Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
HOWTO pptpclient with MS vpn server
View unanswered posts
View posts from last 24 hours

Goto page Previous  1, 2, 3, 4, 5  Next  
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
Ph0eniX
Guru
Guru


Joined: 24 Sep 2004
Posts: 502
Location: New York, U.S.

PostPosted: Wed Aug 31, 2005 7:31 pm    Post subject: Reply with quote

Nevermind. I took the "require-mppe-128" line out of the peer file and it's working now. For some reason the option worked with the old version of pppd.
Back to top
View user's profile Send private message
Havin_it
Veteran
Veteran


Joined: 17 Jul 2005
Posts: 1247
Location: Edinburgh, UK

PostPosted: Thu Sep 01, 2005 6:12 pm    Post subject: Reply with quote

Ai-ai-ai! kernel-2.6.13 is out there... what chance of a patch for mppe-mppc now that polbox appears to be deceased?
Back to top
View user's profile Send private message
Ph0eniX
Guru
Guru


Joined: 24 Sep 2004
Posts: 502
Location: New York, U.S.

PostPosted: Thu Sep 01, 2005 6:23 pm    Post subject: Reply with quote

I think it may be a matter of simply changing all the references to 2.6.12 in linux-2.6.12-mppe-mppc-1.3.patch to say 2.6.13. Has anyone tested this yet?
Back to top
View user's profile Send private message
Havin_it
Veteran
Veteran


Joined: 17 Jul 2005
Posts: 1247
Location: Edinburgh, UK

PostPosted: Fri Sep 02, 2005 3:43 pm    Post subject: Reply with quote

Might just risk it if there's no other option. Will report back when I get time...
Back to top
View user's profile Send private message
Ph0eniX
Guru
Guru


Joined: 24 Sep 2004
Posts: 502
Location: New York, U.S.

PostPosted: Sat Sep 03, 2005 2:29 pm    Post subject: Reply with quote

Havin_it wrote:
Might just risk it if there's no other option. Will report back when I get time...


Actually, the patch for 2.6.12 works [without modifications] with 2.6.13. I just tested it.
Back to top
View user's profile Send private message
Havin_it
Veteran
Veteran


Joined: 17 Jul 2005
Posts: 1247
Location: Edinburgh, UK

PostPosted: Sat Sep 03, 2005 3:08 pm    Post subject: Reply with quote

Cool, thanks for the confirmation. Couldn't see any refs to 2.6.12 apart from the header comments, so figured it'd be safe. Nice to know for sure though :D
Back to top
View user's profile Send private message
Section_8
l33t
l33t


Joined: 22 May 2004
Posts: 627

PostPosted: Mon Sep 19, 2005 8:14 pm    Post subject: Reply with quote

It looks like the mppc/mppe patch is available here now:
http://mppe-mppc.alphacron.de/

There is a patch there for 2.6.13
Back to top
View user's profile Send private message
michavk
n00b
n00b


Joined: 19 Sep 2005
Posts: 1

PostPosted: Mon Sep 19, 2005 8:38 pm    Post subject: howto configure net.ppp0 Reply with quote

I've configured my ppp-stuff correctly: using 'pon <PEERNAME>' and a route add command (added in ip-up.local) connects me to the VPN server.
However, when I use '/etc/init.d/net.ppp0 start' doesn't launch my VPN connection..

my net.ppp0 config file:
Code:
lunar7 ~ # cat /etc/conf.d/net.ppp0
# /etc/conf.d/net.ppp0:
# $Header: /var/cvsroot/gentoo-x86/net-dialup/ppp/files/confd.ppp0,v 1.3 2005/02/06 09:22:13 mrness Exp $

# Config file for /etc/init.d/net.ppp0

PEER="WNBVPN"                   # Define peer (aka ISP)
DEBUG="no"                      # Turn on debugging
PERSIST="yes"                    # Redial after being dropped
ONDEMAND="no"                   # Only bring the interface up on demand?
#MODEMPORT="/dev/ttyS1"          # TTY device modem is connected to
#LINESPEED="115200"              # Speed pppd should try to connect at
#INITSTRING=""                   # Extra init string for the modem
DEFROUTE="no"                  # Must pppd set the default route?
#HARDFLOWCTL="yes"               # Use hardware flow control?
#ESCAPECHARS="yes"               # Use escape caracters ?
#PPPOPTIONS=""                   # Extra options for pppd
USERNAME="//masked username//"  # The PAP/CHAP username
PASSWORD="//masked password//"  # Your password/secret.  Ugly I know, but i
                                # will work on something more secure later
                                # on.  700 permission on /etc/init.d/net.ppp0
                                # should be enouth for now.
#NUMBER="9180000"                # The telephone number of your ISP
                                # leave blank for leased-line operation.
#REMIP=""                        # The ip of the remote box if it should be set
#NETMASK=""                      # Netmask
#IPADDR=""                       # Our IP if we have a static one
MRU="1400"                       # Sets the MRU
MTU="1400"                       # Sets the MTU
RETRYTIMEOUT="60"               # Retry timeout for when ONDEMAND="yes" or
                                # PERSIST="yes"
IDLETIMEOUT="600"               # Idle timeout for when ONDEMAND="yes"
PEERDNS="no"                    # Should pppd set the peer dns?

AUTOCFGFILES="yes"              # By default this scripts will generate
                                # /etc/ppp/chat-isp, /etc/ppp/chap-secrets,
                                # /etc/ppp/pap-secrets and /etc/ppp/peers/isp
                                # automatically.  Set to "no" if you experience
                                # problems, or need specialized scripts.  You
                                # will have to create these files by hand then.

AUTOCHATSCRIPT="yes"            # By default this script iwll generate
                                # /etc/ppp/chat-${PEER} automatically. Set to "no"
                                # if you experience problems, or need specialized
                                # scripts. You will have to create these files by
                                # hand then.


# Directory where the templates is stored
TEMPLATEDIR=/etc/ppp


Could anyone tell me what I'm doing wrong?
(I know, I could fix this using an ordinary bash-script using pon. But i like to keep things gentooish..)
Back to top
View user's profile Send private message
MeatPie
Tux's lil' helper
Tux's lil' helper


Joined: 24 Jan 2005
Posts: 112

PostPosted: Fri Oct 07, 2005 1:34 pm    Post subject: Reply with quote

I am stuck behind a proxy and firewall of our uni. We connect through a VPN but as my machine is already here I CAN NOT use portage to emerge pptpclient and its dependencies. So if anyone could give me a rundown on how I can go about installing it without using portage i'd appreciate it.
Back to top
View user's profile Send private message
nichocouk
Guru
Guru


Joined: 10 Mar 2005
Posts: 585
Location: Glasgow

PostPosted: Fri Oct 07, 2005 1:41 pm    Post subject: Reply with quote

What about if you set
Code:
export http_proxy="YOUR.PROXY:PORT"

in /etc/profile, and then source this file?
_________________
nichocouk

L'Etat, c'est moi.
Back to top
View user's profile Send private message
MeatPie
Tux's lil' helper
Tux's lil' helper


Joined: 24 Jan 2005
Posts: 112

PostPosted: Sat Oct 08, 2005 12:01 pm    Post subject: Reply with quote

Problem with that is I'll still won't be able to connect as we dial in to a VPN to get online. Also, our proxy is configured by a script which I have checked and there are 3 different ones that handle my connection at any time.
Back to top
View user's profile Send private message
ajaygautam
Apprentice
Apprentice


Joined: 23 Jan 2003
Posts: 205
Location: London Below

PostPosted: Thu Oct 20, 2005 4:31 am    Post subject: My success story Reply with quote

Here is how I did it.
Code:
echo 'net-dialup/ppp mppe-mppc' >> /etc/portage/package.use
echo 'net-dialup/ppp ~x86' >> /etc/portage/package.keywords
echo 'net-dialup/pptpclient ~x86' >> /etc/portage/package.keywords
vi /etc/make.conf
   --- add to USE: dba gd

ACCEPT_KEYWORDS="~x86" emerge pptpconfig -a

Patch kernel
Code:
cd /usr/src
mkdir patches
cd patches/
wget http://mppe-mppc.alphacron.de/linux-2.6.13-mppe-mppc-1.3.patch.gz
gunzip linux-2.6.13-mppe-mppc-1.3.patch.gz
cd ../linux
patch -p1 < ../patches/linux-2.6.13-mppe-mppc-1.3.patch

Build kernel
Code:
make menuconfig
genkernel --save-config --kernel-config=/usr/src/linux/config-current --gensplash=emergence --bootloader=grub all

Reboot: Make sure grub.conf points to proper kernels, reboot into new kernel.

php_gtk.so not found! After reboot, upon launching pptpconfig, I got an error
Code:
# pptpconfig

Warning: dl(): Unable to load dynamic library '/usr/lib/php/extensions/no-debug-non-zts-20020429/php_gtk.so' - /usr/lib/php/extensions/no-debug-non-zts-20020429/php_gtk.so: cannot open shared object file: No such file or directory in /usr/bin/pptpconfig.php on line 31

Fatal error: Cannot instantiate non-existent class:  gdkcolor in /usr/bin/pptpconfig.php on line 96

Found that package dev-php4/php-gtk is installed, and provides the missing file, but at a different location. So symlinked it.
Code:
less /var/db/pkg/dev-php4/php-gtk-1.0.2/CONTENTS
ll /usr/lib/php4/lib/php/extensions/no-debug-non-zts-20020429/php_gtk.so
cd /usr/lib/php/extensions/no-debug-non-zts-20020429
ln -s /usr/lib/php4/lib/php/extensions/no-debug-non-zts-20020429/php_gtk.so php_gtk.so


Save your /etc/resolv.conf somewhere. Thank me later :)
Configure pptp: Launch pptpconfig (as root). Fill up config info
Quote:
* Server
** Name: MyCompany
** Server: vpn.mycompany.com
** Domain: MYCOMPANYDOMAIN
** Username: agautam
* Routing
** All through tunnel
* DNS
** Uncheck auto
** Servers: 10.1.2.200 10.1.2.204 192.168.1.1
** Options: domain mycompany.com


Added my local DNS server (192.168.1.1) to the end of the DNS server list. The pptpconfig would occasionally clobber my /etc/resolv.conf file if I didn't do this.

MPPE workaround: pptpconfig failed to recognize mppe options in config files. Uncommenting them worked just fine. You would need to do this everytime you modify the configuration.
Code:
vi /etc/ppp/peers/MyCompany
   --- comment out require-mppe
vi /etc/ppp/options.pptp
   --- comment out require-mppe


Start PPTP connection: I compiled kernel stuff as modules. So you MAY need to load the modules before connecting. The following will load all dependencies too. First try wothout the modprobe command. pptpconfig should autoload these modules.
Code:
modprobe ppp_mppe_mppc
pptpconfig
   --- double click on MyCompany entry ---


Hope this helps someone.

Ajay
Back to top
View user's profile Send private message
jwiles
n00b
n00b


Joined: 10 Nov 2004
Posts: 11
Location: Austin, TX

PostPosted: Sat Nov 12, 2005 6:52 pm    Post subject: Reply with quote

Hello,

I am having a problem doing anything useful in the remote network. In particular, I can ping IP addresses in the remote network, but I cannot SSH, connect the IMAP server, etc. Any suggestions?

UPDATE: Nevermind. Have to add a route for every host I need to access, I guess.
Back to top
View user's profile Send private message
guyr
Apprentice
Apprentice


Joined: 17 Aug 2004
Posts: 237

PostPosted: Tue Nov 15, 2005 7:02 am    Post subject: Reply with quote

FYI, I installed kernel 2.6.14-r2, and the 2.6.13 patch works fine with it.
_________________
Guy Rouillier
Back to top
View user's profile Send private message
babaloo
n00b
n00b


Joined: 09 Nov 2005
Posts: 4

PostPosted: Tue Nov 15, 2005 9:06 am    Post subject: Reply with quote

guyr wrote:
FYI, I installed kernel 2.6.14-r2, and the 2.6.13 patch works fine with it.


Do you tried 2.6.14 final? It does not work for me.
Back to top
View user's profile Send private message
guyr
Apprentice
Apprentice


Joined: 17 Aug 2004
Posts: 237

PostPosted: Thu Nov 17, 2005 4:08 am    Post subject: Reply with quote

babaloo wrote:
guyr wrote:
FYI, I installed kernel 2.6.14-r2, and the 2.6.13 patch works fine with it.


Do you tried 2.6.14 final? It does not work for me.


Sorry, I do not understand. I applied the patch to x86 sources. Since it is -r2, it is definitely final. It's the second release of final, right?
_________________
Guy Rouillier
Back to top
View user's profile Send private message
babaloo
n00b
n00b


Joined: 09 Nov 2005
Posts: 4

PostPosted: Thu Nov 17, 2005 3:18 pm    Post subject: Reply with quote

Quote:
Sorry, I do not understand. I applied the patch to x86 sources. Since it is -r2, it is definitely final. It's the second release of final, right?


I have applied 2.6.13 patch to final 2.6.14 kernel and it doesn't work. (Many hunks)
Back to top
View user's profile Send private message
guyr
Apprentice
Apprentice


Joined: 17 Aug 2004
Posts: 237

PostPosted: Sat Nov 19, 2005 5:35 am    Post subject: Reply with quote

babaloo wrote:
I have applied 2.6.13 patch to final 2.6.14 kernel and it doesn't work. (Many hunks)


Sorry, I don't know what else to say. I applied linux-2.6.13-mppe-mppc-1.3.patch (gunzipped it first) to linux-2.6.14-gentoo-r2 and it applied without complaint. I've successfully VPN'd into work after building this kernel:

/usr/src>uname -a
Linux pvr 2.6.14-gentoo-r2 #1 SMP PREEMPT Tue Nov 15 00:12:26 EST 2005 i686 Intel(R) Pentium(R) 4 CPU 3.00GHz GenuineIntel GNU/Linux
_________________
Guy Rouillier
Back to top
View user's profile Send private message
dgaffuri
Advocate
Advocate


Joined: 05 Jun 2005
Posts: 2078
Location: Italy

PostPosted: Sun Nov 20, 2005 5:17 pm    Post subject: Reply with quote

I've tried my VPN using the MPPE support built into 2.6.15-rc2 kernel and it works. :D

The symbol is located here
Code:
  │ Symbol: PPP_MPPE [=m]                                                   │
  │ Prompt: PPP MPPE compression (encryption) (EXPERIMENTAL)                │
  │   Defined at drivers/net/Kconfig:2526                                   │
  │   Depends on: NETDEVICES && PPP && EXPERIMENTAL                         │
  │   Location:                                                             │
  │     -> Device Drivers                                                   │
  │       -> Network device support                                         │
  │         -> Network device support (NETDEVICES [=y])                     │
  │           -> PPP (point-to-point protocol) support (PPP [=m])           │
  │   Selects: CRYPTO && CRYPTO_SHA1 && CRYPTO_ARC4                         │


I had to modprobe the ppp_mppe manually (module name has changed).

I initially had a problem when trying to ping the other side.
Code:
rcvd [proto=0xd] e0 d5 18 51 c0 c5 04 57 03 c2 32 14 0e 12 2d fe 6f e8 32 c8 9b 04 63 be 86 9d fb e5 7a ff be 76 ...
Unsupported protocol 0xd received
sent [LCP ProtRej id=0x4 00 0d e0 d5 18 51 c0 c5 04 57 03 c2 32 14 0e 12 2d fe 6f e8 32 c8 9b 04 63 be 86 9d fb e5 7a ff ...]
rcvd [proto=0x47] 27 c5 7d d1 71 ae 46 4d 4b 6b 3d 4e 52 97 65 d6 6d 74 af d3 44 43 e0 62 b6 e9 c1 0b 02 0f 52 a7 ...
Unsupported protocol 'DCA Remote Lan' (0x47) received
sent [LCP ProtRej id=0x5 00 47 27 c5 7d d1 71 ae 46 4d 4b 6b 3d 4e 52 97 65 d6 6d 74 af d3 44 43 e0 62 b6 e9 c1 0b 02 0f ...]
rcvd [proto=0x18b2] b4 08 74 ce e7 d4 3b 39 3a 79 98 e0 c1 fe eb c3 d3 92 f5 da 64 87 89 7b bf bc 64 e0 a3 d7 6d fb ...
Unsupported protocol 0x18b2 received
sent [LCP ProtRej id=0x6 18 b2 b4 08 74 ce e7 d4 3b 39 3a 79 98 e0 c1 fe eb c3 d3 92 f5 da 64 87 89 7b bf bc 64 e0 a3 d7 ...]
.....

As suggested here I tried to add the
Code:
mppe no128

option to the /etc/ppp/options.pptp called by my peer profile, but this didn't solved (even with no128,no56). Adding
Code:
mppe stateless

made the trick instead.

Hope this may be useful to someone else.
_________________
Adopt an unanswered post
If you feel that your problem has been solved please edit the top post and add [solved] to the subject
Back to top
View user's profile Send private message
nichocouk
Guru
Guru


Joined: 10 Mar 2005
Posts: 585
Location: Glasgow

PostPosted: Sun Nov 20, 2005 5:25 pm    Post subject: Reply with quote

Souds good! :)

How do you connect to your VPN then? What program do you use?
_________________
nichocouk

L'Etat, c'est moi.
Back to top
View user's profile Send private message
dgaffuri
Advocate
Advocate


Joined: 05 Jun 2005
Posts: 2078
Location: Italy

PostPosted: Sun Nov 20, 2005 5:36 pm    Post subject: Reply with quote

nichocouk wrote:
Souds good! :)

How do you connect to your VPN then? What program do you use?

If you're asking to me (I'm not sure), using PPTP Client, as described in the first post on this topic, except that starting from 2.6.15-rc1 you don't need to patch the kernel no more, because MPPE support is included. You may find more info on this here.
_________________
Adopt an unanswered post
If you feel that your problem has been solved please edit the top post and add [solved] to the subject
Back to top
View user's profile Send private message
nichocouk
Guru
Guru


Joined: 10 Mar 2005
Posts: 585
Location: Glasgow

PostPosted: Sun Nov 20, 2005 7:29 pm    Post subject: Reply with quote

Thanks dgaffuri, I was indeed asking you. I just wanted to know if you were using pptpclient or an init script like /etc/init.d/net.ppp0
cheers,
_________________
nichocouk

L'Etat, c'est moi.
Back to top
View user's profile Send private message
babaloo
n00b
n00b


Joined: 09 Nov 2005
Posts: 4

PostPosted: Wed Nov 30, 2005 12:55 pm    Post subject: Reply with quote

I have some problems with 2.6.14 kernel (downloaded from kernel.org):

california linux-2.6.14 # patch -p1 < linux-2.6.13-mppe-mppc-1.3.patch
patching file drivers/net/Kconfig
Hunk #1 succeeded at 2474 (offset 57 lines).
patching file drivers/net/Makefile
Hunk #1 succeeded at 111 (offset 6 lines).
patching file drivers/net/ppp_generic.c
Hunk #6 succeeded at 1719 (offset -2 lines).
Hunk #7 succeeded at 1753 (offset -2 lines).
Hunk #8 succeeded at 2433 (offset -5 lines).
patching file drivers/net/ppp_mppe_mppc.c
patching file include/linux/ppp-comp.h
california linux-2.6.14 #

Can anybody help with this?
Back to top
View user's profile Send private message
dgaffuri
Advocate
Advocate


Joined: 05 Jun 2005
Posts: 2078
Location: Italy

PostPosted: Wed Nov 30, 2005 2:01 pm    Post subject: Reply with quote

And where is the problem? Tha patch succeded. Do you have compilation errors?
_________________
Adopt an unanswered post
If you feel that your problem has been solved please edit the top post and add [solved] to the subject
Back to top
View user's profile Send private message
babaloo
n00b
n00b


Joined: 09 Nov 2005
Posts: 4

PostPosted: Fri Dec 02, 2005 2:05 pm    Post subject: Reply with quote

dgaffuri wrote:
And where is the problem? Tha patch succeded. Do you have compilation errors?


Ahaha! Right! Sorry for stupidly :wink:
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Goto page Previous  1, 2, 3, 4, 5  Next
Page 4 of 5

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum