MS-CHAP?

Jan Kasprzak kas na informatics.muni.cz
Úterý Únor 17 15:01:07 CET 1998


	Dobre odpoledne,

	prisel za mnou kolega s problemem: jsou pripojeni na ISP, jehoz
dial-upove linky obsluhuje nejaky NT server, ktery vyzaduje autentikaci
pres MS-CHAP (ano, moje prvni rada byla pripojit se na rozumneho ISP).
Stahl jsem si ppp-2.3.3-2.src.rpm a rekompiloval s -DMSCHAP=1
a -DUSE_CRYPT=1. Tim jsem dosahl toho, ze pppd neodmitne autentikaci
<auth chap 80>, ale porad to jeste nefunguje. Vypis z messages
vypada priblizne takto:

Feb 11 22:29:07 hostname pppd[755]: Connect: ppp0 <--> /dev/modem
Feb 11 22:29:07 hostname pppd[755]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magi
c 0xffff4a37> <pcomp> <accomp>]
Feb 11 22:29:07 hostname pppd[755]: rcvd [LCP ConfReq id=0x0 <asyncmap 0x0> <auth
 chap 80> <magic 0x3d7a> <pcomp> <accomp>]
Feb 11 22:29:07 hostname pppd[755]: sent [LCP ConfAck id=0x0 <asyncmap 0x0> <auth
 chap 80> <magic 0x3d7a> <pcomp> <accomp>]
Feb 11 22:29:07 hostname pppd[755]: rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magi
c 0xffff4a37> <pcomp> <accomp>]
Feb 11 22:29:07 hostname pppd[755]: rcvd [CHAP Challenge id=0xf <577fae8a1af53ec8
>, name = ""]
Feb 11 22:29:08 hostname pppd[755]: sent [CHAP Response id=0xf <00000000000000000
00000000000000000000000000000005be77308214361ff532e2c05aeba303331c3d8c07427a5e00
1>, name = "logname"]
Feb 11 22:29:11 hostname pppd[755]: sent [CHAP Response id=0xf <00000000000000000
00000000000000000000000000000005be77308214361ff532e2c05aeba303331c3d8c07427a5e00
1>, name = "logname"]
Feb 11 22:29:11 hostname pppd[755]: rcvd [CHAP Failure id=0xf "E=691 R=1"]
Feb 11 22:29:11 hostname pppd[755]: Remote message: E=691 R=1
Feb 11 22:29:11 hostname pppd[755]: CHAP authentication failed

	Myslim si, ze logname, secret i remote name mam dobre.
Dokonce jsem zkousel zkompilovat testovaci program z README.MSCHAP80,
a daval spravne vysledky. Takze generovani response by snad melo byt OK.

	V cem muze byt problem? Chodi nekomu MS-CHAP na Linuxovem PPP?

-Yenya

--
\ Jan "Yenya" Kasprzak <kas at fi.muni.cz>       http://www.fi.muni.cz/~kas/
\\ PGP: finger kas at aisa.fi.muni.cz   0D99A7FB206605D7 8B35FCDE05B18A5E //
\\\             Czech Linux Homepage:  http://www.linux.cz/              ///
/// The people who deserve to be flamed are digital who on the altavista \\\
//news page claim the entire project ran on 200 Alphas running NT, welcome\\
/ to the world of lies, half truths and microsoft.              --Alan Cox \



Další informace o konferenci Linux