Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 26 Jun 2003 21:30:54 -0400
From:      Doug Lee <dgl@dlee.org>
To:        Archie Cobbs <archie@dellroad.org>
Cc:        freebsd-stable@freebsd.org
Subject:   Possible Solution (Re: mpd VPN won't work after upgrade from 4.6-STABLE to 4.8-STABLE)
Message-ID:  <20030627013054.GA42511@kirk.dlee.org>
In-Reply-To: <200306251932.h5PJWgUf004385@arch20m.dellroad.org>
References:  <20030624065138.GB478@kirk.dlee.org> <200306251932.h5PJWgUf004385@arch20m.dellroad.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Re: the "protocol reject" errors; I left the original messages below
this for reference, but I'm not so much following directly onto
them...

Archie, I'm mildly embarrassed.  I just now found something you wrote
in November of last year advising the following patch to fix exactly
this problem.  I am running two 4.8-STABLE boxen, and it is not part
of /sys/netgraph/ng_ppp.c in CVS yet, apparently...

--- sys/netgraph/ng_ppp.c.orig  Thu Nov 21 12:39:06 2002
+++ sys/netgraph/ng_ppp.c       Thu Nov 21 12:39:26 2002
@@ -744,7 +744,7 @@
        case HOOK_INDEX_VJC_VJIP:
                if (priv->conf.enableCompression
                    && priv->hooks[HOOK_INDEX_COMPRESS] != NULL) {
-                       if ((m = ng_ppp_addproto(m, proto, 1)) == NULL) {
+                       if ((m = ng_ppp_addproto(m, proto, 0)) == NULL) {
                                NG_FREE_META(meta);
                                return (ENOBUFS);
                        }
I patched ng_ppp.c, but I don't know if I can rebuild netgraph without
a make world, which takes a good 12 hours on this P166... advice on
that welcome.

Should one of us submit a PR for this, or did I miss something?

Thanks much!

On Wed, Jun 25, 2003 at 02:32:42PM -0500, Archie Cobbs wrote:
> Doug Lee wrote:
> > Yes, but it's a good enough idea that I'm doing it again just to be
> > totally sure...and you reminded me that I forgot to rm -r work before
> > doing it last time :P
> > 
> > ...but I am getting the same results after just having done
> 
> The build compile warnings are "normal" and due to old style
> function declarations in OpenSSL.
> 
> If you're getting protocol reject errors -- while trying to use
> Microsoft MPPE encryption? Then probably one side is generating
> the keys incorrectly. What is the other side? Also, let's see
> the log trace.
> 
> -Archie
> 
> __________________________________________________________________________
> Archie Cobbs     *    Halloo Communications    *     http://www.halloo.com

-- 
Doug Lee           dgl@dlee.org        http://www.dlee.org
Bartimaeus Group   doug@bartsite.com   http://www.bartsite.com
No one alive is beyond hope; every second of life is a chance.
(08/29/02)



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030627013054.GA42511>