Why are you asking, doesn't it work? Testing should show if it is right configuration for you.
Looking at the configuration, I suggest you do not skip "startup:" section (look at example in distribution sample config file). It's handy to configure console for run-time daemon control. And you may find useful put "set global l2tptimeout" command there.
Also, I recommend to enable more detailed logging for initial testing period:
log +echo +iface +iface2 +link +auth +bund +lcp +lcp2 +phys +phys2 +radius +radius2
Setup your /etc/syslog.conf to write mpd logs to a file:
!mpd*.*/var/log/mpd.log
Read the log after mpd5 is (re-)started because it describes obvious configuration errors there, if any.
Also you may like setting interface descriptions:
set iface description "%t: %U %A %o %O"
You set extra "set link keep-alive 0 0" parameters overriden with later command. And no need to specify "set pptp self 0.0.0.0", that's default. Same for l2tp.
You really need to use "set pptp disable windowing", otherwise PPtP will get you troubles.
Also, you may share single IP pool for PPtP and L2TP, if you wish. The pool created once may be referenced multiple times.
Last edit: Eugene Grosbein 2020-06-19
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] Accepting PPTP connection
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] Link: OPEN event
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: Open event
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: state change Initial --> Starting
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: LayerStart
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] PPTP: attaching to peer's outgoing call
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] Link: UP event
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: Up event
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: state change Starting --> Req-Sent
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: SendConfigReq #1
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] ACFCOMP
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] PROTOCOMP
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] MRU 1500
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] MAGICNUM 0xb3caa23b
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] AUTHPROTO CHAP MSOFTv2
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] MP MRRU 2048
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] MP SHORTSEQ
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] ENDPOINTDISC [802.1] 0c c4 7a ac 51 1e
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: rec'd Configure Request #0 (Req-Sent)
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] MRU 1400
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] MAGICNUM 0x515275bc
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] PROTOCOMP
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] ACFCOMP
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] CALLBACK 6
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: SendConfigRej #0
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] CALLBACK 6
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: rec'd Configure Request #1 (Req-Sent)
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] MRU 1400
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] MAGICNUM 0x515275bc
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] PROTOCOMP
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] ACFCOMP
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: SendConfigAck #1
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] MRU 1400
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] MAGICNUM 0x515275bc
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] PROTOCOMP
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] ACFCOMP
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: state change Req-Sent --> Ack-Sent
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] LCP: SendConfigReq #2
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] ACFCOMP
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] PROTOCOMP
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MRU 1500
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MAGICNUM 0xb3caa23b
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] AUTHPROTO CHAP MSOFTv2
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MP MRRU 2048
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MP SHORTSEQ
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] ENDPOINTDISC [802.1] 0c c4 7a ac 51 1e
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] LCP: rec'd Configure Reject #2 (Ack-Sent)
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MP MRRU 2048
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MP SHORTSEQ
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] ENDPOINTDISC [802.1] 0c c4 7a ac 51 1e
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] LCP: SendConfigReq #3
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] ACFCOMP
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] PROTOCOMP
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MRU 1500
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MAGICNUM 0xb3caa23b
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] AUTHPROTO CHAP MSOFTv2
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] LCP: rec'd Configure Ack #3 (Ack-Sent)
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] ACFCOMP
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] PROTOCOMP
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MRU 1500
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MAGICNUM 0xb3caa23b
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] AUTHPROTO CHAP MSOFTv2
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] LCP: state change Ack-Sent --> Opened
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] LCP: auth: peer wants nothing, I want CHAP
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] CHAP: sending CHALLENGE #1 len: 21
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] LCP: LayerUp
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] LCP: rec'd Ident #2 (Opened)
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MESG: MSRASV5.20
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] LCP: rec'd Ident #3 (Opened)
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MESG: MSRAS-0-DESKTOP-NLNAQH7
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] LCP: rec'd Ident #4 (Opened)
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MESG: <fb>a`<e4>kM-^\JD<af>Oby
<a0><ef>1M-^R
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] CHAP: rec'd RESPONSE #1 len: 58
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] Name: "aboo"
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] AUTH: Trying RADIUS
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] RADIUS: Authenticating user 'aboo'
Jun 20 09:45:21 doctor mpd[44831]: [L_pptp-2] CHAP: rec'd RESPONSE #1 len: 58
Jun 20 09:45:21 doctor mpd[44831]: [L_pptp-2] Name: "aboo"
Jun 20 09:45:21 doctor mpd[44831]: [L_pptp-2] CHAP: Auth return status: busy
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] RADIUS: rad_send_request for user 'aboo' failed: No valid RADIUS responses received
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] AUTH: RADIUS returned error
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] AUTH: Trying INTERNAL
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] AUTH: User "aboo" not found in secret file
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] AUTH: INTERNAL returned: failed
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] AUTH: ran out of backends
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] CHAP: Auth return status: failed
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] CHAP: Reply message: E=691 R=0 M=Login incorrect
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] CHAP: sending FAILURE #1 len: 31
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: authorization failed
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: parameter negotiation failed
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: state change Opened --> Stopping
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: SendTerminateReq #4
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: LayerDown
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: rec'd Terminate Ack #4 (Stopping)
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: state change Stopping --> Stopped
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: LayerFinish
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] PPTP call terminated
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] Link: DOWN event
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: Close event
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: state change Stopped --> Closed
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: Down event
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: state change Closed --> Initial
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] Link: SHUTDOWN event
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] Link: Shutdown</ef></a0></af></e4></fb>
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Jun 20 09:45:21 doctor mpd[44831]: [L_pptp-2] CHAP: Auth return status: busy
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] RADIUS: rad_send_request for user 'aboo' failed: No valid RADIUS responses received
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] AUTH: RADIUS returned error
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] AUTH: Trying INTERNAL
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] AUTH: User "aboo" not found in secret file
Please try reading the log. It clearly states that your RADIUS server does not respond and user not found in the mpd.secret, so authorization failes. Fix it and you will be OK.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Just getting rid of Internal, I got i.e. set auth disable interal ,
I got
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] Accepting PPTP connection
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] Link: OPEN event
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: Open event
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: state change Initial --> Star
ting
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: LayerStart
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] PPTP: attaching to peer's outgoing
call
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] Link: UP event
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: Up event
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: state change Starting --> Req
-Sent
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: SendConfigReq #1
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] ACFCOMP
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] PROTOCOMP
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] MRU 1500
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] MAGICNUM 0xda94ee37
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] AUTHPROTO CHAP MSOFTv2
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] MP MRRU 2048
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] MP SHORTSEQ
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] ENDPOINTDISC [802.1] 0c c4 7a ac
51 1e
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: rec'd Configure Request #0 (R
eq-Sent)
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] MRU 1400
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] MAGICNUM 0x1c7839d2
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] PROTOCOMP
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] ACFCOMP
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] CALLBACK 6
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: SendConfigRej #0
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] CALLBACK 6
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: rec'd Configure Request #1 (R
eq-Sent)
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] MRU 1400
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] MAGICNUM 0x1c7839d2
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] PROTOCOMP
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] ACFCOMP
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: SendConfigAck #1
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] MRU 1400
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] MAGICNUM 0x1c7839d2
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] PROTOCOMP
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] ACFCOMP
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: state change Req-Sent --> Ack-Sent
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] LCP: SendConfigReq #2
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] ACFCOMP
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] PROTOCOMP
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MRU 1500
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MAGICNUM 0xda94ee37
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] AUTHPROTO CHAP MSOFTv2
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MP MRRU 2048
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MP SHORTSEQ
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] ENDPOINTDISC [802.1] 0c c4 7a ac 51 1e
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] LCP: rec'd Configure Reject #2 (Ack-Sent)
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MP MRRU 2048
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MP SHORTSEQ
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] ENDPOINTDISC [802.1] 0c c4 7a ac 51 1e
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] LCP: SendConfigReq #3
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] ACFCOMP
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] PROTOCOMP
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MRU 1500
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MAGICNUM 0xda94ee37
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] AUTHPROTO CHAP MSOFTv2
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] LCP: rec'd Configure Ack #3 (Ack-Sent)
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] ACFCOMP
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] PROTOCOMP
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MRU 1500
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MAGICNUM 0xda94ee37
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] AUTHPROTO CHAP MSOFTv2
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] LCP: state change Ack-Sent --> Opened
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] LCP: auth: peer wants nothing, I want CHAP
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] CHAP: sending CHALLENGE #1 len: 21
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] LCP: LayerUp
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] LCP: rec'd Ident #2 (Opened)
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MESG: MSRASV5.20
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] LCP: rec'd Ident #3 (Opened)
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MESG: MSRAS-0-DESKTOP-NLNAQH7
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] LCP: rec'd Ident #4 (Opened)
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MESG: Â$EÇ3¬1A½M-^A«M-^BwM-^EäØ
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] CHAP: rec'd RESPONSE #1 len: 58
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] Name: "aboo"
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] AUTH: Trying RADIUS
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] RADIUS: Authenticating user 'aboo'
Jun 20 12:21:39 doctor mpd[19241]: [L_pptp-2] CHAP: rec'd RESPONSE #1 len: 58
Jun 20 12:21:39 doctor mpd[19241]: [L_pptp-2] Name: "aboo"
Jun 20 12:21:39 doctor mpd[19241]: [L_pptp-2] CHAP: Auth return status: busy
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] RADIUS: rad_send_request for user 'aboo' failed: No valid RADIUS responses received
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] AUTH: RADIUS returned error
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] AUTH: ran out of backends
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] CHAP: Auth return status: failed
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] CHAP: Reply message: E=691 R=0 M=Login incorrect
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] CHAP: sending FAILURE #1 len: 31
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: authorization failed
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: parameter negotiation failed
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: state change Opened --> Stopping
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: SendTerminateReq #4
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: LayerDown
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: rec'd Terminate Ack #4 (Stopping)
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: state change Stopping --> Stopped
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: LayerFinish
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] PPTP call terminated
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] Link: DOWN event
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: Close event
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: state change Stopped --> Closed
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: Down event
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: state change Closed --> Initial
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] Link: SHUTDOWN event
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] Link: Shutdown
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] Accepting PPTP connection
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] Link: OPEN event
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] LCP: Open event
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] LCP: state change Initial --> Starting
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] LCP: LayerStart
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] PPTP: attaching to peer's outgoing call
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] Link: UP event
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] LCP: Up event
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] LCP: state change Starting --> Req-Sent
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] LCP: SendConfigReq #1
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] ACFCOMP
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] PROTOCOMP
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] MRU 1500
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] MAGICNUM 0x8b2f2071
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] AUTHPROTO CHAP MSOFTv2
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] MP MRRU 2048
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] MP SHORTSEQ
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] ENDPOINTDISC [802.1] 0c c4 7a ac 51 1e
Jun 20 12:24:58 doctor mpd[19241]: [L_pptp-2] LCP: SendConfigReq #2
Jun 20 12:24:58 doctor mpd[19241]: [L_pptp-2] ACFCOMP
Jun 20 12:24:58 doctor mpd[19241]: [L_pptp-2] PROTOCOMP
Jun 20 12:24:58 doctor mpd[19241]: [L_pptp-2] MRU 1500
Jun 20 12:24:58 doctor mpd[19241]: [L_pptp-2] MAGICNUM 0x8b2f2071
Jun 20 12:24:58 doctor mpd[19241]: [L_pptp-2] AUTHPROTO CHAP MSOFTv2
Jun 20 12:24:58 doctor mpd[19241]: [L_pptp-2] MP MRRU 2048
Jun 20 12:24:58 doctor mpd[19241]: [L_pptp-2] MP SHORTSEQ
Jun 20 12:24:58 doctor mpd[19241]: [L_pptp-2] ENDPOINTDISC [802.1] 0c c4 7a ac 51 1e
Jun 20 12:24:59 doctor mpd[19241]: [L_pptp-2] PPTP call terminated
Jun 20 12:24:59 doctor mpd[19241]: [L_pptp-2] Link: DOWN event
Jun 20 12:24:59 doctor mpd[19241]: [L_pptp-2] LCP: Close event
Jun 20 12:24:59 doctor mpd[19241]: [L_pptp-2] LCP: state change Req-Sent --> Closing
Jun 20 12:24:59 doctor mpd[19241]: [L_pptp-2] LCP: SendTerminateReq #3
Jun 20 12:24:59 doctor mpd[19241]: [L_pptp-2] LCP: Down event
Jun 20 12:24:59 doctor mpd[19241]: [L_pptp-2] LCP: LayerFinish
Jun 20 12:24:59 doctor mpd[19241]: [L_pptp-2] LCP: state change Closing --> Initial
Jun 20 12:24:59 doctor mpd[19241]: [L_pptp-2] Link: SHUTDOWN event
Jun 20 12:24:59 doctor mpd[19241]: [L_pptp-2] Link: Shutdown
(END)
just noting
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] CHAP: rec'd RESPONSE #1 len: 58
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] Name: "aboo"
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] AUTH: Trying RADIUS
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] RADIUS: Authenticating user 'aboo'
Jun 20 12:21:39 doctor mpd[19241]: [L_pptp-2] CHAP: rec'd RESPONSE #1 len: 58
Jun 20 12:21:39 doctor mpd[19241]: [L_pptp-2] Name: "aboo"
Jun 20 12:21:39 doctor mpd[19241]: [L_pptp-2] CHAP: Auth return status: busy
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] RADIUS: rad_send_request for user
'aboo' failed: No valid RADIUS responses received
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] AUTH: RADIUS returned error
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] AUTH: ran out of backends
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] CHAP: Auth return status: failed
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] CHAP: Reply message: E=691 R=0 M=L
ogin incorrect
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] CHAP: sending FAILURE #1 len: 31
I wonder the default is if you are using GNU radius against the passwd file?
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
RADIUS server is completely distinct software, you need to debug it separately. Look at its logs etc. Also check your firewall so it allows UDP traffic for RADIUS ports.
Also, you did not follow my suggestion to make logs of mpd5 more detailed with "log ..." command containing +radius2 option that logs attributes sent to RADIUS server.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I just added the log line to startup and here is what I got from radius:
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] LCP: state change Ack-Sent --> Ope
ned
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] LCP: phase shift ESTABLISH --> AUT
HENTICATE
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] LCP: auth: peer wants nothing, I w
ant CHAP
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] CHAP: sending CHALLENGE #1 len: 21
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] LCP: LayerUp
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] LCP: rec'd Ident #2 (Opened)
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] MESG: MSRASV5.20
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] LCP: rec'd Ident #3 (Opened)
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] MESG: MSRAS-0-DESKTOP-NLNAQH7
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] LCP: rec'd Ident #4 (Opened)
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] MESG: <d8><eb>M-^UM- i<af> O<b8>
p<a6>g<a3><ff>M-^^9
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] CHAP: rec'd RESPONSE #1 len: 58
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] Name: "aboo"
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] AUTH: Trying RADIUS
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Authenticating user 'aboo'
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Adding server 204.209.81.1
1645
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_NAS_IDENTIFIER: do
ctor.nl2k.ab.ca
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_NAS_IP_ADDRESS: 20
4.209.81.1
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put Message Authenticator
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_ACCT_SESSION_ID: 2
680265-L_pptp-2
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_NAS_PORT: 2
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_NAS_PORT_TYPE: 5
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_SERVICE_TYPE: RAD_
FRAMED
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_FRAMED_PROTOCOL: R
AD_PPP
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_CALLING_STATION_ID
:
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_CALLED_STATION_ID:</ff></a3></a6></b8></af></eb></d8>
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_MPD_LINK: L_pptp-2
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_MPD_PEER_IDENT: MSRASV5.20 MSRAS-0-DESKTOP-NLNAQH7 <d8><eb>M-^UM- i<af> O<b8>p<a6>g<a3><ff>M-^^9
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_TUNNEL_TYPE: 1
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_TUNNEL_MEDIUM_TYPE: 1
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_TUNNEL_SERVER_ENDPOINT: 204.209.81.1
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_TUNNEL_CLIENT_ENDPOINT: 75.156.190.254
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_TUNNEL_SERVER_AUTH_ID: doctor.nl2k.ab.ca
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_USER_NAME: aboo
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_MICROSOFT_MS_CHAP_CHALLENGE
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_MICROSOFT_MS_CHAP2_RESPONSE
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Send request for user 'aboo'
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Sending request for user 'aboo'
Jun 20 13:11:05 doctor syslogd: last message repeated 1 times
Jun 20 13:11:07 doctor mpd[76976]: [L_pptp-2] CHAP: rec'd RESPONSE #1 len: 58
Jun 20 13:11:07 doctor mpd[76976]: [L_pptp-2] Name: "aboo"
Jun 20 13:11:07 doctor mpd[76976]: [L_pptp-2] CHAP: Auth return status: busy
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] RADIUS: Sending request for user 'aboo'
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] RADIUS: rad_send_request for user 'aboo' failed: No valid RADIUS responses received
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] AUTH: RADIUS returned error
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] AUTH: ran out of backends
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] CHAP: Auth return status: failed
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] CHAP: Reply message: E=691 R=0 M=Login incorrect
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] CHAP: sending FAILURE #1 len: 31
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] LCP: authorization failed
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] LCP: parameter negotiation failed
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] LCP: state change Opened --> Stopping
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] LCP: phase shift AUTHENTICATE --> TERMINATE
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] LCP: SendTerminateReq #4
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] LCP: LayerDown
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] LCP: rec'd Terminate Ack #4 (Stopping)
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] LCP: state change Stopping --> Stopped
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] LCP: phase shift TERMINATE --> ESTABLISH
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] LCP: LayerFinish
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] device: CLOSE event
Jun 20 13:11:08 doctor mpd[76976]: pptp0-0: clearing call
Jun 20 13:11:08 doctor mpd[76976]: pptp0-0: killing channel</ff></a3></a6></b8></af></eb></d8>
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_USER_NAME: aboo
mpd5 always sends unmodified login name to RADIUS server, and you can see that in quoted line of its log. You should refer to your RADIUS configuration to debug that.
Last edit: Eugene Grosbein 2020-06-20
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Also, double check if responses of RADIUS server allowed to reach mpd5 by your packet filters. If not, mpd5 won't get "accept" packets from the RADIUS.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
mpd5 will just work if you setup any RADIUS server correctly. That is, your RADIUS server should correctly respond with AccessAccept/AccessReject messages of RADIUS protocol to mpd5's requests.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
No. Unlike PAP CHAP protects communication oover the wire, but it require plain-text passwords on RADIUS server side. PAP on the other side is plain-text over the wire, but because if that it can be used with hashed passwords file.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Here is my config:
default:
#load radius
load l2tp_server
load pptp_server
Define dynamic IP address pool.
Create clonable bundle template named B
Specify IP address pool for dynamic assigment.
The five lines below enable Microsoft Point-to-Point encryption
(MPPE) using the ng_mppc(8) netgraph node type.
Create clonable link template named L
Set bundle template to use
Multilink adds some overhead, but gives full 1500 MTU.
We can use use RADIUS authentication/accounting by including
another config section with label 'radius'.
Enable utmp/wtmp logging
We reducing link mtu to avoid GRE packet fragmentation.
Configure PPTP
Allow to accept calls
l2tp_server:
Define dynamic IP address pool.
Create clonable bundle template named B
Specify IP address pool for dynamic assigment.
Create clonable link template named L
We can use use RADIUS authentication/accounting by including
another config section with label 'radius'.
Enable utmp/wtmp logging
Configure L2TP
Allow to accept calls
You can use radius.conf(5), its useful, because you can share the
same config with userland-ppp and other apps.
or specify the server directly here
send the given IP in the RAD_NAS_IP_ADDRESS attribute to the server.
send accounting updates every 5 minutes
enable RADIUS, and fallback to mpd.secret, if RADIUS auth failed
enable RADIUS accounting
protect our requests with the message-authenticator
Aim is set up a 'dial in pool' for PPTP L2TP using radius authenication by system password file .
What is not configured correctly?
Why are you asking, doesn't it work? Testing should show if it is right configuration for you.
Looking at the configuration, I suggest you do not skip "startup:" section (look at example in distribution sample config file). It's handy to configure console for run-time daemon control. And you may find useful put "set global l2tptimeout" command there.
Also, I recommend to enable more detailed logging for initial testing period:
log +echo +iface +iface2 +link +auth +bund +lcp +lcp2 +phys +phys2 +radius +radius2
Setup your /etc/syslog.conf to write mpd logs to a file:
Read the log after mpd5 is (re-)started because it describes obvious configuration errors there, if any.
Also you may like setting interface descriptions:
set iface description "%t: %U %A %o %O"
You set extra "set link keep-alive 0 0" parameters overriden with later command. And no need to specify "set pptp self 0.0.0.0", that's default. Same for l2tp.
You really need to use "set pptp disable windowing", otherwise PPtP will get you troubles.
Also, you may share single IP pool for PPtP and L2TP, if you wish. The pool created once may be referenced multiple times.
Last edit: Eugene Grosbein 2020-06-19
Sorry about the deay. never got a notice about your replay.
From the Log:
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] Accepting PPTP connection
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] Link: OPEN event
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: Open event
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: state change Initial --> Starting
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: LayerStart
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] PPTP: attaching to peer's outgoing call
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] Link: UP event
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: Up event
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: state change Starting --> Req-Sent
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: SendConfigReq #1
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] ACFCOMP
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] PROTOCOMP
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] MRU 1500
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] MAGICNUM 0xb3caa23b
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] AUTHPROTO CHAP MSOFTv2
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] MP MRRU 2048
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] MP SHORTSEQ
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] ENDPOINTDISC [802.1] 0c c4 7a ac 51 1e
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: rec'd Configure Request #0 (Req-Sent)
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] MRU 1400
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] MAGICNUM 0x515275bc
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] PROTOCOMP
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] ACFCOMP
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] CALLBACK 6
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: SendConfigRej #0
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] CALLBACK 6
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: rec'd Configure Request #1 (Req-Sent)
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] MRU 1400
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] MAGICNUM 0x515275bc
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] PROTOCOMP
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] ACFCOMP
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: SendConfigAck #1
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] MRU 1400
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] MAGICNUM 0x515275bc
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] PROTOCOMP
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] ACFCOMP
Jun 20 09:45:17 doctor mpd[44831]: [L_pptp-2] LCP: state change Req-Sent --> Ack-Sent
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] LCP: SendConfigReq #2
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] ACFCOMP
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] PROTOCOMP
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MRU 1500
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MAGICNUM 0xb3caa23b
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] AUTHPROTO CHAP MSOFTv2
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MP MRRU 2048
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MP SHORTSEQ
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] ENDPOINTDISC [802.1] 0c c4 7a ac 51 1e
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] LCP: rec'd Configure Reject #2 (Ack-Sent)
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MP MRRU 2048
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MP SHORTSEQ
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] ENDPOINTDISC [802.1] 0c c4 7a ac 51 1e
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] LCP: SendConfigReq #3
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] ACFCOMP
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] PROTOCOMP
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MRU 1500
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MAGICNUM 0xb3caa23b
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] AUTHPROTO CHAP MSOFTv2
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] LCP: rec'd Configure Ack #3 (Ack-Sent)
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] ACFCOMP
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] PROTOCOMP
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MRU 1500
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MAGICNUM 0xb3caa23b
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] AUTHPROTO CHAP MSOFTv2
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] LCP: state change Ack-Sent --> Opened
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] LCP: auth: peer wants nothing, I want CHAP
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] CHAP: sending CHALLENGE #1 len: 21
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] LCP: LayerUp
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] LCP: rec'd Ident #2 (Opened)
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MESG: MSRASV5.20
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] LCP: rec'd Ident #3 (Opened)
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MESG: MSRAS-0-DESKTOP-NLNAQH7
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] LCP: rec'd Ident #4 (Opened)
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] MESG: <fb>a`<e4>kM-^\JD<af>Oby
<a0><ef>1M-^R
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] CHAP: rec'd RESPONSE #1 len: 58
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] Name: "aboo"
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] AUTH: Trying RADIUS
Jun 20 09:45:19 doctor mpd[44831]: [L_pptp-2] RADIUS: Authenticating user 'aboo'
Jun 20 09:45:21 doctor mpd[44831]: [L_pptp-2] CHAP: rec'd RESPONSE #1 len: 58
Jun 20 09:45:21 doctor mpd[44831]: [L_pptp-2] Name: "aboo"
Jun 20 09:45:21 doctor mpd[44831]: [L_pptp-2] CHAP: Auth return status: busy
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] RADIUS: rad_send_request for user 'aboo' failed: No valid RADIUS responses received
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] AUTH: RADIUS returned error
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] AUTH: Trying INTERNAL
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] AUTH: User "aboo" not found in secret file
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] AUTH: INTERNAL returned: failed
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] AUTH: ran out of backends
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] CHAP: Auth return status: failed
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] CHAP: Reply message: E=691 R=0 M=Login incorrect
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] CHAP: sending FAILURE #1 len: 31
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: authorization failed
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: parameter negotiation failed
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: state change Opened --> Stopping
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: SendTerminateReq #4
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: LayerDown
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: rec'd Terminate Ack #4 (Stopping)
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: state change Stopping --> Stopped
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: LayerFinish
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] PPTP call terminated
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] Link: DOWN event
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: Close event
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: state change Stopped --> Closed
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: Down event
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] LCP: state change Closed --> Initial
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] Link: SHUTDOWN event
Jun 20 09:45:22 doctor mpd[44831]: [L_pptp-2] Link: Shutdown</ef></a0></af></e4></fb>
Please try reading the log. It clearly states that your RADIUS server does not respond and user not found in the mpd.secret, so authorization failes. Fix it and you will be OK.
Just getting rid of Internal, I got i.e. set auth disable interal ,
I got
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] Accepting PPTP connection
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] Link: OPEN event
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: Open event
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: state change Initial --> Star
ting
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: LayerStart
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] PPTP: attaching to peer's outgoing
call
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] Link: UP event
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: Up event
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: state change Starting --> Req
-Sent
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: SendConfigReq #1
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] ACFCOMP
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] PROTOCOMP
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] MRU 1500
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] MAGICNUM 0xda94ee37
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] AUTHPROTO CHAP MSOFTv2
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] MP MRRU 2048
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] MP SHORTSEQ
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] ENDPOINTDISC [802.1] 0c c4 7a ac
51 1e
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: rec'd Configure Request #0 (R
eq-Sent)
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] MRU 1400
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] MAGICNUM 0x1c7839d2
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] PROTOCOMP
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] ACFCOMP
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] CALLBACK 6
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: SendConfigRej #0
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] CALLBACK 6
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: rec'd Configure Request #1 (R
eq-Sent)
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] MRU 1400
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] MAGICNUM 0x1c7839d2
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] PROTOCOMP
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] ACFCOMP
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: SendConfigAck #1
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] MRU 1400
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] MAGICNUM 0x1c7839d2
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] PROTOCOMP
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] ACFCOMP
Jun 20 12:21:35 doctor mpd[19241]: [L_pptp-2] LCP: state change Req-Sent --> Ack-Sent
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] LCP: SendConfigReq #2
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] ACFCOMP
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] PROTOCOMP
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MRU 1500
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MAGICNUM 0xda94ee37
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] AUTHPROTO CHAP MSOFTv2
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MP MRRU 2048
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MP SHORTSEQ
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] ENDPOINTDISC [802.1] 0c c4 7a ac 51 1e
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] LCP: rec'd Configure Reject #2 (Ack-Sent)
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MP MRRU 2048
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MP SHORTSEQ
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] ENDPOINTDISC [802.1] 0c c4 7a ac 51 1e
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] LCP: SendConfigReq #3
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] ACFCOMP
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] PROTOCOMP
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MRU 1500
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MAGICNUM 0xda94ee37
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] AUTHPROTO CHAP MSOFTv2
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] LCP: rec'd Configure Ack #3 (Ack-Sent)
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] ACFCOMP
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] PROTOCOMP
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MRU 1500
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MAGICNUM 0xda94ee37
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] AUTHPROTO CHAP MSOFTv2
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] LCP: state change Ack-Sent --> Opened
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] LCP: auth: peer wants nothing, I want CHAP
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] CHAP: sending CHALLENGE #1 len: 21
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] LCP: LayerUp
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] LCP: rec'd Ident #2 (Opened)
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MESG: MSRASV5.20
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] LCP: rec'd Ident #3 (Opened)
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MESG: MSRAS-0-DESKTOP-NLNAQH7
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] LCP: rec'd Ident #4 (Opened)
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] MESG: Â$EÇ3¬1A½M-^A«M-^BwM-^EäØ
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] CHAP: rec'd RESPONSE #1 len: 58
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] Name: "aboo"
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] AUTH: Trying RADIUS
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] RADIUS: Authenticating user 'aboo'
Jun 20 12:21:39 doctor mpd[19241]: [L_pptp-2] CHAP: rec'd RESPONSE #1 len: 58
Jun 20 12:21:39 doctor mpd[19241]: [L_pptp-2] Name: "aboo"
Jun 20 12:21:39 doctor mpd[19241]: [L_pptp-2] CHAP: Auth return status: busy
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] RADIUS: rad_send_request for user 'aboo' failed: No valid RADIUS responses received
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] AUTH: RADIUS returned error
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] AUTH: ran out of backends
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] CHAP: Auth return status: failed
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] CHAP: Reply message: E=691 R=0 M=Login incorrect
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] CHAP: sending FAILURE #1 len: 31
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: authorization failed
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: parameter negotiation failed
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: state change Opened --> Stopping
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: SendTerminateReq #4
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: LayerDown
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: rec'd Terminate Ack #4 (Stopping)
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: state change Stopping --> Stopped
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: LayerFinish
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] PPTP call terminated
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] Link: DOWN event
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: Close event
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: state change Stopped --> Closed
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: Down event
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] LCP: state change Closed --> Initial
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] Link: SHUTDOWN event
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] Link: Shutdown
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] Accepting PPTP connection
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] Link: OPEN event
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] LCP: Open event
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] LCP: state change Initial --> Starting
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] LCP: LayerStart
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] PPTP: attaching to peer's outgoing call
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] Link: UP event
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] LCP: Up event
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] LCP: state change Starting --> Req-Sent
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] LCP: SendConfigReq #1
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] ACFCOMP
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] PROTOCOMP
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] MRU 1500
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] MAGICNUM 0x8b2f2071
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] AUTHPROTO CHAP MSOFTv2
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] MP MRRU 2048
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] MP SHORTSEQ
Jun 20 12:24:56 doctor mpd[19241]: [L_pptp-2] ENDPOINTDISC [802.1] 0c c4 7a ac 51 1e
Jun 20 12:24:58 doctor mpd[19241]: [L_pptp-2] LCP: SendConfigReq #2
Jun 20 12:24:58 doctor mpd[19241]: [L_pptp-2] ACFCOMP
Jun 20 12:24:58 doctor mpd[19241]: [L_pptp-2] PROTOCOMP
Jun 20 12:24:58 doctor mpd[19241]: [L_pptp-2] MRU 1500
Jun 20 12:24:58 doctor mpd[19241]: [L_pptp-2] MAGICNUM 0x8b2f2071
Jun 20 12:24:58 doctor mpd[19241]: [L_pptp-2] AUTHPROTO CHAP MSOFTv2
Jun 20 12:24:58 doctor mpd[19241]: [L_pptp-2] MP MRRU 2048
Jun 20 12:24:58 doctor mpd[19241]: [L_pptp-2] MP SHORTSEQ
Jun 20 12:24:58 doctor mpd[19241]: [L_pptp-2] ENDPOINTDISC [802.1] 0c c4 7a ac 51 1e
Jun 20 12:24:59 doctor mpd[19241]: [L_pptp-2] PPTP call terminated
Jun 20 12:24:59 doctor mpd[19241]: [L_pptp-2] Link: DOWN event
Jun 20 12:24:59 doctor mpd[19241]: [L_pptp-2] LCP: Close event
Jun 20 12:24:59 doctor mpd[19241]: [L_pptp-2] LCP: state change Req-Sent --> Closing
Jun 20 12:24:59 doctor mpd[19241]: [L_pptp-2] LCP: SendTerminateReq #3
Jun 20 12:24:59 doctor mpd[19241]: [L_pptp-2] LCP: Down event
Jun 20 12:24:59 doctor mpd[19241]: [L_pptp-2] LCP: LayerFinish
Jun 20 12:24:59 doctor mpd[19241]: [L_pptp-2] LCP: state change Closing --> Initial
Jun 20 12:24:59 doctor mpd[19241]: [L_pptp-2] Link: SHUTDOWN event
Jun 20 12:24:59 doctor mpd[19241]: [L_pptp-2] Link: Shutdown
(END)
just noting
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] CHAP: rec'd RESPONSE #1 len: 58
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] Name: "aboo"
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] AUTH: Trying RADIUS
Jun 20 12:21:37 doctor mpd[19241]: [L_pptp-2] RADIUS: Authenticating user 'aboo'
Jun 20 12:21:39 doctor mpd[19241]: [L_pptp-2] CHAP: rec'd RESPONSE #1 len: 58
Jun 20 12:21:39 doctor mpd[19241]: [L_pptp-2] Name: "aboo"
Jun 20 12:21:39 doctor mpd[19241]: [L_pptp-2] CHAP: Auth return status: busy
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] RADIUS: rad_send_request for user
'aboo' failed: No valid RADIUS responses received
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] AUTH: RADIUS returned error
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] AUTH: ran out of backends
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] CHAP: Auth return status: failed
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] CHAP: Reply message: E=691 R=0 M=L
ogin incorrect
Jun 20 12:21:40 doctor mpd[19241]: [L_pptp-2] CHAP: sending FAILURE #1 len: 31
I wonder the default is if you are using GNU radius against the passwd file?
RADIUS server is completely distinct software, you need to debug it separately. Look at its logs etc. Also check your firewall so it allows UDP traffic for RADIUS ports.
Also, you did not follow my suggestion to make logs of mpd5 more detailed with "log ..." command containing +radius2 option that logs attributes sent to RADIUS server.
Just need to know where to add the log line
I just added the log line to startup and here is what I got from radius:
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] LCP: state change Ack-Sent --> Ope
ned
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] LCP: phase shift ESTABLISH --> AUT
HENTICATE
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] LCP: auth: peer wants nothing, I w
ant CHAP
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] CHAP: sending CHALLENGE #1 len: 21
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] LCP: LayerUp
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] LCP: rec'd Ident #2 (Opened)
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] MESG: MSRASV5.20
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] LCP: rec'd Ident #3 (Opened)
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] MESG: MSRAS-0-DESKTOP-NLNAQH7
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] LCP: rec'd Ident #4 (Opened)
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] MESG: <d8><eb>M-^UM- i<af> O<b8>
p<a6>g<a3><ff>M-^^9
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] CHAP: rec'd RESPONSE #1 len: 58
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] Name: "aboo"
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] AUTH: Trying RADIUS
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Authenticating user 'aboo'
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Adding server 204.209.81.1
1645
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_NAS_IDENTIFIER: do
ctor.nl2k.ab.ca
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_NAS_IP_ADDRESS: 20
4.209.81.1
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put Message Authenticator
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_ACCT_SESSION_ID: 2
680265-L_pptp-2
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_NAS_PORT: 2
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_NAS_PORT_TYPE: 5
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_SERVICE_TYPE: RAD_
FRAMED
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_FRAMED_PROTOCOL: R
AD_PPP
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_CALLING_STATION_ID
:
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_CALLED_STATION_ID:</ff></a3></a6></b8></af></eb></d8>
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_MPD_LINK: L_pptp-2
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_MPD_PEER_IDENT: MSRASV5.20 MSRAS-0-DESKTOP-NLNAQH7 <d8><eb>M-^UM- i<af> O<b8>p<a6>g<a3><ff>M-^^9
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_TUNNEL_TYPE: 1
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_TUNNEL_MEDIUM_TYPE: 1
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_TUNNEL_SERVER_ENDPOINT: 204.209.81.1
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_TUNNEL_CLIENT_ENDPOINT: 75.156.190.254
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_TUNNEL_SERVER_AUTH_ID: doctor.nl2k.ab.ca
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_USER_NAME: aboo
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_MICROSOFT_MS_CHAP_CHALLENGE
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Put RAD_MICROSOFT_MS_CHAP2_RESPONSE
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Send request for user 'aboo'
Jun 20 13:11:05 doctor mpd[76976]: [L_pptp-2] RADIUS: Sending request for user 'aboo'
Jun 20 13:11:05 doctor syslogd: last message repeated 1 times
Jun 20 13:11:07 doctor mpd[76976]: [L_pptp-2] CHAP: rec'd RESPONSE #1 len: 58
Jun 20 13:11:07 doctor mpd[76976]: [L_pptp-2] Name: "aboo"
Jun 20 13:11:07 doctor mpd[76976]: [L_pptp-2] CHAP: Auth return status: busy
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] RADIUS: Sending request for user 'aboo'
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] RADIUS: rad_send_request for user 'aboo' failed: No valid RADIUS responses received
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] AUTH: RADIUS returned error
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] AUTH: ran out of backends
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] CHAP: Auth return status: failed
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] CHAP: Reply message: E=691 R=0 M=Login incorrect
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] CHAP: sending FAILURE #1 len: 31
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] LCP: authorization failed
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] LCP: parameter negotiation failed
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] LCP: state change Opened --> Stopping
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] LCP: phase shift AUTHENTICATE --> TERMINATE
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] LCP: SendTerminateReq #4
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] LCP: LayerDown
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] LCP: rec'd Terminate Ack #4 (Stopping)
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] LCP: state change Stopping --> Stopped
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] LCP: phase shift TERMINATE --> ESTABLISH
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] LCP: LayerFinish
Jun 20 13:11:08 doctor mpd[76976]: [L_pptp-2] device: CLOSE event
Jun 20 13:11:08 doctor mpd[76976]: pptp0-0: clearing call
Jun 20 13:11:08 doctor mpd[76976]: pptp0-0: killing channel</ff></a3></a6></b8></af></eb></d8>
And I found this in the radius.log for gnu radius
Jun 20 13:11:05 Auth.notice: (Access-Request 204.209.81.1 169 "aboo" CLID= CSID=
): Login incorrect [aboo/]
Jun 20 13:11:05 Auth.notice: (Access-Request 204.209.81.1 169 "aboo" CLID= CSID=
): Retransmitting AUTH reply
Jun 20 13:11:05 Auth.notice: (Access-Request 204.209.81.1 169 "aboo" CLID= CSID=
): Dropping packet: duplicate request
Why is a / being added at the end?
mpd5 always sends unmodified login name to RADIUS server, and you can see that in quoted line of its log. You should refer to your RADIUS configuration to debug that.
Last edit: Eugene Grosbein 2020-06-20
Also, double check if responses of RADIUS server allowed to reach mpd5 by your packet filters. If not, mpd5 won't get "accept" packets from the RADIUS.
I do have the correct ports open for radius old and new. Also where is this CLID and CSID coming from?
You'll see all RADIUS attributes sent by mpd5 in its log. Any other entity is not from mpd5.
I am also getting in touch with gnu-radius. I found a detail-auth which is sending junk, I.E.
Sat Jun 20 13:28:58 2020
NAS-Identifier = doctor.nl2k.ab.ca
NAS-IP-Address = 204.209.81.1
Message-Authenticator =
+\003^9L_V\212\161\036\302\103\155\166\225\324\303
Acct-Session-Id = 2681338-L_pptp-2
NAS-Port-Id = 2
NAS-Port-Type = 5
Service-Type = Framed-User
Framed-Protocol = PPP
Calling-Station-Id =
Called-Station-Id =
Tunnel-Type = PPTP
Tunnel-Medium-Type = IP
Tunnel-Server-Endpoint = 204.209.81.1
Acct-Tunnel-Client-Endpoint = 75.156.190.254
Tunnel-Server-Auth-Id = doctor.nl2k.ab.ca
User-Name = legituser
Vendor-Specific =
+V311\013\022\273\036\150\003\025\157\255\036\165\026\164\331\304\001\264\243
Vendor-Specific =
+V311\031\064\001\000\167\036\027\135\360\072\053\143\306\366\315\041\102\374\31
+2\140\000\000\000\000\000\000\000\000\366\203\345\045\015\123\133\274\063\234\0
+57\302\124\017\033\026\053\167\016\206\244\367\0023
Timestamp = 1592681338
Request-Authenticator = None
back at it. I converted to freeradius. What next?
mpd5 will just work if you setup any RADIUS server correctly. That is, your RADIUS server should correctly respond with AccessAccept/AccessReject messages of RADIUS protocol to mpd5's requests.
I just have to work on that. At least with Freeradius someone is answering the phone.
odd! I just a a tcpdump on port 1645. Radius from computone no
problem; mpd5 to radius does not show up.
Last edit: Dave Yadallee 2020-06-24
all right what about pap?
mpd5 supports PAP but it's less secure. PAP sends cleartext password over PPP. You better use CHAP that is compatible with RADIUS, too.
Well here are the results:
Wed Jun 24 00:51:03 2020
Packet-Type = Access-Request
NAS-Identifier = "doctor.nl2k.ab.ca"
NAS-IP-Address = 204.209.81.1
Message-Authenticator = 0xb8e285095cd002fc8b09a0de52a003fe
Acct-Session-Id = "2981463-L_pptp-2"
NAS-Port = 2
NAS-Port-Type = Virtual
Service-Type = Framed-User
Framed-Protocol = PPP
Attr-26.12341.12 = 0x4c5f707074702d32
Attr-26.12341.19 = 0x4d5352415356352e3230204d535241532d302d4445534b544f502d4e4c4e4151483720bc8b7ae61465d8429d104db8604819ff
Tunnel-Type:0 = PPTP
Tunnel-Medium-Type:0 = IPv4
Tunnel-Server-Endpoint:0 = "204.209.81.1"
Tunnel-Client-Endpoint:0 = "75.156.190.254"
Tunnel-Server-Auth-Id:0 = "doctor.nl2k.ab.ca"
User-Name = "aboo"
MS-CHAP-Challenge = 0xbb1e68763c2a7a421bdfb865f10fe18f
MS-CHAP2-Response = 0x01000d5262d4fce3d68368aa254bd63f8a050000000000000000ca14180259e5e660d07e2ed4cb83c4f0b9d1f8dd85159d9b
Event-Timestamp = "Jun 24 2020 00:51:03 MDT"
Timestamp = 1592981463
I am now using freeradius. Can CHAP read an /etc/passwd file?
Well here are the results:
Wed Jun 24 00:51:03 2020
Packet-Type = Access-Request
NAS-Identifier = "doctor.nl2k.ab.ca"
NAS-IP-Address = 204.209.81.1
Message-Authenticator = 0xb8e285095cd002fc8b09a0de52a003fe
Acct-Session-Id = "2981463-L_pptp-2"
NAS-Port = 2
NAS-Port-Type = Virtual
Service-Type = Framed-User
Framed-Protocol = PPP
Attr-26.12341.12 = 0x4c5f707074702d32
Attr-26.12341.19 = 0x4d5352415356352e3230204d535241532d302d4445534b544f502d4e4c4e4151483720bc8b7ae61465d8429d104db8604819ff
Tunnel-Type:0 = PPTP
Tunnel-Medium-Type:0 = IPv4
Tunnel-Server-Endpoint:0 = "204.209.81.1"
Tunnel-Client-Endpoint:0 = "75.156.190.254"
Tunnel-Server-Auth-Id:0 = "doctor.nl2k.ab.ca"
User-Name = "aboo"
MS-CHAP-Challenge = 0xbb1e68763c2a7a421bdfb865f10fe18f
MS-CHAP2-Response = 0x01000d5262d4fce3d68368aa254bd63f8a050000000000000000ca14180259e5e660d07e2ed4cb83c4f0b9d1f8dd85159d9b
Event-Timestamp = "Jun 24 2020 00:51:03 MDT"
Timestamp = 1592981463
I am now using freeradius. Can CHAP read an /etc/passwd file?
No. Unlike PAP CHAP protects communication oover the wire, but it require plain-text passwords on RADIUS server side. PAP on the other side is plain-text over the wire, but because if that it can be used with hashed passwords file.
know of a way of running CHAP parallel to /etc/passwd ?