Very Computer

Hi Folks.

I'm trying to configure our Linux box as a dialin server for our local
network.  I've installed mgetty, and PPPd fine.  Dialin access works
using a terminal program, but I'm struggling a little with PPP access.
Using a Win95 dialup networking and LCP I'm refused access.  The mgetty
login.config entry is :

/AutoPPP/ -     a_ppp   /usr/sbin/pppd auth -chap +pap login kdebug 1
debug

If I remove the authentication parameters and have :

/AutoPPP/ -     a_ppp   /usr/sbin/pppd kdebug 1 debug

Everything works fine, I can dialin and access the network without any
problems.

I'm a little confused quite what's going on, I've looked at the PPPd man
pages and at the PPP Howto without much luck.  From what I can gather,
the "login" parameter above should use the user details from /etc/passwd
to validate my PPP login.  If this is the case what do I need in my
/etc/ppp/papsecrets file?  

I've tried removing the "login" parameter and adding (what I think are
correct) entries to /etc/ppp/papsecrets for the dialin account, but have
had no success with the following :

user-name       my.machine.name         mypasswd

The machine is running a Slackware installation and kernel 2.0.29.  It's
connected to the Internet with an ISDN connection which is also using
PPP and working just fine.  

Any help would be much appreciated.  Either by email or as a follow up.  

Regards,
Lee Shakespeare.

: Hi Folks.

: I'm trying to configure our Linux box as a dialin server for our local
: network.  I've installed mgetty, and PPPd fine.  Dialin access works
: using a terminal program, but I'm struggling a little with PPP access.
: Using a Win95 dialup networking and LCP I'm refused access.  The mgetty
: login.config entry is :

: /AutoPPP/ -     a_ppp   /usr/sbin/pppd auth -chap +pap login kdebug 1
: debug

: If I remove the authentication parameters and have :

: /AutoPPP/ -     a_ppp   /usr/sbin/pppd kdebug 1 debug

: Everything works fine, I can dialin and access the network without any
: problems.

: I'm a little confused quite what's going on, I've looked at the PPPd man
: pages and at the PPP Howto without much luck.  From what I can gather,
: the "login" parameter above should use the user details from /etc/passwd
: to validate my PPP login.  If this is the case what do I need in my
: /etc/ppp/papsecrets file?  

: I've tried removing the "login" parameter and adding (what I think are
: correct) entries to /etc/ppp/papsecrets for the dialin account, but have
: had no success with the following :

: user-name     my.machine.name         mypasswd

Hello Lee

Using 'login' option makes the server look for /etc/password for
authentication. You should not have /etc/ppp/pap-secrets at all if you like
to give ppp access to all your users. That file can be used to limit acces
of ppp to some users and deny all others. The way this can be done has been
described in 'man pppd'. If you are using it, make sure your users use
'name <username>' option in their clients accessing your server.  

Denying ppp access can be done easier, at least I think so, putting
root-owned read only .ppprc file into users home directory. That file
should contain valid option for users who are allowed to use ppp and
invalid text for users who aren't.

--
Kalevi J Hautaniemi,      Marjatankatu 12,     33730 Tampere,  FINLAND.
****  http://oh3tr.ele.tut.fi/~oh3fg/ ****  On air:  OH3FG, KO4BC  ****
tel:+358-3-364-7446    fax:+358-3-364-2476    mobile:+358-50-590-2243

See below for comments

Quote:

> I've tried removing the "login" parameter and adding (what I think are
> correct) entries to /etc/ppp/papsecrets for the dialin account, but have
> had no success with the following :

> user-name       my.machine.name         mypasswd

> The machine is running a Slackware installation and kernel 2.0.29.  It's
> connected to the Internet with an ISDN connection which is also using
> PPP and working just fine.

> Any help would be much appreciated.  Either by email or as a follow up.

> Regards,
> Lee Shakespeare.

N.B. No junk mail
Sending me unwanted junk mail
agrees to a fee of US$ 1000
per sent e-mail message