Topic: PPTP can't get a connection

[Erik Fleischer]

Hi all, I have set up pptp and when I try to connect to my SME server from a win2k machine, I get an error 619.... MS not being very informative about what the problem was I turned to the SME log files,  and there is a lot of information, but unfortunately I'm not capable of interpret them, can anyone help?

Here is the snippet from the log:

Jun  7 21:59:17 siemens pptpd[2846]: MGR: Launching /usr/sbin/pptpctrl to handle client
Jun  7 21:59:17 siemens pptpd[2846]: CTRL: local address = 192.168.233.1
Jun  7 21:59:17 siemens pptpd[2846]: CTRL: remote address = 192.168.233.249
Jun  7 21:59:17 siemens pptpd[2846]: CTRL: pppd speed = 460800
Jun  7 21:59:17 siemens pptpd[2846]: CTRL: pppd options file = /etc/ppp/options.pptpd
Jun  7 21:59:17 siemens pptpd[2846]: CTRL: Client 212.242.54.104 control connection started
Jun  7 21:59:17 siemens pptpd[2846]: CTRL: Received PPTP Control Message (type: 1)
Jun  7 21:59:17 siemens pptpd[2846]: CTRL: Made a START CTRL CONN RPLY packet
Jun  7 21:59:17 siemens pptpd[2846]: CTRL: I wrote 156 bytes to the client.
Jun  7 21:59:17 siemens pptpd[2846]: CTRL: Sent packet to client
Jun  7 21:59:17 siemens pptpd[2846]: CTRL: Received PPTP Control Message (type: 7)
Jun  7 21:59:17 siemens pptpd[2846]: CTRL: 0 min_bps, 1525 max_bps, 32 window size
Jun  7 21:59:17 siemens pptpd[2846]: CTRL: Made a OUT CALL RPLY packet
Jun  7 21:59:17 siemens pptpd[2846]: CTRL: Starting call (launching pppd, opening GRE)
Jun  7 21:59:17 siemens pptpd[2846]: CTRL: pty_fd = 5
Jun  7 21:59:17 siemens pptpd[2846]: CTRL: tty_fd = 6
Jun  7 21:59:17 siemens pptpd[2846]: CTRL: I wrote 32 bytes to the client.
Jun  7 21:59:17 siemens pptpd[2846]: CTRL: Sent packet to client
Jun  7 21:59:17 siemens pptpd[2847]: CTRL (PPPD Launcher): Connection speed = 460800
Jun  7 21:59:17 siemens pptpd[2847]: CTRL (PPPD Launcher): local address = 192.168.233.1
Jun  7 21:59:17 siemens pptpd[2847]: CTRL (PPPD Launcher): remote address = 192.168.233.249
Jun  7 21:59:17 siemens pptpd[2846]: CTRL: Received PPTP Control Message (type: 15)
Jun  7 21:59:17 siemens pptpd[2846]: CTRL: Got a SET LINK INFO packet with standard ACCMs
Jun  7 21:59:18 siemens modprobe: modprobe: Can't locate module char-major-108
Jun  7 21:59:19 siemens kernel: CSLIP: code copyright 1989 Regents of the University of California
Jun  7 21:59:19 siemens kernel: PPP: version 2.3.7 (demand dialling)
Jun  7 21:59:19 siemens kernel: PPP line discipline registered.
Jun  7 21:59:19 siemens kernel: registered device ppp0
Jun  7 21:59:19 siemens pppd[2847]: pppd 2.4.0 started by root, uid 0
Jun  7 21:59:19 siemens pppd[2847]: Using interface ppp0
Jun  7 21:59:19 siemens pppd[2847]: Connect: ppp0 <--> /dev/pts/2
Jun  7 21:59:49 siemens pppd[2847]: LCP: timeout sending Config-Requests
Jun  7 21:59:49 siemens pppd[2847]: Connection terminated.
Jun  7 21:59:49 siemens pppd[2847]: Exit.
Jun  7 21:59:49 siemens pptpd[2846]: Error reading from pppd: Input/output error
Jun  7 21:59:49 siemens pptpd[2846]: CTRL: GRE read or PTY write failed (gre,pty)=(6,5)
Jun  7 21:59:49 siemens pptpd[2846]: CTRL: Client 212.242.54.104 control connection finished
Jun  7 21:59:49 siemens pptpd[2846]: CTRL: Exiting now
Jun  7 21:59:49 siemens pptpd[1453]: MGR: Reaped child 2846

[Dan G.]

Have you installed SP2 on your w2k machine?

[Erik Fleischer]

I don't know for sure, it is not my win2k machine, but I presume it is installed. Why, do we have a know bug here or what?

[robert]

Erik Fleischer wrote:
>
> I don't know for sure, it is not my win2k machine, but I
> presume it is installed. Why, do we have a know bug here or
> what?

You need 128-bit encryption. It's not a bug, it's a feature (really)

[Dan G.]

http://www.e-smith.org/docs/manual/5.1/admin-remoteaccess.html#pptp

The User Guide is your friend.  Scroll down to the big, red "stop sign" icon labeled "WARNING."

[Erik Fleischer]

Well, now I have made certain that the machine has 128 bit encryption, and it still dosn't work.  As you may have read my log, in my first posting, I'm CAN attempt to log in, but then in line 4 from the bottom in the log file it says:
 
pptpd[2846]: CTRL: GRE read or PTY write failed (gre,pty)=(6,5)

and the thing is; I _can_ make a port natting on port 1723 but there is nowhere in the router (apparently) where I do anything on protocol 43 (or what number it is).

Is there a way for me to check if my router can route GRE protocols? I'm using a Tecom Hermes router.

[Andy MacDonald]

The GRE failure previously has indicated that a firewall somewhere has not allowed the packets. It happens to me trying through cisco's corporate firewall from a friends place.
Any firewalls between you and your box?

[Erik Fleischer]

Well, yes.... There is a packet filtering in my router, and I know how to open for port 1723, but not how to open for protocol 42.