auth cannot be processed,client hangs on "Verifying username and password" and eventually disconnects with error 619. At the same time wnen connection is made directly to the server (without dnat) everyting works just fine.
Here is the info from syslog, but i think that these errors resulted from pppd, because it is unable to complete the request.

Dec 15 12:24:14 oborishte pppd[10551]: LCP: timeout sending Config-Requests
Dec 15 12:24:14 oborishte pppd[10551]: tcflush failed: Bad file descriptor
Dec 15 12:24:14 oborishte pppd[10551]: tcsetattr: Invalid argument (line 1001)
Dec 15 12:24:14 oborishte pptpd[10550]: GRE: read(fd=6,buffer=804e780,len=8196) from PTY failed: status = -1 error = Input/out
put error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
Dec 15 12:24:14 oborishte pptpd[10550]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7)


Here is my options.pptpd file

cat /etc/ppp/options.pptpd
name *
lock
mtu 1400
mru 1400
proxyarp
ipcp-accept-local
ipcp-accept-remote
lcp-echo-failure 30
lcp-echo-interval 5
deflate 0
require-mschap-v2
require-chap
#nomppe
#nomppc

plugin radius.so

ms-dns some dns
ms-dns some dns
ms-dns some dns

I'm curtently using
freeradius-1.0.5.tar.gz ppp-2.4.3.tar.gz pptpd-1.2.3.tar.gz radiusclient-0.3.2.tar.gz on Slackware 10.0 kernel 2.4.26

Any ideas will be appreciated since i'm completely stuck on this.
 
Old 12-27-2005, 09:02 AM   #2
emphaze
LQ Newbie
 
Registered: Oct 2003
Posts: 14

Original Poster
Rep: Reputation: 0
Nobody ever done this?
Here are my iptables rules

iptables -t nat -A PREROUTING -i eth2 -s client.network -d old.vpn.server -p tcp --dport 1723 -j DNAT --to-destination new.vpn.server:1723

iptables -t nat -A PREROUTING -i eth2 -p gre -j DNAT --to new.vnp.server

...or maybe pppd is parsing wrong arguments to pptpd because of the GRE tunnel?
 
Old 12-28-2005, 01:15 AM   #3
flashingcurser
Member
 
Registered: Jan 2003
Distribution: many win/nix/mac
Posts: 259

Rep: Reputation: 31
Try changing "-p gre" to "-p 47", only thing I could think of. Though I'm told "gre" or "GRE" should work. Kind of a longshot.



dan
 
Old 01-04-2006, 08:15 AM   #4
emphaze
LQ Newbie
 
Registered: Oct 2003
Posts: 14

Original Poster
Rep: Reputation: 0
I've already tried with -p 47 with the same result. I gave up and the only thing that continuing to bother me now is...why?
Hope some day i'll get answer to my question and thank you for your help anyway.
 
Old 01-04-2006, 04:55 PM   #5
flashingcurser
Member
 
Registered: Jan 2003
Distribution: many win/nix/mac
Posts: 259

Rep: Reputation: 31
I hope you do too. I have tried at various times to set up a pptp vpn server with only very limited success. Mysterious gremlins...

If you find an answer please post back.



dan
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
mysql error Can't connect to local MySQL server through socket '/var/lib/mysql/mysql. Dannux Linux - Software 3 03-24-2006 09:44 AM
where is freeradius barrythai Suse/Novell 1 03-04-2005 01:53 PM
Freeradius Help jrmontg Linux - Networking 2 03-02-2005 11:40 AM
freeradius Jorgr Linux - Software 1 02-23-2005 03:31 AM
PoPToP VPN with Shorewall: can only reach PoPToP server pgwillemsen Linux - Networking 0 12-27-2004 08:11 AM


All times are GMT -5. The time now is 05:54 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration