Re: [pptp-devel] pptp [CCP ConfRej id=0x0 <mppe +H -M +S +L -D -C>]

[Manuel C. <ll...@er...>]

Kacper Wysocki wrote:
> ---- options.pptp
> lock
> noauth
> nobsdcomp
> nodeflate
> receive-all
> require-mppe-128
> require-mppe-40

Note that you are requiring both 128 and 40 mppe. I don't know if this 
is a valid configuration, since this is not _support_ mppe but _require_

> novj
> #mppe-stateless
> 
> --- my tunnel file
> pty "pptp HOST --nolaunchpppd"
> name DOMAIN\\USERNAME
> remotename PPTP
> require-mschap-v2
> file /etc/ppp/options.pptp
> ipparam tunnel
> 
> --- This is the current log file
> Connect: ppp0 <--> /dev/pts/1
> sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xdeea6659> <pcomp> 
> <accomp>]
> sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xdeea6659> <pcomp> 
> <accomp>]
> rcvd [LCP ConfReq id=0x0 <auth chap MS>]
> sent [LCP ConfAck id=0x0 <auth chap MS>]
> rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0xdeea6659> <pcomp> 
> <accomp>]
> sent [LCP EchoReq id=0x0 magic=0xdeea6659]
> rcvd [CHAP Challenge id=0x1 <030573c8f8e075e0>, name = ""]
> sent [CHAP Response id=0x1 
> <00000000000000000000000000000000000000000000000032bc                                                                                                           
> c29a041ea7723e07028692dac21f07ab8dec3274376901>, name = "DOMAIN\\USER"]
> rcvd [LCP EchoRep id=0x0 magic=0x0]
> rcvd [CHAP Challenge id=0x2 <be2c54a53f817ae0>, name = ""]
> sent [CHAP Response id=0x2 
> <000000000000000000000000000000000000000000000000c514                                                                                                           
> 16119d24ef74dacb84f8d9c460e47f4d450274e48ae901>, name = "DOMAIN\\USER"]
> rcvd [CHAP Success id=0x2 ""]
> CHAP authentication succeeded
> Disabling 40-bit MPPE; MS-CHAP LM not supported
> MPPE required, but kernel has no support.

40-bit mppe is disabled, so it can't negotiate mppe. I think this is 
because the order they are listed in the option.pptp file. If the option 
is mandatory, then it only takes the last one.

Try reversing the order, or just leaving the require-mppe-128 option alone.

> sent [LCP TermReq id=0x2 "MPPE required but not available"]
> rcvd [IPCP ConfReq id=0x0 <addr 132.216.1.82>]
> Discarded non-LCP packet when LCP not open
> rcvd [CCP ConfReq id=0x0 <mppe +H -M +S +L -D -C>]
> Discarded non-LCP packet when LCP not open
> rcvd [LCP TermAck id=0x2 05 02 00 23 4d 50 50 45 20 72 65 71 75 69 72 65 
> 64 20 6 2 75 74 20 6e 6f 74 20 61 76 61 69 6c 61 ...]
> Connection terminated.    


-- 
Manuel Clos
ll...@er...

TCPA y Palladium: http://bulmalug.net/body.phtml?nIdNoticia=1398
TCPA and Palladium: http://www.cl.cam.ac.uk/~rja14/tcpa-faq.html