Re: pap-secrets

["Jens B. Jorgensen" <jjorgens@bdsinc.com>]

The new ppp requires that you have a fourth field for acceptable IP addresses. Also,
you *must* have an entry in pap-secrets (a wildcard entry at least) even if you're
authenticating against your regular password database (as your options shows you are).
Just put in '*' as the fourth field of the appropriate entry in pap-secrets and you
should be good.

Eugene Sevinian wrote:

> Hi All,
> Playing with ppp I have found that It is impossible to connect
> from w95 box into linux if there exist /etc/pap/pap-secrets file.
> Everything is ok when I delete this file. It looks like w95 can not use
> PAP. Is it true? Or there are possible errors in /etc/ppp/options? As I
> understand the main propose of pap-secrets is to restrict some users to
> login via ppp. How can I impose these restrictions without secrets??
>
> Any  tips?
>
> Below some info which might help to understand what is going on.
>
> Thanks,
>         Eugene
>
> Here is fragment from ppp.log:
>
>  Connect: ppp0 <--> /dev/ttyS1
>  sent [LCP ConfReq id=0x1 <mru 542> <asyncmap 0x0> <auth pap> <magic
> 0xe5ad3246]
>  rcvd [LCP ConfAck id=0x1 <mru 542> <asyncmap 0x0> <auth pap> <magic
> 0xe5ad3246]
>  rcvd [LCP ConfReq id=0x3 <asyncmap 0xa0000> <magic 0x1a4e86> <pcomp>
> <accomp> ]
>  sent [LCP ConfRej id=0x3 < 0d 03 06>]
>  sent [LCP ConfReq id=0x1 <mru 542> <asyncmap 0x0> <auth pap> <magic
> 0xe5ad3246]
>  rcvd [LCP ConfReq id=0x4 <asyncmap 0xa0000> <magic 0x1a4e86> <pcomp>
> <accomp>]
>  sent [LCP ConfAck id=0x4 <asyncmap 0xa0000> <magic 0x1a4e86> <pcomp>
> <accomp>]
>  rcvd [LCP ConfAck id=0x1 <mru 542> <asyncmap 0x0> <auth pap> <magic
> 0xe5ad3246]
>  rcvd [PAP AuthReq id=0x1 user="sevinian" password="mypasswd"]
>  PAP authentication failure for sevinian
>  sent [PAP AuthNak id=0x1msg="Login incorrect"]
>  sent [LCP TermReq id=0x2]
>  rcvd [LCP TermAck id=0x2]
>  Connection terminated.
>
> /etc/ppp/options:
>
> dns-addr 194.x.x.x
> asyncmap 0
> auth
> crtscts
> lock
> modem
> mru 542
> +pap
> debug
> domain yerphi.am
> remotename xyz
> proxyarp
> login
> lcp-echo-interval 60
> lcp-echo-failure 4
> pap-restart 3
> pap-max-authreq 3
>
> /etc/ppp/pap-secrets:
>
> *       xyz  ""
>
> Eugene Sevinian
>
> ----------------------------
> CRD, YerPhI, 375036, Armenia
> URL: http://crdlx5.yerphi.am/
> Phone: 374-2-344873
>
> --
> Unsubscribe?  mail -s unsubscribe debian-user-request@lists.debian.org < /dev/null

--
Jens B. Jorgensen
jjorgens@bdsinc.com