| View previous topic :: View next topic |
| Author |
Message |
infodragon
n00b
Joined: 06 Jul 2004
Posts: 1
|
 Posted: Tue Jul 06, 2004 9:34 pm Post subject: pptpd+pppd+MPPE+amd64 = Signal 11 |
 |
|
I am currently using a pptpd vpn service for my remote windows clients to connect to my amd64 samba server. Everything seems to be working except mppe. If I enable mppe for pptp, pppd crashes on connection.
I know the mppe/mppc kernel module is loading properly and working because mppc works just fine. PPTPD runs rock solid and I have no other problems.
Below is a snipit of the logs. Any suggestions/fixes/ideas would be great!
Jul 6 20:49:39 [pptpd] CTRL: Client 192.168.0.138 control connection started
Jul 6 20:49:39 [pptpd] CTRL: Starting call (launching pppd, opening GRE)
Jul 6 20:49:39 [pppd] pppd 2.4.2 started by root, uid 0
Jul 6 20:49:39 [pppd] Using interface ppp0
Jul 6 20:49:39 [pppd] Connect: ppp0 <--> /dev/pts/13
Jul 6 20:49:39 [pptpd] GRE: Discarding duplicate packet
Jul 6 20:49:42 [pptpd] CTRL: Ignored a SET LINK INFO packet with real ACCMs!
Jul 6 20:49:42 [pppd] Fatal signal 11
Jul 6 20:49:42 [pppd] Exit.
Jul 6 20:49:42 [pptpd] GRE: read(fd=5,buffer=5056c0,len=8196) from PTY failed: status = -1 error = Input/output error
Jul 6 20:49:42 [pptpd] CTRL: PTY read or GRE write failed (pty,gre)=(5,6)
Jul 6 20:49:42 [pptpd] CTRL: Client 192.168.0.138 control connection finished |
|
| Back to top |
|
 |
db9052
n00b
Joined: 11 Jun 2004
Posts: 5
|
| Posted: Thu Jul 08, 2004 12:46 pm Post subject: |
|
|
Which kernel modules are you using? The error you are getting looks like the one I was getting when I upgraded from ppp-2.4.1 to ppp-2.4.2 (which has just recently been marked stable). There are two different kernel modules available depending on the version of ppp you are using.
See http://pptpclient.sourceforge.net/howto-diagnosis.phtml#pppd_options for more details. |
|
| Back to top |
|
|
VinzC
Watchman
Joined: 17 Apr 2004
Posts: 5098
Location: Dark side of the mood
|
| Posted: Wed Feb 15, 2006 8:24 pm Post subject: |
|
|
I too have the same problem on my AMD64 machine. I have Gentoo Sources 2.6.15-r3, net-dialup/pptpclient-1.7.0 and net-dialup/ppp-2.4.2-r15. I have exactly the same packages on my x86 laptop with exactly the same config files and it works there.
Here's the log output:
| Code: | # pon MYPEER debug dump logfd 2 nodetach
pppd options in effect:
debug # (from command line)
nodetach # (from command line)
logfd 2 # (from command line)
dump # (from command line)
noauth # (from /etc/ppp/options.pptp)
name pit # (from /etc/ppp/peers/MYPEER)
remotename raspptp # (from /etc/ppp/peers/MYPEER)
# (from /etc/ppp/options.pptp)
pty pptp myvpnhost.domain.com --nolaunchpppd # (from /etc/ppp/peers/MYPEER)
mru 1000 # (from /etc/ppp/options.pptp)
mtu 1000 # (from /etc/ppp/options.pptp)
lcp-echo-failure 10 # (from /etc/ppp/options.pptp)
lcp-echo-interval 10 # (from /etc/ppp/options.pptp)
ipparam MYPEER # (from /etc/ppp/peers/MYPEER)
usepeerdns # (from /etc/ppp/options.pptp)
nobsdcomp # (from /etc/ppp/options.pptp)
nodeflate # (from /etc/ppp/options.pptp)
require-mppe # (from /etc/ppp/options.pptp)
using channel 5
Using interface ppp0
Connect: ppp0 <--> /dev/pts/2
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x934735a6> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x4d3abb96> <pcomp> <accomp>]
sent [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x4d3abb96> <pcomp> <accomp>]
rcvd [LCP ConfAck id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x934735a6> <pcomp> <accomp>]
sent [LCP EchoReq id=0x0 magic=0x934735a6]
rcvd [CHAP Challenge id=0x1 <83dcd6c4ab9bb3a1794393b4e5275b4c>, name = "raspptp"]
Fatal signal 11 |
I've followed the howto at http://pptpclient.sourceforge.net/howto-gentoo.phtml and tried almost anything I could. I'm going mad on this. Can anybody help?
_________________
Gentoo addict: tomorrow I quit, I promise!... Just one more emerge...
1739! |
|
| Back to top |
|
|
VinzC
Watchman
Joined: 17 Apr 2004
Posts: 5098
Location: Dark side of the mood
|
| Posted: Wed Feb 15, 2006 9:48 pm Post subject: |
|
|
Ok, I've found my mistake: I had forgotten USE flags dhcp and mppe-mppc  . Problem solved, now it works.
_________________
Gentoo addict: tomorrow I quit, I promise!... Just one more emerge...
1739! |
|
| Back to top |
|
|
wlchase
Tux's lil' helper
Joined: 04 Jul 2003
Posts: 81
Location: Texas
|
| Posted: Thu Apr 27, 2006 4:53 pm Post subject: |
|
|
I'm in the same boat... do you mean you forgot to build with the USE flags, or to remove them?
Thanks!
Bill |
|
| Back to top |
|
|
Tsurani
n00b
Joined: 05 Jul 2006
Posts: 4
Location: New Zealand
|
| Posted: Fri Jul 07, 2006 12:18 pm Post subject: |
|
|
I had the same problem as described above, on my amd64. I have gentoo-sources 2.6.16-r9, net-dialup/pptpclient-1.7.0 and net-dialup/ppp-2.4.2-r15.
I followed instructions on http://gentoo-wiki.com/HOWTO_Set_up_a_vpn_client_with_mppe_encryption, and compiled MPPC/MPPE as a kernel module.
Next step was to emerge ppp and pptpclient.
The HOWTO states; when emerging ppp: | Quote: | | If you patched your kernel with mppe-mppc patch, you should enable mppe-mppc USE flag. Otherwise, DO NOT enable this USE FLAG! |
.
Which is fair enough as emerging ppp with mppe-mppc flag gives you a warning:
| Code: |
* The mppe-mppc flag overwrites the pppd native MPPE support with MPPE-MPPC
* patch developed by Jan Dubiec.
* The resulted pppd will work only with patched kernels with version <= 2.6.14.
* You could obtain the kernel patch from MPPE-MPPC homepage:
* http://mppe-mppc.alphacron.de/
* CAUTION: MPPC is a U.S. patented algorithm!
* Ask yourself if you really need it and, if you do, consult your lawyer first.
|
anyway, set up config files as per rest of the HOWTO.
then the big moment: | Code: | | pon VPNNAME debug dump logfd 2 nodetach |
returned
Since it was already broken I decided to emerge ppp WITH mppe-mppc, WITHOUT patching the kernel.
And had to change /etc/ppp/options.VPNNAME accordingly.
This time it worked fine. |
|
| Back to top |
|
|
mrness
Retired Dev
Joined: 17 Feb 2004
Posts: 375
Location: bucharest.ro
|
| Posted: Thu Jul 13, 2006 5:00 am Post subject: |
|
|
| Tsurani wrote: | Since it was already broken I decided to emerge ppp WITH mppe-mppc, WITHOUT patching the kernel.
And had to change /etc/ppp/options.VPNNAME accordingly.
This time it worked fine. |
Then your connection don't use MPPE at all since your net-dialup/ppp support for MPPE is incompatible with your kernel. |
|
| Back to top |
|
|
Tsurani
n00b
Joined: 05 Jul 2006
Posts: 4
Location: New Zealand
|
| Posted: Tue Jul 18, 2006 10:23 am Post subject: |
|
|
| mrness wrote: |
Then your connection don't use MPPE at all since your net-dialup/ppp support for MPPE is incompatible with your kernel. |
doesn't this mean it's working?
| Code: |
MPPE 128-bit stateless compression enabled
sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0>]
rcvd [IPCP ConfRej id=0x1 <compress VJ 0f 01>]
sent [IPCP ConfReq id=0x2 <addr 0.0.0.0>]
rcvd [IPCP ConfNak id=0x2 <addr x.x.x.x>]
sent [IPCP ConfReq id=0x3 <addr x.x.x.x>]
rcvd [IPCP ConfAck id=0x3 <addr x.x.x.x>]
rcvd [IPCP ConfReq id=0x6 <addr x.x.x.y>]
sent [IPCP ConfAck id=0x6 <addr x.x.x.y>]
local IP address x.x.x.x
remote IP address x.x.x.y
Script /etc/ppp/ip-up started (pid 9015)
Script /etc/ppp/ip-up finished (pid 9015), status = 0x1
|
|
|
| Back to top |
|
|
mrness
Retired Dev
Joined: 17 Feb 2004
Posts: 375
Location: bucharest.ro
|
| Posted: Tue Jul 18, 2006 10:33 am Post subject: |
|
|
| Do you see anything about MPPE during the negociation phase? 'Cause I don't see a thing. |
|
| Back to top |
|
|
Tsurani
n00b
Joined: 05 Jul 2006
Posts: 4
Location: New Zealand
|
| Posted: Tue Jul 18, 2006 10:54 am Post subject: |
|
|
| mrness wrote: | | Do you see anything about MPPE during the negociation phase? 'Cause I don't see a thing. |
| Code: |
Using interface ppp0
Connect: ppp0 <--> /dev/pts/1
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x97c1e68e> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x0 <auth chap MS-v2> <magic 0xaaa43d2> <pcomp> <accomp> <callback CBCP> <mrru 1614> ]
sent [LCP ConfRej id=0x0 <callback CBCP> <mrru 1614> < >]
rcvd [LCP ConfNak id=0x1 <mru 1500>]
sent [LCP ConfReq id=0x2 <asyncmap 0x0> <magic 0x97c1e68e> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <auth chap MS-v2> <magic 0xaaa43d2> <pcomp> <accomp> ]
sent [LCP ConfAck id=0x1 <auth chap MS-v2> <magic 0xaaa43d2> <pcomp> <accomp> ]
rcvd [LCP ConfAck id=0x2 <asyncmap 0x0> <magic 0x97c1e68e> <pcomp> <accomp>]
sent [LCP EchoReq id=0x0 magic=0x97c1e68e]
rcvd [CHAP Challenge id=0x0 <>, name = "ISX"]
sent [CHAP Response id=0x0 <>, name = "DOMAIN\\user"]
rcvd [LCP EchoRep id=0x0 magic=0xaaa43d2]
rcvd [CHAP Success id=0x0 "S="]
sent [CCP ConfReq id=0x1 <mppe +H +M +S +L -D -C>]
rcvd [CCP ConfReq id=0x3 <mppe +H +M +S +L -D +C>]
sent [CCP ConfNak id=0x3 <mppe +H -M +S -L -D -C>]
rcvd [IPCP ConfReq id=0x4 <addr x.x.x.y>]
sent [IPCP TermAck id=0x4]
rcvd [CCP ConfNak id=0x1 <mppe +H -M +S -L -D -C>]
sent [CCP ConfReq id=0x2 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfReq id=0x5 <mppe +H -M +S -L -D -C>]
sent [CCP ConfAck id=0x5 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfAck id=0x2 <mppe +H -M +S -L -D -C>]
MPPE 128-bit stateless compression enabled
sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0>]
rcvd [IPCP ConfRej id=0x1 <compress VJ 0f 01>]
sent [IPCP ConfReq id=0x2 <addr 0.0.0.0>]
rcvd [IPCP ConfNak id=0x2 <addr x.x.x.x>]
sent [IPCP ConfReq id=0x3 <addr x.x.x.x>]
rcvd [IPCP ConfAck id=0x3 <addr x.x.x.x>]
rcvd [IPCP ConfReq id=0x6 <addr x.x.x.y>]
sent [IPCP ConfAck id=0x6 <addr x.x.x.y>]
local IP address x.x.x.x
remote IP address x.x.x.y
Script /etc/ppp/ip-up started (pid 9015)
Script /etc/ppp/ip-up finished (pid 9015), status = 0x1
|
|
|
| Back to top |
|
|
mrness
Retired Dev
Joined: 17 Feb 2004
Posts: 375
Location: bucharest.ro
|
| Posted: Tue Jul 18, 2006 11:02 am Post subject: |
|
|
| strange... I must see with my own eyes. |
|
| Back to top |
|
|
Tsurani
n00b
Joined: 05 Jul 2006
Posts: 4
Location: New Zealand
|
| Posted: Tue Jul 18, 2006 11:50 am Post subject: |
|
|
I'm not making it up 
not sure if this is useful but:
| Code: |
# ifconfig
***
ppp0 Link encap:Point-to-Point Protocol
inet addr:x.x.x.x P-t-P:x.x.x.y Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1000 Metric:1
RX packets:784 errors:0 dropped:0 overruns:0 frame:0
TX packets:632 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:454018 (443.3 Kb) TX bytes:61006 (59.5 Kb)
|
| Code: |
# lsmod
Module Size Used by
ppp_async 12480 1
uhci_hcd 34272 0
eth1394 21704 0
sata_sil 12104 0
ohci1394 35208 0
ieee1394 107832 2 eth1394,ohci1394
usbhid 41184 0
forcedeth 26500 0
sata_nv 11076 0
libata 65560 2 sata_sil,sata_nv
ehci_hcd 34632 0
ohci_hcd 22340 0
i2c_nforce2 7872 0
sha1 3264 2
ppp_mppe 7880 2
ppp_generic 28064 6 ppp_async,ppp_mppe
slhc 7808 1 ppp_generic
fglrx 445492 8
|
| Code: |
# equery u ppp
[ Found these USE variables for net-dialup/ppp-2.4.2-r15 ]
U I
- - activefilter : Enables activefilter support
- - atm : Enables support for PPP over ATM (PPPoA)
+ + dhcp : Enables the DHCP plugin
+ + ipv6 : Adds support for IP version 6
+ + mppe-mppc : Enables support for MPPE-MPPC
+ + pam : Adds support PAM (Pluggable Authentication Modules) - DANGEROUS to arbitrarily flip
- - radius : Adds support for RADIUS authentication"
|
|
|
| Back to top |
|
|
mrness
Retired Dev
Joined: 17 Feb 2004
Posts: 375
Location: bucharest.ro
|
| Posted: Wed Jul 26, 2006 5:37 am Post subject: |
|
|
hmm... It seems you're right. ppp-2.4.2-r15 MPPE support works with or without mppe-mppc USE flag enabled, the only difference being the pppd parameter (mppe required,stateless vs require-mppe-128).
Nevertheless, MPPC should work only if you patched your kernel and this would restrict you from using kernels > 2.6.14 since there are no patches for these versions. |
|
| Back to top |
|
|
db9052
n00b
Joined: 11 Jun 2004
Posts: 5
|
| Posted: Fri Jul 28, 2006 1:50 pm Post subject: |
|
|
| There are probably no patches since MPPE/MPPC support was added to the kernel itself (>2.6.14)! See http://pptpclient.sourceforge.net/ |
|
| Back to top |
|
|
mrness
Retired Dev
Joined: 17 Feb 2004
Posts: 375
Location: bucharest.ro
|
| Posted: Mon Jul 31, 2006 7:15 am Post subject: |
|
|
You are confusing things. The vanilla kernel supports only MPPE, as it is implemented in the original ppp-2.4.3.
The mppe_mppc patch is unsupported by the current version of kernel. |
|
| Back to top |
|
|
VadimMc
n00b
Joined: 08 Sep 2006
Posts: 3
|
| Posted: Fri Sep 08, 2006 7:54 am Post subject: |
|
|
| VinzC wrote: | | Ok, I've found my mistake: I had forgotten USE flags dhcp and mppe-mppc . Problem solved, now it works. |
====================================================
Dear collegues!
I had this problem with Gentoo 2006.1 AMD 64 when I boot form Live CD and install Gentoo ......
Can work with flags "dhcp and mppe-mppc" when I boot from live CD or I have to add additional packages?
P.S PPTP work OK wit FreeBSD and SUSE 10.1 - but I couldn't start PPTP when I boot from Live CD |
|
| Back to top |
|
|
VadimMc
n00b
Joined: 08 Sep 2006
Posts: 3
|
| Posted: Fri Sep 08, 2006 8:03 pm Post subject: |
|
|
| VinzC wrote: | I too have the same problem on my AMD64 machine. I have Gentoo Sources 2.6.15-r3, net-dialup/pptpclient-1.7.0 and net-dialup/ppp-2.4.2-r15. I have exactly the same packages on my x86 laptop with exactly the same config files and it works there.
I've followed the howto at http://pptpclient.sourceforge.net/howto-gentoo.phtml and tried almost anything I could. I'm going mad on this. Can anybody help? |
=============================================================
Did you do install "NetworkLess" mode of Gentoo without PPTP? |
|
| Back to top |
|
|
VinzC
Watchman
Joined: 17 Apr 2004
Posts: 5098
Location: Dark side of the mood
|
| Posted: Mon Sep 11, 2006 7:44 am Post subject: |
|
|
| VadimMc wrote: | | Did you do install "NetworkLess" mode of Gentoo without PPTP? |
Wow... I don't remember exactly but I don't think so.
I can now successfully connect to the VPN server I was trying to connect to when I wrote my post. The trick was to add dhcp use flag.
But... now the problem occurs again with a Gentoo VPN server that I have setup on a x86 machine. I have a x86 laptop, on which I have exactly the same pptpclient/ppp packages and version as my AMD64 machine. From my laptop VPN works while it times out and fails from the AMD64. Configuration files are exactly the same both sides.
_________________
Gentoo addict: tomorrow I quit, I promise!... Just one more emerge...
1739! |
|
| Back to top |
|
|
VadimMc
n00b
Joined: 08 Sep 2006
Posts: 3
|
| Posted: Thu Sep 14, 2006 3:23 pm Post subject: |
|
|
| VinzC wrote: | | VadimMc wrote: | | Did you do install "NetworkLess" mode of Gentoo without PPTP? |
Wow... I don't remember exactly but I don't think so.
I can now successfully connect to the VPN server I was trying to connect to when I wrote my post. The trick was to add dhcp use flag.
But... now the problem occurs again with a Gentoo VPN server that I have setup on a x86 machine. I have a x86 laptop, on which I have exactly the same pptpclient/ppp packages and version as my AMD64 machine. From my laptop VPN works while it times out and fails from the AMD64. Configuration files are exactly the same both sides. |
============================================
I used USE="mppe-mppc dhcp: opitons when I booted form Live CD but I couldn't make VPN connection with VPN serser...In system log I found message about some GRE mistakes...Fatal 11 didn't dissapear  |
|
| Back to top |
|
|
|
Gentoo on AMD64
