radius/pppd problems

From: Nathan Kroll (krolln_at_gmail.com)
Date: 11/20/04

  • Next message: Steven Yap: "Re: Is life with 'udev' good?" 
    Date: Fri, 19 Nov 2004 23:25:20 -0600
To: debian-user@lists.debian.org

    I am setting up a PPTP VPN that authenticates users against a radius
    server. I compiled pppd with radius support and made the changes to
    the pptpd and pppd configurations that I found online (they are
    below). The FreeRADIUS server is set up to authenticate via LDAP.
    When I tested the VPN as a user in ldap, the radius server decline the
    authorization due to no password being passed. If I add a user to the
    radius users file and authenticate as that user, everything is ok.

    So I think the problem is between the pppd auth configs and what
    radius expects for authentication. I'm just not sure what to try from
    this point.

    /etc/ppp/pptpd-options:
    name pptpd
    refuse-pap
    refuse-chap
    refuse-mschap
    require-mschap-v2
    require-mppe-128
    ms-dns <our DNS server>
    ms-wins <our WINS server>
    proxyarp
    nodefaultroute
    debug
    lock
    plugin radius.so

    /etc/pptpd.conf:
    option /etc/ppp/pptpd-options
    debug
    bcrelay eth0
    localip xxx.xxx.xxx.xxx
    remoteip xxx.xxx.xxx.xxx-xxx

    All auth attempts were done with a windows client with the default settings.

    I'd appreciate any help. Thanks. 

    -- 
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
  • Next message: Steven Yap: "Re: Is life with 'udev' good?"

    Relevant Pages

    • Re: 802.1x authentication for wireless issues w/ ISA 2004
      ... The do support WPA-EAP and the radius ... authenticate the computer and this is trying to authenticate the user and not ... If you can post perhaps 10 lines from the IAS log, ... represent my IAS server or the client laptops. ...
      (microsoft.public.windows.server.sbs)
    • Re: Radius question
      ... Note the following general exception to Windows CAL requirements: ... CALs are not required when access to the server software is unauthenticated ... who all can be RADIUS clients to Microsoft RADIUS Server? ... > authenticate against Active Directory if your remote access devices are not ...
      (microsoft.public.windows.server.networking)
    • IIS/ASP authentication with RADIUS
      ... Does anyone know if there is a way to let IIS users ... RADIUS is running on one of the Novell servers one of my ... server to authenticate against this client's ...
      (microsoft.public.inetserver.iis.security)
    • Re: IAS/RADIUS question - solved (almost)
      ... pair of 2-way external trusts on each domain. ... RADIUS server on domain TWO. ... When a user of one.foo.com attempts to authenticate ...
      (microsoft.public.internet.radius)
    • Re: radius/pppd problems
      ... I compiled pppd with radius support and made the changes to ... The FreeRADIUS server is set up to authenticate via LDAP. ...
      (Debian-User)