[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

troubles with mppe & radius plugin in pptp vpn



Добрый день, обнаружил странный глюк: при подключении по pptp с авторизацией через радиус (plugin radius.so в опциях ppp) не работает mppe шифрование, если отключить плагин и авторизоватся через chap-secrets то все ок.
логи:
c radius:
Jun  1 10:18:35 gate pppd[2925]: RADATTR plugin wrote 4 line(s) to file /var/run/radattr.ppp0.
Jun  1 10:18:35 gate pppd[2925]: sent [CHAP Success id=0xd9 "S=DBCEA18FDDB307F1EA21F8D04406A816B20DD697"]
Jun  1 10:18:35 gate pppd[2925]: sent [LCP TermReq id=0x2 "MPPE required but not available"]
Jun  1 10:18:35 gate pppd[2925]: rcvd [CCP ConfReq id=0x4 <mppe +H +M +S +L -D +C>]
Jun  1 10:18:35 gate pppd[2925]: Discarded non-LCP packet when LCP not open
Jun  1 10:18:35 gate pppd[2925]: rcvd [IPCP ConfReq id=0x5 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-wins 0.0.0.0> <ms-dns3 0.0.0.0> <ms-wins 0.0.0.0>]
Jun  1 10:18:35 gate pppd[2925]: Discarded non-LCP packet when LCP not open
Jun  1 10:18:35 gate pppd[2925]: rcvd [LCP TermAck id=0x2 "MPPE required but not available"]
Jun  1 10:18:35 gate pppd[2925]: RADATTR plugin removed file /var/run/radattr.ppp0.
 
c chap-secrets:
Jun  1 09:38:25 gate pppd[6785]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x36554d26> <pcomp> <accomp>]
Jun  1 09:38:25 gate pppd[6785]: rcvd [LCP ConfReq id=0x0 <mru 1400> <magic 0x51370ed8> <pcomp> <accomp> <callback CBCP>]
Jun  1 09:38:25 gate pppd[6785]: sent [LCP ConfRej id=0x0 <callback CBCP>]
Jun  1 09:38:25 gate pppd[6785]: rcvd [LCP ConfReq id=0x1 <mru 1400> <magic 0x51370ed8> <pcomp> <accomp>]
Jun  1 09:38:25 gate pppd[6785]: sent [LCP ConfAck id=0x1 <mru 1400> <magic 0x51370ed8> <pcomp> <accomp>]
Jun  1 09:38:28 gate pppd[6785]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x36554d26> <pcomp> <accomp>]
Jun  1 09:38:28 gate pppd[6785]: rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x36554d26> <pcomp> <accomp>]
Jun  1 09:38:28 gate pppd[6785]: sent [LCP EchoReq id=0x0 magic=0x36554d26]
Jun  1 09:38:28 gate pppd[6785]: sent [CHAP Challenge id=0x21 <a18e4aadb6d24827ad4b25a485565636>, name = "gate"]
Jun  1 09:38:28 gate pppd[6785]: rcvd [LCP Ident id=0x2 magic=0x51370ed8 "MSRASV5.10 "]
Jun  1 09:38:28 gate pppd[6785]: rcvd [LCP Ident id=0x3 magic=0x51370ed8 "MSRAS-0-JULIA"]
Jun  1 09:38:28 gate pppd[6785]: rcvd [LCP EchoRep id=0x0 magic=0x51370ed8]
Jun  1 09:38:28 gate pppd[6785]: rcvd [CHAP Response id=0x21 <0303dc2928db5c81b0ab583deb5417430000000000000000215f649c77cd8adb57b17023d15a8b
fb1100b2bda82a892b00>, name = "123"]
Jun  1 09:38:28 gate pppd[6785]: RADATTR plugin wrote 4 line(s) to file /var/run/radattr.ppp0.
Jun  1 09:38:28 gate pppd[6785]: sent [CHAP Success id=0x21 "S=19640EC96068F43C05951FD3206A512CCDCB0A69"]
Jun  1 09:38:28 gate pppd[6785]: sent [CCP ConfReq id=0x1 <deflate 15> <deflate(old#) 15> <bsd v1 15>]
Jun  1 09:38:28 gate pppd[6785]: sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 192.168.1.7>]
Jun  1 09:38:28 gate pppd[6785]: rcvd [CCP ConfReq id=0x4 <mppe +H +M +S +L -D +C>]
Jun  1 09:38:28 gate pppd[6785]: sent [CCP ConfRej id=0x4 <mppe +H +M +S +L -D +C>]
Jun  1 09:38:28 gate pppd[6785]: rcvd [IPCP ConfReq id=0x5 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-wins 0.0.0.0> <ms-dns3 0.0.0.0> <ms-wins 0.0
.0.0>]
Jun  1 09:38:28 gate pppd[6785]: sent [IPCP ConfNak id=0x5 <addr 192.168.1.16> <ms-dns1 192.168.1.3> <ms-wins 192.168.1.3> <ms-dns3 192.168.
1.3> <ms-wins 192.168.1.3>]
Jun  1 09:38:28 gate pppd[6785]: rcvd [CCP ConfRej id=0x1 <deflate 15> <deflate(old#) 15> <bsd v1 15>]
Jun  1 09:38:28 gate pppd[6785]: sent [CCP ConfReq id=0x2]
Jun  1 09:38:28 gate pppd[6785]: rcvd [IPCP ConfRej id=0x1 <compress VJ 0f 01>]
Jun  1 09:38:28 gate pppd[6785]: sent [IPCP ConfReq id=0x2 <addr 192.168.1.7>]
Jun  1 09:38:28 gate pppd[6785]: rcvd [LCP TermReq id=0x6 "Q7\016\37777777730\000<\37777777715t\000\000\002\37777777746"]
Jun  1 09:38:28 gate pppd[6785]: sent [LCP TermAck id=0x6]
 
 
Пришлось пока шифрование отключить, благо что трафик шифруется на уровне приложения
 
pptpd.conf:
 
option /etc/ppp/options.pptpd
bcrelay eth0
localip 192.168.1.7
remoteip 192.168.1.16-31
 
options.pptpd:
lock
auth
refuse-pap
refuse-chap
refuse-mschap
require-mschap-v2
proxyarp
debug
ms-dns 192.168.1.3
ms-wins 192.168.1.3
plugin radius.so
plugin radattr.so
 
без радиуса соответственно options.pptpd:
lock
auth
refuse-pap
refuse-chap
refuse-mschap
require-mschap-v2
require-mppe
proxyarp
debug
ms-dns 192.168.1.3
ms-wins 192.168.1.3
 
Это баг или я маны недокурил?
 

Reply to: