On Friday 18 July 2003 03:18 pm, Thomas Krennwallner wrote:
> Hi!
>
> On Fri Jul 18, 2003 at 02:28:50PM -0700, Ian Eure wrote:
> [...]
>
> > Jul 18 13:51:33 axinite pppd[12370]: rcvd [PAP AuthReq id=0x1
> > user="ieure" password=<hidden>]
> > Jul 18 13:51:33 axinite pppd[12370]: no PAP secret found for ieure
> > Jul 18 13:51:33 axinite pppd[12370]: sent [PAP AuthNak id=0x1 "Login
> > incorrect"]
> > Jul 18 13:51:33 axinite pppd[12370]: sent [LCP TermReq id=0x2
> > "Authentication failed"]
> >
> > pap-secrets has:
> > # Every regular user can use PPP and has to use passwords from
> > /etc/passwd * axinite "" *
> >
> > And I even added an entry for myself, to no avail:
> > ieure axinite "" *
> >
> > Does anyone know what's wrong here?
>
> I think you should apply the noauth option to the pppd on the client
> side. The clients pppd requests the mgetty ppp server to authenticate
> itself on the client:
>
> auth Require the peer to authenticate itself before allowing network
> packets to be sent or received. This option is the default if
> the system has a default route. If neither this option nor the
> noauth option is specified, pppd will only allow the peer to use
> IP addresses to which the system does not already have a route.
>
I just tried this, but it does not appear to be the source of the problem.
axinite is the system I'm dialing in to, and the logs show that it's recieves
the AuthReq from the client ('hadron'), and sends back an AuthNak and failure
message. The logs on the client support this:
Jul 19 15:18:19 hadron pppd[1785]: rcvd [PAP AuthNak id=0x1 "Authentication
failure"]
Jul 19 15:18:19 hadron pppd[1785]: Remote message: Authentication failure
Jul 19 15:18:19 hadron pppd[1785]: PAP authentication failed
Jul 19 15:18:19 hadron pppd[1785]: sent [LCP TermReq id=0x2 "Failed to
authenticate ourselves to peer"]
Jul 19 15:18:19 hadron pppd[1785]: rcvd [LCP TermReq id=0x2 "Authentication
failed"]
I straced the pppd process on axinite, and it does a lookup on
/etc/ppp/pap-secrets just before failing. It never tries to open /etc/passwd
or /etc/shadow as pppd(8) and /etc/ppp/pap-secrets claims it should.
Any other ideas?
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
