Как установить утм с впн?

Cramac · Сообщение **Cramac** » Пн окт 22, 2007 09:50

чудеса на свете есть (бубен помогает)

вчера выключил все, сегодня перевез в другое место и.....
коннект пошел, авторизация начал пытатся пройти....
теперь и в логал пптпд появилось над чем подумать:

Oct 22 10:44:49 server pptpd[4924]: MGR: Manager process started
Oct 22 10:44:49 server pptpd[4924]: MGR: Maximum of 100 connections available
Oct 22 10:45:04 server pptpd[4969]: CTRL: Client 10.10.10.22 control connection started
Oct 22 10:45:04 server pptpd[4969]: CTRL: Starting call (launching pppd, opening GRE)
Oct 22 10:45:04 server pppd[4970]: Plugin radius.so loaded.
Oct 22 10:45:04 server pppd[4970]: RADIUS plugin initialized.
Oct 22 10:45:04 server pppd[4970]: Plugin radius.so loaded.
Oct 22 10:45:04 server pppd[4970]: RADIUS plugin initialized.
Oct 22 10:45:04 server pppd[4970]: pppd 2.4.3 started by root, uid 0
Oct 22 10:45:04 server pppd[4970]: Using interface ppp0
Oct 22 10:45:04 server pppd[4970]: Connect: ppp0 <--> /dev/pts/3
Oct 22 10:45:04 server pptpd[4969]: GRE: Bad checksum from pppd.
Oct 22 10:45:04 server pptpd[4969]: GRE: accepting packet #0
Oct 22 10:45:04 server pptpd[4969]: GRE: accepting packet #1
Oct 22 10:45:07 server pptpd[4969]: GRE: accepting packet #2
Oct 22 10:45:07 server pptpd[4969]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
Oct 22 10:45:07 server pptpd[4969]: GRE: accepting packet #3
Oct 22 10:45:07 server pptpd[4969]: GRE: accepting packet #4
Oct 22 10:45:07 server pptpd[4969]: GRE: accepting packet #5
Oct 22 10:45:07 server pppd[4970]: /etc/radiusclient/radiusclient.conf: no servers file specified
Oct 22 10:45:07 server pppd[4970]: RADIUS: Can't read config file /etc/radiusclient/radiusclient.conf
Oct 22 10:45:07 server pppd[4970]: Peer test failed CHAP authentication
Oct 22 10:45:07 server pptpd[4969]: GRE: accepting packet #6
Oct 22 10:45:07 server pppd[4970]: Connection terminated.
Oct 22 10:45:07 server pptpd[4969]: CTRL: Reaping child PPP[4970]
Oct 22 10:45:07 server pppd[4970]: Exit.
Oct 22 10:45:07 server pptpd[4969]: CTRL: Client 10.10.10.22 control connection finished

странно но
/etc/radiusclient/radiusclient.conf
файл есть

mikkey finn

а в файле том что написано?

Cramac · Сообщение **Cramac** » Пн окт 22, 2007 13:06

в том файле (radiusclient.conf)

authserver localhost:1812
acctserver localhost:1813
servers /etc/radiusclient/servers

Cramac · Сообщение **Cramac** » Пн окт 22, 2007 13:17

поставил еще
radiusclient-0.3.2-0.dag.rh90.i386.rpm
взял конфиги от него, поправил только файл secrets и прописал в радиусклиент.конф
authserver localhost:1812
acctserver localhost:1813

остальное по дефолту...

сообщение об ошибке теперь пропало в логе пптпд но авторизоватся все равно не может клиент

Oct 22 14:14:21 server pptpd[5673]: CTRL: Client 10.10.10.22 control connection started
Oct 22 14:14:21 server pptpd[5673]: CTRL: Starting call (launching pppd, opening GRE)
Oct 22 14:14:21 server pppd[5674]: Plugin radius.so loaded.
Oct 22 14:14:21 server pppd[5674]: RADIUS plugin initialized.
Oct 22 14:14:21 server pppd[5674]: Plugin radius.so loaded.
Oct 22 14:14:21 server pppd[5674]: RADIUS plugin initialized.
Oct 22 14:14:21 server pppd[5674]: pppd 2.4.3 started by root, uid 0
Oct 22 14:14:21 server pppd[5674]: using channel 14
Oct 22 14:14:21 server pppd[5674]: Using interface ppp0
Oct 22 14:14:21 server pppd[5674]: Connect: ppp0 <--> /dev/pts/2
Oct 22 14:14:21 server pppd[5674]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MD5> <magic 0xd26d2341> <pcomp> <accomp>]
Oct 22 14:14:21 server pptpd[5673]: GRE: Bad checksum from pppd.
Oct 22 14:14:21 server pptpd[5673]: GRE: accepting packet #0
Oct 22 14:14:21 server pppd[5674]: rcvd [LCP ConfReq id=0x0 <mru 1400> <magic 0x6b500d66> <pcomp> <accomp> <callback CBCP>]
Oct 22 14:14:21 server pppd[5674]: sent [LCP ConfRej id=0x0 <callback CBCP>]
Oct 22 14:14:21 server pptpd[5673]: GRE: accepting packet #1
Oct 22 14:14:21 server pppd[5674]: rcvd [LCP ConfReq id=0x1 <mru 1400> <magic 0x6b500d66> <pcomp> <accomp>]
Oct 22 14:14:21 server pppd[5674]: sent [LCP ConfAck id=0x1 <mru 1400> <magic 0x6b500d66> <pcomp> <accomp>]
Oct 22 14:14:24 server pppd[5674]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MD5> <magic 0xd26d2341> <pcomp> <accomp>]
Oct 22 14:14:24 server pptpd[5673]: GRE: accepting packet #2
Oct 22 14:14:24 server pptpd[5673]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
Oct 22 14:14:24 server pptpd[5673]: GRE: accepting packet #3
Oct 22 14:14:24 server pptpd[5673]: GRE: accepting packet #4
Oct 22 14:14:24 server pppd[5674]: rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MD5> <magic 0xd26d2341> <pcomp> <accomp>]
Oct 22 14:14:24 server pppd[5674]: sent [CHAP Challenge id=0xcd <77da94f149ec4662cf21f6c6e64cddb56fcabe97e9fd>, name = "server"]
Oct 22 14:14:24 server pppd[5674]: rcvd [LCP code=0xc id=0x2 6b 50 0d 66 4d 53 52 41 53 56 35 2e 31 30]
Oct 22 14:14:24 server pppd[5674]: sent [LCP CodeRej id=0x2 0c 02 00 12 6b 50 0d 66 4d 53 52 41 53 56 35 2e 31 30]
Oct 22 14:14:24 server pppd[5674]: rcvd [LCP code=0xc id=0x3 6b 50 0d 66 4d 53 52 41 53 2d 30 2d 41 4e 44 52 55 53 48 41]
Oct 22 14:14:24 server pppd[5674]: sent [LCP CodeRej id=0x3 0c 03 00 18 6b 50 0d 66 4d 53 52 41 53 2d 30 2d 41 4e 44 52 55 53 48 41]
Oct 22 14:14:24 server pptpd[5673]: GRE: accepting packet #5
Oct 22 14:14:24 server pppd[5674]: rcvd [CHAP Response id=0xcd <4af528a8dca1fe9405aa753eba6bd638>, name = "test"]
Oct 22 14:14:24 server pppd[5674]: rc_avpair_new: unknown attribute 60
Oct 22 14:14:24 server pppd[5674]: Peer test failed CHAP authentication
Oct 22 14:14:24 server pppd[5674]: sent [CHAP Failure id=0xcd "3\37777777657\37777777736\37777777667 \001\37777777753\37777777667X-\t\37777777600\024"]
Oct 22 14:14:24 server pppd[5674]: sent [LCP TermReq id=0x4 "Authentication failed"]
Oct 22 14:14:24 server pptpd[5673]: GRE: accepting packet #6
Oct 22 14:14:24 server pppd[5674]: rcvd [LCP TermAck id=0x4 "Authentication failed"]
Oct 22 14:14:24 server pppd[5674]: Connection terminated.
Oct 22 14:14:24 server pptpd[5673]: CTRL: Reaping child PPP[5674]
Oct 22 14:14:24 server pppd[5674]: Exit.
Oct 22 14:14:24 server pptpd[5673]: CTRL: Client 10.10.10.22 control connection finished

еще вот такое в логе радиуса в утм

?Debug : Oct 22 14:25:58 RADIUS URFA[plugin]: IP for IP-GroupID/A/Slink/Service: 1/1/1/1. 1 nodes
?Debug : Oct 22 14:26:05 RADIUS Auth: Packet from <127.0.0.1>
?Debug : Oct 22 14:26:05 RADIUS Auth: User <test> connecting
?Debug : Oct 22 14:26:05 RADIUS DBA: NAS found. Data size <0>
?Debug : Oct 22 14:26:05 RADIUS DBA: Info for login <test> found. type <1>
?Debug : Oct 22 14:26:05 RADIUS Auth: Auth scheme: CHAP
?Debug : Oct 22 14:26:05 RADIUS Auth: CHAP: Using Authenticator as CHAP-Challenge
?Debug : Oct 22 14:26:05 RADIUS Auth: CHAP: Rejected user <test>
Notice: Oct 22 14:26:05 RADIUS Auth: Authorization failed for user <test>
Notice: Oct 22 14:26:05 RADIUS Auth: Authorization failed for user <test>

Cramac · Сообщение **Cramac** » Пн окт 22, 2007 14:13

проблема решена добавлением в словарик строки
/etc/radiusclient/dictionary

ATTRIBUTE CHAP-Challenge 60 string

detx · Сообщение **detx** » Вт дек 16, 2008 13:36

Cramac писал(а):проблема решена добавлением в словарик строки
/etc/radiusclient/dictionary

ATTRIBUTE CHAP-Challenge 60 string

Спасибо мне тоже помогло