Re: ppp security problem?

[Philip Hands <phil@hands.com>]

Lee Bradshaw <lee@sectionIV.com> writes:

> provides this option. It seems like the descriptions need to be changed
> or there is a security problem. Any comments before I file a bug?

Well it is true that mgetty provides this in /etc/mgetty/login.conf:

  /AutoPPP/ -     a_ppp   /usr/sbin/pppd auth -chap +pap login

but I take your point that there's a conflict between the comments.

Personally, I don't use PAP for incoming connections (I force CHAP),
so it's not something that impinges on me.

Would people like to tell me how they actually use this stuff, so I've
got some basis on which to make the decision.

My initial reaction is to uncomment the ``login'' in /etc/ppp/options,
and tweak the comment to suggest commenting it out if you want to use
start ppp after logging in.

Cheers, Phil.