Koozali.org: home of the SME Server

VPN server problems

gigo

VPN server problems
« on: June 19, 2006, 01:04:29 PM »
hi i have installed sme 7 rc3.

i use it as server and gateway

i have to use some vpn connections from the network to connect to an server on the internet, sometimes one connection will work, to connections seems to be inposioble.

it is also not posible to connect from outside with vpn to the sme server.

the sme server is not behind an gateway or firewall...

has anybody an idea ?

windows gives me 691 as error, if i ll connect to outgoing server or internal. this message comes at the authentification

best regards

Offline billi

  • *
  • 46
  • +0/-0
    • http://applitec.net
VPN PROBLEM
« Reply #1 on: June 24, 2006, 05:28:18 PM »
I too am having problems connecting to the network after the RC3 upgrade. It seems to accept my username and password but refuses to "Register my computer on the network" This happens with more than 1 account from more than 1 location - Accounts worked before. Any suggestion on where to start trouble shooting this problem.
Thanks

KBE

VPN server problems
« Reply #2 on: June 25, 2006, 05:52:40 AM »
I  have the same problem slightly differnet configuration, i have mine as a server only, it used to work with this config before so i dont know if this feature has been disabled in the RC3 for server only mode. but it seem like you all are ehaving issues too.  mine starts the handshake too and fails to register on the server.  In the screen output it says:

Running this command in the Var/logs directory and trying to start the VPN session it reports as follows: (IP changed to protect the innocent)

Jun 24 22:47:38 b1 pptpd[15435]: CTRL: Client 70.112.xxx.xxxcontrol connection started
Jun 24 22:47:38 b1 pptpd[15435]: CTRL: Starting call (launching pppd, opening GRE)
Jun 24 22:47:38 b1 pppd[15436]: Plugin radius.so loaded.
Jun 24 22:47:38 b1 pppd[15436]: RADIUS plugin initialized.
Jun 24 22:47:39 b1 pppd[15436]: pppd 2.4.3 started by root, uid 0
Jun 24 22:47:39 b1 kernel: CSLIP: code copyright 1989 Regents of the University of California
Jun 24 22:47:39 b1 kernel: PPP generic driver version 2.4.2
Jun 24 22:47:39 b1 kernel: divert: not allocating divert_blk for non-ethernet device ppp0
Jun 24 22:47:39 b1 pppd[15436]: Using interface ppp0
Jun 24 22:47:39 b1 pppd[15436]: Connect: ppp0 <--> /dev/pts/4
Jun 24 22:47:39 b1 pptpd[15435]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
Jun 24 22:47:41 b1 pppd[15436]: MPPE required, but kernel has no support.
Jun 24 22:47:41 b1 pppd[15436]: Connection terminated.
Jun 24 22:47:41 b1 pppd[15436]: Connect time 0.1 minutes.
Jun 24 22:47:41 b1 pppd[15436]: Sent 0 bytes, received 0 bytes.
Jun 24 22:47:41 b1 kernel: divert: no divert_blk to free, ppp0 not ethernet
Jun 24 22:47:41 b1 pptpd[15435]: CTRL: Reaping child PPP[15436]
Jun 24 22:47:41 b1 pppd[15436]: Exit.
Jun 24 22:47:41 b1 pptpd[15435]: CTRL: Client 70.112.xxx.xxx control connection finished

It appears that it is looking for an encrypton protocol and cant find it...

Can any one confirm that this is happening to them?

Offline billi

  • *
  • 46
  • +0/-0
    • http://applitec.net
VPN server problems
« Reply #3 on: June 25, 2006, 03:33:55 PM »
KBE Thanks for verifying that this is not a 1 off errror.  BTW which log file are you looking at?
On my server (running server gateway) there is no logs being updated in the   /var/log/pptpd directory.
Below is an excerpts what is written  in the /var/log/messages log. Itis what appear to be relevant to me and what occurs after a reboot and 3 login tries.

Server Starting .........
Network starts ..............
Jun 25 06:33:21 the-server network: Bringing up interface eth0:  
Jun 25 06:33:22 the-server kernel: forcedeth.c: Reverse Engineered nForce ethernet driver. Version 0.30.
Jun 25 06:33:22 the-server kernel: ACPI: PCI interrupt 0000:00:0a.0[A] -> GSI 5 (level, low) -> IRQ 5
Jun 25 06:33:22 the-server kernel: PCI: Setting latency timer of device 0000:00:0a.0 to 64
Jun 25 06:33:22 the-server kernel: divert: allocating divert_blk for eth0
Jun 25 06:33:22 the-server kernel: eth0: forcedeth.c: subsystem: 01458:e000 bound to 0000:00:0a.0
Jun 25 06:33:22 the-server kernel: eth0: no link during initialization.
Jun 25 06:33:24 the-server kernel: eth0: link up.
Jun 25 06:33:26 the-server network: Bringing up interface eth0:  succeeded
Jun 25 06:33:26 the-server network: 
Jun 25 06:33:26 the-server network:
Jun 25 06:33:26 the-server network: Bringing up interface eth1:  
Jun 25 06:33:26 the-server kernel: 8139too Fast Ethernet driver 0.9.27
Jun 25 06:33:26 the-server kernel: ACPI: PCI interrupt 0000:01:07.0[A] -> GSI 5 (level, low) -> IRQ 5
Jun 25 06:33:26 the-server kernel: divert: allocating divert_blk for eth1
Jun 25 06:33:26 the-server kernel: eth1: RealTek RTL8139 at 0x9000, 00:08:54:2d:37:6a, IRQ 5
Jun 25 06:33:26 the-server kernel: eth1:  Identified 8139 chip type 'RTL-8100B/8139D'
Jun 25 06:33:26 the-server kernel: eth1: link up, 100Mbps, full-duplex, lpa 0x41E1
Jun 25 06:33:30 the-server network: Bringing up interface eth1:  succeeded
Jun 25 06:33:30 the-server network: 
Jun 25 06:33:30 the-server network:
Jun 25 06:33:30 the-server rc.e-smith: Starting network:  succeeded


PPTP Starts ........


Jun 25 06:33:45 the-server pptpd: Starting pptpd:
Jun 25 06:33:45 the-server pptpd: Starting pptpd succeeded
Jun 25 06:33:46 the-server pptpd[3230]: MGR: Max connections reached, extra IP addresses ignored
Jun 25 06:33:46 the-server pptpd: 
Jun 25 06:33:46 the-server pptpd[3230]: MGR: Manager process started
Jun 25 06:33:46 the-server pptpd:
Jun 25 06:33:46 the-server pptpd[3230]: MGR: Maximum of 100 connections available
Jun 25 06:33:46 the-server rc.e-smith: Starting pptpd:  succeeded
Jun 25 06:33:46 the-server radiusd: Starting radiusd:
Jun 25 06:33:46 the-server radiusd: Starting radiusd succeeded
Jun 25 06:33:47 the-server radiusd:
Jun 25 06:33:47 the-server rc.e-smith: Starting radiusd:  succeeded

Logon tries ................

Jun 25 06:43:06 the-server pptpd[3589]: CTRL: Client xxx.xxx.xxx control connectio
n started
Jun 25 06:43:06 the-server pptpd[3589]: CTRL: Starting call (launching pppd, opening
 GRE)
Jun 25 06:43:06 the-server pppd[3590]: Plugin radius.so loaded.
Jun 25 06:43:06 the-server pppd[3590]: RADIUS plugin initialized.
Jun 25 06:43:06 the-server kernel: CSLIP: code copyright 1989 Regents of the University of California
Jun 25 06:43:06 the-server kernel: PPP generic driver version 2.4.2
Jun 25 06:43:06 the-server pppd[3590]: pppd 2.4.3 started by root, uid 0
Jun 25 06:43:06 the-server kernel: divert: not allocating divert_blk for non-etherne
t device ppp0
Jun 25 06:43:06 the-server pppd[3590]: Using interface ppp0
Jun 25 06:43:06 the-server pppd[3590]: Connect: ppp0 <--> /dev/pts/1
Jun 25 06:43:06 the-server pptpd[3589]: CTRL: Ignored a SET LINK INFO packet with re
al ACCMs!
Jun 25 06:43:06 the-server pppd[3590]: MPPE required, but kernel has no support.
Jun 25 06:43:06 the-server pppd[3590]: Connection terminated.
Jun 25 06:43:06 the-server pppd[3590]: Connect time 0.0 minutes.
Jun 25 06:43:06 the-server pppd[3590]: Sent 0 bytes, received 0 bytes.
Jun 25 06:43:06 the-server kernel: divert: no divert_blk to free, ppp0 not ethernet
Jun 25 06:43:06 the-server pptpd[3589]: CTRL: Reaping child PPP[3590]
Jun 25 06:43:06 the-server pppd[3590]: Exit.
Jun 25 06:43:06 the-server pptpd[3589]: CTRL: Client xxx.xxx.xxx control connectio
n finished
Jun 25 06:43:40 the-server pptpd[3640]: CTRL: Client xxx.xxx.xxx control connectio
n started
Jun 25 06:43:40 the-server pptpd[3640]: CTRL: Starting call (launching pppd, opening
 GRE)
Jun 25 06:43:40 the-server pppd[3641]: Plugin radius.so loaded.
Jun 25 06:43:40 the-server pppd[3641]: RADIUS plugin initialized.
Jun 25 06:43:40 the-server pppd[3641]: pppd 2.4.3 started by root, uid 0
Jun 25 06:43:40 the-server kernel: divert: not allocating divert_blk for non-etherne
t device ppp0
Jun 25 06:43:40 the-server pppd[3641]: Using interface ppp0
Jun 25 06:43:40 the-server pppd[3641]: Connect: ppp0 <--> /dev/pts/1
Jun 25 06:43:40 the-server pptpd[3640]: CTRL: Ignored a SET LINK INFO packet with re
al ACCMs!
Jun 25 06:43:40 the-server pppd[3641]: MPPE required, but kernel has no support.
Jun 25 06:43:40 the-server pppd[3641]: Connection terminated.
Jun 25 06:43:40 the-server pppd[3641]: Connect time 0.0 minutes.
Jun 25 06:43:40 the-server pppd[3641]: Sent 0 bytes, received 10 bytes.
Jun 25 06:43:40 the-server kernel: divert: no divert_blk to free, ppp0 not ethernet
Jun 25 06:43:40 the-server pptpd[3640]: CTRL: Reaping child PPP[3641]
Jun 25 06:43:40 the-server pppd[3641]: Exit.
Jun 25 06:43:40 the-server pptpd[3640]: CTRL: Client xxx.xxx.xxx control connectio
n finished
Jun 25 06:44:00 the-server pptpd[3676]: CTRL: Client xxx.xxx.xxx control connectio
n started
Jun 25 06:44:00 the-server pptpd[3676]: CTRL: Starting call (launching pppd, opening
 GRE)
Jun 25 06:44:00 the-server pppd[3677]: Plugin radius.so loaded.
Jun 25 06:44:00 the-server pppd[3677]: RADIUS plugin initialized.
Jun 25 06:44:00 the-server pppd[3677]: pppd 2.4.3 started by root, uid 0
Jun 25 06:44:00 the-server kernel: divert: not allocating divert_blk for non-etherne
t device ppp0
Jun 25 06:44:00 the-server pppd[3677]: Using interface ppp0
Jun 25 06:44:00 the-server pppd[3677]: Connect: ppp0 <--> /dev/pts/1
Jun 25 06:44:03 the-server pptpd[3676]: CTRL: Ignored a SET LINK INFO packet with re
al ACCMs!
Jun 25 06:44:03 the-server pppd[3677]: MPPE required, but kernel has no support.
Jun 25 06:44:03 the-server pppd[3677]: Connection terminated.
Jun 25 06:44:03 the-server pppd[3677]: Connect time 0.1 minutes.
Jun 25 06:44:03 the-server pppd[3677]: Sent 0 bytes, received 0 bytes.
Jun 25 06:44:03 the-server kernel: divert: no divert_blk to free, ppp0 not ethernet
Jun 25 06:44:03 the-server pppd[3677]: Exit.
Jun 25 06:44:03 the-server pptpd[3676]: GRE: read(fd=6,buffer=804d5a0,len=8196) from
 PTY failed: status = -1 error = Input/output error, usually caused by unexpecte
d termination of pppd, check option syntax and pppd logs
Jun 25 06:44:03 the-server pptpd[3676]: CTRL: PTY read or GRE write failed (pty,gre)
=(6,7)
Jun 25 06:44:03 the-server pptpd[3676]: CTRL: Reaping child PPP[3677]
Jun 25 06:44:03 the-server pptpd[3676]: CTRL: Client xxx.xxx.xxx control connectio
n finished

Looks like the same issue. I have submitted a posting to contribs bugzilla
http://bugs.contribs.org/query.cgi
bug 1637
Perhaps one of the bug guys can help

Offline billi

  • *
  • 46
  • +0/-0
    • http://applitec.net
VPN server problems
« Reply #4 on: June 25, 2006, 03:49:07 PM »
Back again

This is what the bug guys say
------- Comment #4 From Garth 2006-06-25 03:48 [reply] -------
This appears to be a replica of bugs 1561/1455/740

I look at them and 1455 comment 8 to 11 seem to be the essence.
Tried  the suggestion and the PPTP conections works again.
Had to go to the console however to select the right boot.

KBE

VPN server problems
« Reply #5 on: June 25, 2006, 09:26:08 PM »
i am looking at this live through putty running "tail -f messages" in the var/log dir....

I am not sure what these other boots do and are for, has that ever been devulged?  I am concerned that one boot does not work while another does.  It would be helpful know what the differences are in the differnt selections.  I dont mind doing it i just dont like blindly doing it...

:)