From owner-freebsd-hackers  Thu May  2 14:20:41 2002
Delivered-To: freebsd-hackers@freebsd.org
Received: from falcon.prod.itd.earthlink.net (falcon.mail.pas.earthlink.net [207.217.120.74])
	by hub.freebsd.org (Postfix) with ESMTP
	id B6A7B37B41E; Thu,  2 May 2002 14:20:33 -0700 (PDT)
Received: from pool0524.cvx21-bradley.dialup.earthlink.net ([209.179.194.14] helo=mindspring.com)
	by falcon.prod.itd.earthlink.net with esmtp (Exim 3.33 #2)
	id 173O05-0001XW-00; Thu, 02 May 2002 14:20:29 -0700
Message-ID: <3CD1AD80.DFCC100F@mindspring.com>
Date: Thu, 02 May 2002 14:20:00 -0700
From: Terry Lambert <tlambert2@mindspring.com>
X-Mailer: Mozilla 4.7 [en]C-CCK-MCD {Sony}  (Win98; U)
X-Accept-Language: en
MIME-Version: 1.0
To: Archie Cobbs <archie@dellroad.org>
Cc: Thomas David Rivers <rivers@dignus.com>, K.J.Koster@kpn.com,
	freebsd-hackers@FreeBSD.ORG, freebsd-net@FreeBSD.ORG
Subject: Re: Anyone using pptp?
References: <200205021922.g42JM8H97301@arch20m.dellroad.org>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-hackers.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-hackers>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-hackers>
X-Loop: FreeBSD.ORG

Archie Cobbs wrote:
> Thomas David Rivers writes:
> >   If I add
> >       enable MSChapV2
> >   in /etc/ppp/ppp.conf - then our ppp client requires that the
> >   peer (the Microsoft VPN server) authenticate using MSChapV2.  But,
> >   the Microsoft VPN peer refuses that (it's configured to not use
> >   MSChapV2.
> 
> Don't you want something like "allow MSChapV2" and "disable MSChapV2" ?

The MS PAP/CHAP stuff never made it to RFC because of the
protocol layering violations.

I think the problem T.D.R. is seeing are a result of not
having some covert channel, which is *not* MSChapV2, to get
a session key for the VPN session.

I guess we need to see a packet trace for a Windows machine
being successful, and a FreeBSD machine being unsuccessful,
in order to run a side-by-side comparison.

-- Terry

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message