search for: chap

Hi all I get a Cisco 1841 router, connecting the office through a CHAP PPPoE link: [...] interface Dialer1 ip address negotiated ip mtu 1492 ip nat outside ip virtual-reassembly encapsulation ppp ip tcp adjust-mss 1452 dialer pool 1 dialer-group 1 no cdp enable ppp authentication chap callin ppp chap hostname username at isp ppp chap password 0...

...through L2TP/IPsec to one Linux server. When I try to connect in my domain appear an error at log. Plugin winbind.so loaded. WINBIND plugin initialized. using channel 36 Using interface ppp1 Connect: ppp1 <--> /dev/pts/3 sent [LCP ConfReq id=0x1 <mru 1410> <asyncmap 0x0> <auth chap MD5> <magic 0x564e3dc9> <pcomp> <accomp>] rcvd [LCP ConfReq id=0x0 <mru 1400> <magic 0x17201f33> <pcomp> <accomp> <callback CBCP>] sent [LCP ConfRej id=0x0 <callback CBCP>] rcvd [LCP ConfAck id=0x1 <mru 1410> <asyncmap 0x0> <au...

...lt-in windows PPTP VPN client, and pppd as a client under linux. What happens is: - restart winbind - authenticate a user - close pptp connection - a few minutes (seems like around 10) after a first (or several) successful authentication, I get the following ppp trace on the client side: rcvd [CHAP Challenge id=0x8b <8b7f80d136cce1a774e888a0d4e83bbc>, name = "pptpd"] sent [CHAP Response id=0x8b <95c9d3a1061299d9ca4874659c37f1720000000000000000161c5daea05d0ded24eaf8ca99f338ab4e8f6491e86cdd4900>, name = "xxxxx"] rcvd [CHAP Success id=0x8b "S=5DB7336F26A8F...

Well, Im using an Adaptec Snap 4500 and I've had nothing but problems with it, initially I thought it was an issue with CHAP authentication so I completely disabled authentication and the kernel is still reporting in dmesg and /var/log/messages that it cannot authenticate with the target /boggle... On a side note, I know the iscsi slice works because I can connect to it just fine on Windows XP pro. So go figure :-) ;-)...

Hi, I have a few remote user who use a PPTP based VPN. The server is running PoPToP (http://www.poptop.org/), and a pppd patched to support MPPE/MPPC for (some) added security. Currently, users authentication information is stored in plaintext in /etc/ppp/chap-secrets. I'd like to be able to put users into LDAP, and have ppp authenticate either directly against LDAP, or against Samba (with an LDAP backend). Any ideas on how I might go about this? Most of the docs I've seen suggest that you can't use PAM for authentication with CHAP, so it see...

...4.4 started by root, uid 0 Jun 2 16:56:05 debian pppd[17472]: using channel 17 Jun 2 16:56:05 debian pppd[17472]: Using interface ppp0 Jun 2 16:56:05 debian pppd[17472]: Connect: ppp0 <--> /dev/pts/2 Jun 2 16:56:05 debian pppd[17472]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0xa2912b7> <pcomp> <accomp>] Jun 2 16:56:05 debian pptpd[17470]: GRE: Bad checksum from pppd. Jun 2 16:56:05 debian pppd[17472]: rcvd [LCP ConfReq id=0x0 <mru 1400> <magic 0x648b71fd> <pcomp> <accomp> <callback CBCP>] Jun 2 16:56:0...

I am trying to setup unified logons to my VPN users. My goal is to get rid of chap.secrets file and use winbind to authenticate against tdbsam password backend located in the PDC (Fedora Core 1) running with Samba 3.0.21pre1. I have tried with older Samba versions without success. Using winbind should allow password changes from the Windows XP Pro -client using CTRL+ALT+DEL....

Hey everyone, I'm having trouble accessing my Samba fs from my Windows machine. The closest I've come to solving my problem is that I need to enable CHAP on the Samba server. What alterations would I need to make to smb.conf or anything else in order to set this up correctly? This 'Invalid password!' error is getting on my nerves because I'm positive that it's correct. And it doesn't ask me for a username but guest access is enab...

...ate. I have searched various places and while I have seen a couple of other questions about getting this to work, I haven't found any answers. When I have the radius server in debug mode I see the following when just ntlmv2 is enabled on the AD side: rad_check_password: Found Auth-Type MS-CHAP auth: type "MS-CHAP" Processing the authenticate section of radiusd.conf modcall: entering group MS-CHAP for request 0 rlm_mschap: No User-Password configured. Cannot create LM-Password. rlm_mschap: No User-Password configured. Cannot create NT-Password. rlm_mschap: Told to do M...

...p_common_settings: set link type pptp set pptp enable incoming set pptp disable originate set iface disable on-demand set iface enable proxy-arp # set iface idle 1800 set bundle enable multilink set link yes acfcomp protocomp set link no pap chap set link enable chap # set link keep-alive 10 60 set link mtu 1260 set ipcp yes vjcomp # set ipcp ranges 10.77.1.1/32 10.77.1.50/32 # set ipcp dns 10.77.1.1 # set ipcp nbns 10.77.1.1 set bundle enable compression set ccp yes mppc...

I am having a very hard time getting iscsi to work with CentOS 4, if I put the same exact settings into the Microsoft ISCSI initiator it works great, however I continually get authentication errors from the kernel driver for iscsi when I try it on my *nix machine. Any advice? Thanks, -Drew -------------- next part -------------- An HTML attachment was scrubbed... URL:

I always smile to myself when reading the replies on the mailing list from Gerald (jerry) Carter. That cheers at the end of everything always makes it seem that he is such a nice person. Of course half the reason I smile to myself is the inanity of getting that impression from one word in an e-mail. For all I know he is a complete jerk. And even the huge power lifters at the gym'll

...at im i doing, im following http://deployingradius.com/ Followed these steps, that works out fine. Then we goto : http://deployingradius.com/documents/configuration/active_directory.html for smb.conf i use the config i always us, pretty basic + i added (ass noted on the site) : ntlm auth = mschapv2-and-ntlmv2-only And offcourse i joined this server to the domain. Now im at : Configuring FreeRADIUS to use ntlm_auth for MS-CHAP And i just can not get this to work. What i notice. (0) Found Auth-Type = mschap (0) # Executing group from file /etc/freeradius/3.0/sites-enabled/default (0)...

I found this site https://wiki.centos.org/TipsAndTricks/CentOSUpgradeTool Is this still the case - there is no upgrade path from 6 to 7 ? I have a few remote servers I'd like to upgrade (if possible). Thanks, Jerry

...ndtargets.auth.username = My_ISCSI_USR_NAME discovery.sendtargets.auth.password = MyPassword But, now I need to mount another iSCSI target, from a different SAN that has a different username & password than whan I have configured here for the one already mounted. How do I tell iscsiadm which CHAP settings to use with which iSCSI target? -- Kind Regards Rudi Ahlers SoftDux Website: http://www.SoftDux.com Technical Blog: http://Blog.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532

...wbinfo -a user%pwd, wbinfo -p, wbinfo -t and wbinfo -m - getent passwd and getent group - ntlm_auth --username=user --domain=domain.x.y - ntlm_auth --username=user --domain=domain.x.y --request-lm-key - ntlm_auth --username=user --domain=domain.x.y --request-nt-key - authentication through ppp (mschap-v2 with chap-secrets) What is not working : - ntlm_auth --username=user --domain=domain.x.y --diagnostics (and every other variation...) - authentication through ppp (mschap-v2 with winbind plugin) I verified the paths to ntlm_auth in the options.l2tpd file, and it's ok. In the logs, it...

...t (called by ppp ???). I verified the access to the privileged pipe, and it was accessible to root (quite normal, as far as I know...) Thanks for your help -------------- next part -------------- On Thu, 2006-11-30 at 19:17 -0500, Sebastien wrote: > Luis Daniel Lucio Quiroz a ?crit : > > CHAP and any other varian wont work because password does not fly accross > > internet, CHAP use a hash to crypt one way password and sends that to server. > > Because server have a hash also (no same algorithm) it fails. If you want to > > use chap you must use clear text passwor...

...acket_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = yes mschap: passwd = "(null)" mschap: authtype = "MS-CHAP" mschap: ntlm_auth = "/usr/bin/ntlm_au...

...7 ? I have a few remote servers I'd like to upgrade (if possible). Thanks, Jerry It is supported, with some limitations, in rhel, so the same I think applies to CentOS. See here for rhel https://access.redhat.com/documentation/en-US/Red_Hat_ Enterprise_Linux/7/html/Migration_Planning_Guide/chap- Red_Hat_Enterprise_Linux-Migration_Planning_Guide- Upgrading.html#chap-Red_Hat_Enterprise_Linux-Migration_ Planning_Guide-Upgrading_from_RHEL6 _______________________________________________ CentOS mailing list CentOS at centos.org https://lists.centos.org/mailman/listinfo/centos I suggest you...

Hi Not entirely centos related but that what the boxes are running so here i go ;) 2 of our centos boxes run nagios for network monitoring and send email and paging alerts and are connected to standard phone lines using modems to send the pages. I'm looking for a way in the event of provider failure to login to these machines and so am looking at the ability to connect to the console over