Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 2678 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Problem with Radius and L2tp/PPtp

Godsbrother
Hi,

I am trying to get Winxp clients to be able to vpn in via the ASG320 but I can't seem to get radius auth working.

The connection goes ok up until the username/password section then fails saying incorrect password however the logs on the radius server say access has been granted for said user. Below is a the pptp log.

2006:06:21-16:44:55 (none) pptpd[21587]: CTRL: Client 86.133.80.71 control connection started
2006:06:21-16:44:55 (none) pptpd[21587]: CTRL: Starting call (launching pppd, opening GRE)
2006:06:21-16:44:55 (none) pppd-pptp[21589]: Plugin /usr/sbin/radius.so loaded.
2006:06:21-16:44:55 (none) pptpd[21587]: GRE: Bad checksum from pppd.
2006:06:21-16:44:55 (none) pppd-pptp[21589]: RADIUS plugin initialized.
2006:06:21-16:44:55 (none) pppd-pptp[21589]: Plugin /usr/sbin/radattr.so loaded.
2006:06:21-16:44:55 (none) pppd-pptp[21589]: RADATTR plugin initialized.
2006:06:21-16:44:55 (none) pppd-pptp[21589]: Plugin /usr/sbin/dhcpc.so loaded.
2006:06:21-16:44:55 (none) pppd-pptp[21589]: DHCPC: plugin initialized
2006:06:21-16:44:55 (none) pppd-pptp[21589]: Plugin /usr/sbin/radius.so loaded.
2006:06:21-16:44:55 (none) pppd-pptp[21589]: RADIUS plugin initialized.
2006:06:21-16:44:55 (none) pppd-pptp[21589]: Plugin /usr/sbin/radattr.so loaded.
2006:06:21-16:44:55 (none) pppd-pptp[21589]: RADATTR plugin initialized.
2006:06:21-16:44:55 (none) pppd-pptp[21589]: Plugin /usr/sbin/dhcpc.so loaded.
2006:06:21-16:44:55 (none) pppd-pptp[21589]: DHCPC: plugin initialized
2006:06:21-16:44:55 (none) pppd-pptp[21589]: pppd 2.4.3 started by (unknown), uid 0
2006:06:21-16:44:55 (none) pppd-pptp[21589]: Starting negotiation on /dev/ttyp0
2006:06:21-16:44:55 (none) pptpd[21587]: GRE: Bad checksum from pppd.
2006:06:21-16:44:57 (none) pptpd[21587]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
2006:06:21-16:44:58 (none) pppd-pptp[21589]: rc_map2id: can't find tty /dev/ in map database
2006:06:21-16:44:58 (none) pppd-pptp[21589]: rc_get_ipaddr: couldn't resolve hostname: astaro.isd-nr.idealshoppingdirect.co.uk.isd-nr.idealshoppingdirect.co.uk
2006:06:21-16:44:58 (none) pppd-pptp[21589]: rc_own_ipaddress: couldn't get own IP address
2006:06:21-16:44:58 (none) pppd-pptp[21589]: rc_check_reply: received invalid reply digest from RADIUS server
2006:06:21-16:44:58 (none) pppd-pptp[21589]: Peer harvey.dowler failed CHAP authentication
2006:06:21-16:44:58 (none) pppd-pptp[21589]: Connection terminated.
2006:06:21-16:44:58 (none) pppd-pptp[21589]: Exit.
2006:06:21-16:44:58 (none) pptpd[21587]: GRE: read(fd=4,buffer=8055d00,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
2006:06:21-16:44:58 (none) pptpd[21587]: CTRL: PTY read or GRE write failed (pty,gre)=(4,5)
2006:06:21-16:44:58 (none) pptpd[21587]: CTRL: Reaping child PPP[21589]
2006:06:21-16:44:58 (none) pptpd[21587]: CTRL: Client 86.133.80.71 control connection finished



any thoughts?


This thread was automatically locked due to age.
Parents
  • 0

    2006:06:21-16:44:58 (none) pppd-pptp[21589]: rc_get_ipaddr: couldn't resolve hostname: astaro.isd-nr.idealshoppingdirect.co.uk.isd-nr.idealshoppingdirect.co.uk
    2006:06:21-16:44:58 (none) pppd-pptp[21589]: rc_own_ipaddress: couldn't get own IP address
    2006:06:21-16:44:58 (none) pppd-pptp[21589]: rc_check_reply: received invalid reply digest from RADIUS server


    Could this be the problem?
  • 0 in reply to NimmdirKeks
    Well I looked at that and thougth so as well but everything else is fine so I dont understand why it says it cant resolve the name also the name isnt astaro.isd-nr.idealshoppingdirect.co.uk.isd-nr.idealshoppingdirect.co.uk
    its astaro.isd-nr.idealshoppingdirect.co.uk seems to of added extra on ???

    as for the invalid reply digest well I have no clue...
  • 0 in reply to Godsbrother
    Possible because the names don't mach, so the digest is rejected. Seems like you put somewhere the whole dns string, instead of just the device name.
Reply Children
Cookie Information Banner