From owner-freebsd-hackers  Thu Jul 31 19:00:46 1997
Return-Path: <owner-freebsd-hackers>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id TAA17130
          for hackers-outgoing; Thu, 31 Jul 1997 19:00:46 -0700 (PDT)
Received: from awfulhak.demon.co.uk (awfulhak.demon.co.uk [158.152.17.1])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id TAA17125
          for <hackers@FreeBSD.ORG>; Thu, 31 Jul 1997 19:00:42 -0700 (PDT)
Received: from awfulhak.org (dev.lan.awfulhak.org [10.0.1.5])
	by awfulhak.demon.co.uk (8.8.5/8.8.5) with ESMTP id CAA03908;
	Fri, 1 Aug 1997 02:53:58 +0100 (BST)
Received: from dev.lan.awfulhak.org (localhost [127.0.0.1])
	by awfulhak.org (8.8.6/8.8.6) with ESMTP id CAA23814;
	Fri, 1 Aug 1997 02:53:58 +0100 (BST)
Message-Id: <199708010153.CAA23814@awfulhak.org>
X-Mailer: exmh version 2.0zeta 7/24/97
To: Gabor Kincses <gabor@acm.org>
cc: hackers@FreeBSD.ORG
Subject: Re: PPP chap problem 
In-reply-to: Your message of "Wed, 30 Jul 1997 19:10:13 CDT."
             <33DFD7E5.41C67EA6@acm.org> 
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Fri, 01 Aug 1997 02:53:58 +0100
From: Brian Somers <brian@awfulhak.org>
Sender: owner-freebsd-hackers@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

> I have tried to make chap work, but no go.  I have used pap and no
> authentication for over 6 months now, but chap doesn't seem to work.
> 
> I always get
> LCP:  SendConfigRej(Req-Sent)
>  AUTHPROTO proto = c223
> 
> which means that my side rejects chap authentication.
> Even though I added enable chap, accept chap.
> 
> I also tried to disable chap and only accept chap, but that didn't work
> either.  I also tried accept pap in which case the SendConfigRej became
> a SendConfigNak with c023 suggested to the peer.
> 
> I got the same results under 2.1.5 and 2.2.2.
> 
> Any help is really appreciated. 
> 
> BTW, I have to use term so that I can enter an SNK response before going
> into packet mode.  I don't think that should matter.

ppp only does CHAP with MD5 (this is the only requirement according 
to rfc1994).  You'll need to "set log +HDLC" to see what the fifth 
octet in the chap packet is.  If you drop me a line telling me, I'll 
put it on my list of things to add.

> -- 
> Gabor Kincses
> (gabor@acm.org)
> FreeBSD 2.1.5/2.2.2

-- 
Brian <brian@awfulhak.org>, <brian@freebsd.org>
      <http://www.awfulhak.org>
Don't _EVER_ lose your sense of humour....