Re: lug-bg: pppoe-server problem....

[Hristo Erinin <erinin@xxxxxxxxx>]

Zdrasti,

On Wed, 20 Aug 2003 14:29:45 +0300 (EEST)
oneofus@xxxxxxxxxxxxx wrote:

> hi all ,
> imam slednia problem. Opitwam se da podkaram pppoe-server + radius
> auth. and etc shit's , no w momenta sum zapecnal edwa na
> pppoe-server-a s pap/chap authorization. kakwo sum naprawil do
> momenta: 2 linux mashini:
> 
> LinuxBOx1 -> eth0 (connected to internet) eth1 (pppoe-server running
> here) LinuxBox2 -> eth0 (pppoe client) vruzkata mejdu dwete mashini e
> cross cable (UTP CAT5 :)))
> configuration na LinuxBOX1:
> root:/etc/ppp# cat pap-secrets
> "dido"  *       "parolka" *

Tezi kavichki sa opcionalni, triabvat samo kogato ima space v username
ili parolata.

> 
> root:/etc/ppp# egrep -v '#|^ *$' options
> auth
> lock
> +pap
> -chap
> proxyarp
> lcp-echo-interval 30
> lcp-echo-failure 4
> 
> 
> root:/etc/ppp# egrep -v '#|^ *$' pppoe-server-options
> require-pap

+pap i require-pap sa sinonimi. Ednoto AFAIR e po-novia sintaksis na
opciite.

> login

Mozhe bi tuk e zaroveno kucheto. Ot manual-a na pppd(8):

login: Use the system password database for authenticating the peer
using PAP, and record the user in the system wtmp file.  Note that  the
peer must have an entry in the /etc/ppp/pap-secrets file as well as the
system password database to be allowed access.

A mozhe i da ne e...

> lcp-echo-interval 10
> lcp-echo-failure 2
> 
> run-vam pppoe-server sus slednite parametri:
> pppoe-server -I eth1 -C InetgPPPoE -S inetgPPPoE -R 10.0.0.2
> 
> i v obshti linii towa e configuraciata na pppoe-server-a, sledva
> config files na LinuxBOX2:
> [root@test ppp]# egrep -v '#|^ *$' options
> lock
> defaultroute
> noipdefault
> modem
> crtscts
> debug
> auth

Tova oznachava che i pppoe servera triabva da se authenticate pred
client-a. Ili pone client-a shte shte ochakva da stane taka.

> passive
> asyncmap 0
> name "dido"

Tuk po skoro triabva da e user "dido". Pogledni v man page-a koga se
izpolzva name i user. Da ne govorim che niama nuzhda ot tova vyobshte, 
tyi kato go ukazvash izrichno v pppoe.conf (USER=dido).

> 
> [root@test ppp]# cat pap-secrets
> 
> "dido"        *        "parolka" *
> 
> [root@test ppp]# egrep -v '#|^ *$' pppoe.conf
> ETH='eth0'
> USER=dido
> DEMAND=no
> DNSTYPE=NOCHANGE
> PEERDNS=no
> DNS1=
> DEFAULTROUTE=yes
[cut]
> 
> i v obshti linii towa sa config files:
> 
> kakvo se poluchawa:
> 

> Aug 20 14:23:34 crew pppd[31077]: PAP peer authentication failed for dido Aug 20 14:23:34 

> a v logs na LinuxBOX2 ->
> [root@test ppp]# tail /var/log/messages
> Sep 19 14:24:05 test pppd[20994]: Connect: ppp0 <--> /dev/pts/1
> Sep 19 14:24:05 test pppoe[20995]: PPP session is 6
> Sep 19 14:24:06 test pppd[20994]: Remote message: Login incorrect
> Sep 19 14:24:06 test pppd[20994]: PAP authentication failed
> 
> ........ &#1064;&#1072;&#1093; ? :)
> prekarah dosta wreme w opiti da namerq chetiwo za implementacia na
> pppoe-server no za sujalenie ne uspqh da namerq nishto poweche ot
> nqkolko-redovi "HOWTO"-ta , obshto wzeto documentaciata about e malko
> oskudna. Shte sum blagodaren na wseki koito se opita dori da mi dade
> ideq ot kakwo moje da se poluchi towa , ili oshte poweche da uspee da
> mi dade chitavo chetivo za towa ....

Authentication failed... V sluchaia problemyt ne e v PPPoE-to ti, a v
pppd-to :) Ako iskash pusni na serverskoto pppd malko poveche debug da vidish 
kakvo stava i zashto te reject-va.

Osven tova ot http://www.roaringpenguin.com/pppoe/:
Server

The PPPoE software includes a server. This has been tested extensively
only on Linux. If you wish to terminate many connections, you are urged
to use the new kernel-mode PPPoE support. 

Pozdravi i dano sym bil polezen :)
-- 
Best Regards,
Hristo Erinin
System Administrator
Spectrum Net Jsc.
+35929657615
	
============================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
============================================================================