Panther VPN PPTP auth problem

[boneskull]

Hi, I’m new to this forum, Panther Server, and VPN’s. 😀

I have set up my PPTP VPN at least somewhat ok–I can connect using my “admin” user. However, I cannot connect with any other account. I’m unsure whether changes need to be made on the client side, or on the server side. I’m not restricting VPN access by group…

A log follows. I’m 100% I typed the password correctly; ssh login works fine.

Tue Oct 19 20:35:08 2004 : Connect: ppp0 <--> socket[34:17]
Tue Oct 19 20:35:09 2004 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x223f0b4c> <pcomp> <accomp>]
Tue Oct 19 20:35:09 2004 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xa98395> <pcomp> <accomp>]
Tue Oct 19 20:35:09 2004 : lcp_reqci: returning CONFACK.
Tue Oct 19 20:35:09 2004 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0xa98395> <pcomp> <accomp>]
Tue Oct 19 20:35:09 2004 : rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x223f0b4c> <pcomp> <accomp>]
Tue Oct 19 20:35:09 2004 : sent [LCP EchoReq id=0x0 magic=0x223f0b4c]
Tue Oct 19 20:35:09 2004 : sent [CHAP Challenge id=0x1 <3daec648ef52a485a564d0832394f4db>, name = "baz"]
Tue Oct 19 20:35:09 2004 : rcvd [LCP EchoReq id=0x0 magic=0xa98395]
Tue Oct 19 20:35:09 2004 : sent [LCP EchoRep id=0x0 magic=0x223f0b4c]
Tue Oct 19 20:35:09 2004 : rcvd [LCP EchoRep id=0x0 magic=0xa98395]
Tue Oct 19 20:35:09 2004 : rcvd [CHAP Response id=0x1 <bafc61a5c2e785acbee6f4c8da03a47b0000000000000000c3de135303945364af1612347d1ac6f78a56f0c0099ff8b300>, name = "foo"]
Tue Oct 19 20:35:09 2004 : sent [CHAP Failure id=0x1 "E=691 R=1 C=3DAEC648EF52A485A564D0832394F4DB V=0 M=Access denied."]
Tue Oct 19 20:35:09 2004 : CHAP peer authentication failed for remote host foo
Tue Oct 19 20:35:09 2004 : sent [LCP TermReq id=0x2 "Authentication failed"]
Tue Oct 19 20:35:09 2004 : rcvd [LCP TermReq id=0x2 "Failed to authenticate ourselves to peer"]
Tue Oct 19 20:35:09 2004 : sent [LCP TermAck id=0x2]
Tue Oct 19 20:35:09 2004 : rcvd [LCP TermAck id=0x2]
Tue Oct 19 20:35:09 2004 : Connection terminated.

Thanks in advance!

[boneskull]

MacTroll wrote:

So this could be a lot of things:

1. the user HAS to have an Advanced password (OD), can’t be basic.
2. If the user is in the LDAP domain, you need to add the MPEE user to the LDAP domain. Check the Apple kbase site for more info.
3. Have you enabled only a certain group in Server Admin to use the VPN?

1. Not sure what that means or how to do it–but I’ll Google for it (unless you can give me a quick explanation).
2. Not in LDAP
3. No

thanks much!

[boneskull]

thanks for the tip. I was able to change the password to advanced in workgroup admin, and now it works. thank you.

[Author]

Posts