PPP PAP-CHAP Help needed!

PPP PAP-CHAP Help needed!

Post by Eric Smallin » Thu, 11 Jun 1998 04:00:00



I have both Winblows95 and RedHat5.1 on my home PC.  I use MCI Internet
as my ISP and, under Win95, have nothing but praise for their service.
I cannot, however get Linux to connect.  I've read the how-to's and
FAQ's,  I've tried using EZPPP.  Nothing works!  Watching the debug info
shows the modem CONNECT (and the baud rate info) and then MCI responds
with a seven digit number in parentheses.  After a while, it just hangs
up.

I've tried the PAP setup stuff from all the doc's I've read but can't
get it to work.  So, this morning I got ahold of someone in their Tech
Support that knew a little more than Win95 setup - he was quite honest
in telling my MCI has no support for Linux and that he wasn't able to
help! :(   He did tell me, though, that they use PAP-CHAP
authorization.  Now, the HOWTO's mention CHAP, but for the life of me, I
can't figure out what exactly to put in that "/etc/ppp/chap-secrets"
file.

When I set up the Win95 account, the MCI CD install put MSIE4.01
(blech!) and it's Internet Connection Wizard on my machine.  It also
dropped a file named "mci2000.ins" in my windows directory.  Double
clicking it runs a program (\Program Files\Internet Explorer\Connection
Wizard\ISIGNUP.EXE) which creates a "Dial Up Networking" profile for my
MCI ISP. It is a text file which contains the following info (edited of
passwords and user names):

[MCI2000]
Time of Registration=Wed Jun  3 10:14:57 EDT 1998
Browser=Mozilla/4.0 (compatible; MSIE 4.01; Windows 95)
mci_email_name={my_email_name}
mci_user_account_nbr={an_alphanumeic_acct_nbr}

mci_dns_primary_address=204.70.127.127
mci_token_id={a_long_upercase_alpha_string}
mci_page_style=1
mci_dns_secondary_address=204.70.127.128
mci_dial_phone=8178849102
welcome={a_long_numeric_string}
mci_site_file=MCI2000
mci_domain_name=internetMCI.COM
mci_email_password={my_email_password}
mci_home_url=http://www.mci2000.com
mci_page_background=bg_SUPPORT.gif
mci_order_nbr=-111
mci_customer_account_nbr={an_alphanumeric_acct_nbr}
mci_web_nbr=20
oreos_ahoy={a_seven_character_alphanumeric_string}
mci_smtp_host=mailrelay.mci2000.com
mci_chap_secret={a_long_alphanumeric_string}
mci_companyid=SUPPORT
mcislide3=s3_SUPPORT.gif

mci_system_name={my_isp_username}
Email_Name={my_email_name}

POP_Server={my_pop3_host}.mci2000.com
POP_Logon_Name={my_pop3_useraccount}
POP_Logon_Password={my_pop3_password}
SMTP_Server={my_smtp_host}.mci2000.com
Use_MS_Exchange=no
Domain=internetMCI.COM
DNS_Address=204.70.127.127
DNS_Alt_Address=204.70.127.128
NNTP_Server=news.mci2000.com

(Items in currly brackets, {}, were my personal account and password
info)

--
 ____________________________________________________________________
 Eric A. Smalling                          SABRE TECHNOLOGY SOLUTIONS
 Ft Worth, Texas USA                                    --===
                                                      ------=== The
 Any views expressed are mine alone and are in no   ----------- SABRE
 way the views of AMR or any of it's subsidiaries.    ------=== Group
                                                        --===

                 Corp Web Site: http://www.sabre.com
 ____________________________________________________________________
 Spam killer: Remove the "xyz." from my email address when replying!

 
 
 

PPP PAP-CHAP Help needed!

Post by Jeff » Thu, 11 Jun 1998 04:00:00




Quote:> mci_chap_secret={a_long_alphanumeric_string}

<snip>

This seems to be a CHAP entry and I would try a
"*"   "*"   "{a_long_alphanumeric_string}"

You might also try a kdebug 31 with ppp to 'see' the LCP exchange & post a
log

 
 
 

PPP PAP-CHAP Help needed!

Post by Tobias Manthe » Thu, 11 Jun 1998 04:00:00



> I have both Winblows95 and RedHat5.1 on my home PC.  I use MCI Internet
> as my ISP and, under Win95, have nothing but praise for their service.
> I cannot, however get Linux to connect.  I've read the how-to's and
> FAQ's,  I've tried using EZPPP.  Nothing works!  Watching the debug info
> shows the modem CONNECT (and the baud rate info) and then MCI responds
> with a seven digit number in parentheses.  After a while, it just hangs
> up.

> I've tried the PAP setup stuff from all the doc's I've read but can't
> get it to work.  So, this morning I got ahold of someone in their Tech
> Support that knew a little more than Win95 setup - he was quite honest
> in telling my MCI has no support for Linux and that he wasn't able to
> help! :(   He did tell me, though, that they use PAP-CHAP
> authorization.  Now, the HOWTO's mention CHAP, but for the life of me, I
> can't figure out what exactly to put in that "/etc/ppp/chap-secrets"
> file.

> When I set up the Win95 account, the MCI CD install put MSIE4.01
> (blech!) and it's Internet Connection Wizard on my machine.  It also
> dropped a file named "mci2000.ins" in my windows directory.  Double
> clicking it runs a program (\Program Files\Internet Explorer\Connection
> Wizard\ISIGNUP.EXE) which creates a "Dial Up Networking" profile for my
> MCI ISP. It is a text file which contains the following info (edited of
> passwords and user names):

> [MCI2000]
> Time of Registration=Wed Jun  3 10:14:57 EDT 1998
> Browser=Mozilla/4.0 (compatible; MSIE 4.01; Windows 95)
> mci_email_name={my_email_name}
> mci_user_account_nbr={an_alphanumeic_acct_nbr}

> mci_dns_primary_address=204.70.127.127
> mci_token_id={a_long_upercase_alpha_string}
> mci_page_style=1
> mci_dns_secondary_address=204.70.127.128
> mci_dial_phone=8178849102
> welcome={a_long_numeric_string}
> mci_site_file=MCI2000
> mci_domain_name=internetMCI.COM
> mci_email_password={my_email_password}
> mci_home_url=http://www.mci2000.com
> mci_page_background=bg_SUPPORT.gif
> mci_order_nbr=-111
> mci_customer_account_nbr={an_alphanumeric_acct_nbr}
> mci_web_nbr=20
> oreos_ahoy={a_seven_character_alphanumeric_string}
> mci_smtp_host=mailrelay.mci2000.com
> mci_chap_secret={a_long_alphanumeric_string}
> mci_companyid=SUPPORT
> mcislide3=s3_SUPPORT.gif

> mci_system_name={my_isp_username}
> Email_Name={my_email_name}

> POP_Server={my_pop3_host}.mci2000.com
> POP_Logon_Name={my_pop3_useraccount}
> POP_Logon_Password={my_pop3_password}
> SMTP_Server={my_smtp_host}.mci2000.com
> Use_MS_Exchange=no
> Domain=internetMCI.COM
> DNS_Address=204.70.127.127
> DNS_Alt_Address=204.70.127.128
> NNTP_Server=news.mci2000.com

> (Items in currly brackets, {}, were my personal account and password
> info)

> --
>  ____________________________________________________________________
>  Eric A. Smalling                          SABRE TECHNOLOGY SOLUTIONS
>  Ft Worth, Texas USA                                    --===
>                                                       ------=== The
>  Any views expressed are mine alone and are in no   ----------- SABRE
>  way the views of AMR or any of it's subsidiaries.    ------=== Group
>                                                         --===

>                  Corp Web Site: http://www.sabre.com
>  ____________________________________________________________________
>  Spam killer: Remove the "xyz." from my email address when replying!

I really dont know much about the PAP CHAP thing but try to
invoke pppd with the -v(erbose) option. Believe me
its MAGIC. pppd then will write all the stuff into syslog
so try tail /var/log/messages or whereever your syslog is.
There is something like a dial-to-95 minihowto which describes
howto make connect with this sort of things. As I remember rigth it told
something about moving the chap-secrets file elsewhere but I definitly
unsure about this as I never needed it.
DONT PANIC
Tobias
 
 
 

PPP PAP-CHAP Help needed!

Post by Eric Smallin » Fri, 12 Jun 1998 04:00:00





> > mci_chap_secret={a_long_alphanumeric_string}

> <snip>

> This seems to be a CHAP entry and I would try a
> "*"     "*"     "{a_long_alphanumeric_string}"

> You might also try a kdebug 31 with ppp to 'see' the LCP exchange & post a
> log

It worked!!!!   Thanks Jeff!

I had a feeling that was the password I needed, but I wasn't sure what to put
in the first two "fields".

--
 ____________________________________________________________________
 Eric A. Smalling                          SABRE TECHNOLOGY SOLUTIONS
 Ft Worth, Texas USA                                    --===
                                                      ------=== The
 Any views expressed are mine alone and are in no   ----------- SABRE
 way the views of AMR or any of it's subsidiaries.    ------=== Group
                                                        --===

                 Corp Web Site: http://www.sabre.com
 ____________________________________________________________________
 Spam killer: Remove the "xyz." from my email address when replying!

 
 
 

PPP PAP-CHAP Help needed!

Post by Eric Smallin » Fri, 12 Jun 1998 04:00:00





> > mci_chap_secret={a_long_alphanumeric_string}

> <snip>

> This seems to be a CHAP entry and I would try a
> "*"     "*"     "{a_long_alphanumeric_string}"

> You might also try a kdebug 31 with ppp to 'see' the LCP exchange & post a
> log

It worked!!!!   Thanks Jeff!

I had a feeling that was the password I needed, but I wasn't sure what to put
in the first two "fields".

--
 ____________________________________________________________________
 Eric A. Smalling                          SABRE TECHNOLOGY SOLUTIONS
 Ft Worth, Texas USA                                    --===
                                                      ------=== The
 Any views expressed are mine alone and are in no   ----------- SABRE
 way the views of AMR or any of it's subsidiaries.    ------=== Group
                                                        --===

                 Corp Web Site: http://www.sabre.com
 ____________________________________________________________________
 Spam killer: Remove the "xyz." from my email address when replying!

 
 
 

PPP PAP-CHAP Help needed!

Post by Dieter Rohlfi » Sat, 13 Jun 1998 04:00:00


On Thu, 11 Jun 1998 09:25:04 -0500, Eric Smalling



>> This seems to be a CHAP entry and I would try a
>> "*"     "*"     "{a_long_alphanumeric_string}"

>It worked!!!!   Thanks Jeff!

If you're using only one ISP, Jeff's proposal may be okay. But if you're
using more than one ISP, I would recommend to change to first star to
your MCI user name and calling pppd with the additional option 'name
<your_MCI_user_name>'.

If you take Jeff's proposal and use more than one ISP, pppd will send
every password to your ISP you're connecting to until one password
succeeds. I consider this a security whole.

With my suggestion pppd will only send the password associated with your
MCI user name to the ISP. Make your chap-secret look like:
"your_MCI_user_name"     "*"     "your_MCI_pass_word"

For a second ISP you'll add the line:
"your_2nd_ISP_user_name"     "*"     "your_2nd_ISP_pass_word"

Dieter Rohlfing

 
 
 

1. Help with PPP needed on Solaris 2.4 x86 (PAP/CHAP)

Hello,

I have a little problem with PPP on Solaris 2.4 x86.
The only way for authentification explained in the manuals
is by supplying login and passwd info within the UUCP
tables.  They don't talk about PAP/CHAP authentification
on a dial-out computer.

I got a Config-Rej when the server asked for authentification
protocol for the LCP when debugging at level 9 the asppp
manager:

19:19:36 000003 ipdptp0 RECEIVE PPP ASYNC 34 Octets NB LCP Config-Req  
ID=04 LEN=29 MRU=1500 ACCM=00000000 Auth=CHAP Alg=MD5 MAG#=61616c30
ProtFCOMP AddrCCOMP

19:19:36 000004 ipdptp0 SEND PPP ASYNC 14 Octets LCP Config-REJ  ID=04
LEN=9 Auth=CHAP Alg=MD5

I've been told my server uses PAP, so I look forward to
any tips for configuring my 'client' PPP to use this
protocol.

Thanks in advance for your help,

Bernard

CU++
--

Bernard Van Haecke
UCL University Belgium-SIG/SCIL

2. Intelligent vacation program?

3. pppd - PAP, CHAP, MS-CHAP, MS-CHAP-v2 protocol negotiation

4. SITE EXEC hole - please explain

5. PPP/CHAP/PAP to an NT server from non-MS client (HELP!)

6. Error: WWW user in too many groups

7. PPP Server Setup Help (CHAP or PAP)

8. ANN: HawkNL 1.2 beta 3 released

9. chap pap help needed

10. Howto dial ISP running NT4 - chap, pap, ms-chap?

11. SWBell PPP/PAP/CHAP/Whatthehell? RH 5.0

12. PPP script for client callback with PAP/CHAP

13. PPP, PAP, CHAP in plain english