Pptp VPN

aty · 07-24-2005, 11:37 AM

I have managed to setup a vpn server with pptpd. But there is a problem when a client tries to connect the server.

Quote:

Jul 24 17:30:29 hungarikum pptpd[20370]: CTRL: Client 192.168.1.9 control connection started
Jul 24 17:30:29 hungarikum pptpd[20370]: CTRL: Starting call (launching pppd, opening GRE)
Jul 24 17:30:29 hungarikum pppd[20371]: The remote system is required to authenticate itself
Jul 24 17:30:29 hungarikum pppd[20371]: but I couldn't find any suitable secret (password) for it to use to do so.
Jul 24 17:30:29 hungarikum pptpd[20370]: GRE: read(fd=4,buffer=804d560,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
Jul 24 17:30:29 hungarikum pptpd[20370]: CTRL: PTY read or GRE write failed (pty,gre)=(4,5)
Jul 24 17:30:29 hungarikum pptpd[20370]: CTRL: Reaping child PPP[20371]
Jul 24 17:30:29 hungarikum pptpd[20370]: CTRL: Client 192.168.1.9 control connection finished

I try to connect with user: pptpd, pass: pptpd from the win.

Here are the config files of the server:
/etc/pptpd.conf:

Quote:

speed 115200
option /etc/ppp/pptpd-options
localip 192.168.0.1
remoteip 192.168.0.234-238,192.168.0.245

/etc/ppp/pppd-options:

Quote:

debug
name pptpd
auth
require-mschap-v2
mppe required
netmask 255.255.255.0
nodefaultroute
proxyarp
lock
ipcp-accept-remote
ipcp-accept-local
lcp-echo-failure 30

/etc/ppp/chap-secrets:

Quote:

[root@hungarikum ppp]# cat /etc/ppp/chap-secrets
# Secrets for authentication using CHAP
# client server secret IP addresses
pptpd pptdp "pptpd" *

What is the problem?

mpeg4codec · 07-25-2005, 01:53 AM

You list this file:

/etc/ppp/pppd-options

Is that just a typo? Shouldn't it be pptpd-options? But anyway, try changing require-mschap-v2 to require-chap. Once you do that, remove the line require-mppe-128.

If the clients can connect [they will give you warnings about no encryption], then either your kernel or your pppd binary doesn't have support for mppe encryption. You will have to build and patch them yourself. Let me know how it goes.

aty · 07-26-2005, 05:06 AM

It was just a typo.
The problem was a bit complicated. I had to setup this vpn server for an old Mandrake and i wasnt allowed to change the kernel.
I found a kernelmod here: http://linux-bsd-central.com/index.p...ent/view/3/25/
I patched the old kernel with the help of this script. Although the old 2.4.19 contained already a mppe patch, but the pptpd didnt want to use it.
Furthermore, the configuration file of the pptpd required a special structure:
require-mschap-v2
mppe required
mppe stateless
With these options it works!

anis123 · 04-23-2014, 12:50 AM

Dear aty

i face the same problem you face i solved it from your post but i face problems when i try to connect please help me in this regard

Warning: can't open options file /root/.ppprc: Permission denied

GRE: read(fd=6,buffer=6124a0,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
my /etc/ppp/chap-secret file is
xxxx xxxx abcdabcd *