Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 02 May 2002 14:20:00 -0700
From:      Terry Lambert <tlambert2@mindspring.com>
To:        Archie Cobbs <archie@dellroad.org>
Cc:        Thomas David Rivers <rivers@dignus.com>, K.J.Koster@kpn.com, freebsd-hackers@FreeBSD.ORG, freebsd-net@FreeBSD.ORG
Subject:   Re: Anyone using pptp?
Message-ID:  <3CD1AD80.DFCC100F@mindspring.com>
References:  <200205021922.g42JM8H97301@arch20m.dellroad.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Archie Cobbs wrote:
> Thomas David Rivers writes:
> >   If I add
> >       enable MSChapV2
> >   in /etc/ppp/ppp.conf - then our ppp client requires that the
> >   peer (the Microsoft VPN server) authenticate using MSChapV2.  But,
> >   the Microsoft VPN peer refuses that (it's configured to not use
> >   MSChapV2.
> 
> Don't you want something like "allow MSChapV2" and "disable MSChapV2" ?

The MS PAP/CHAP stuff never made it to RFC because of the
protocol layering violations.

I think the problem T.D.R. is seeing are a result of not
having some covert channel, which is *not* MSChapV2, to get
a session key for the VPN session.

I guess we need to see a packet trace for a Windows machine
being successful, and a FreeBSD machine being unsuccessful,
in order to run a side-by-side comparison.

-- Terry

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3CD1AD80.DFCC100F>