[MASOCH-L] Forçar autenticação PAP

[Hamilton Vera]

Sim senhor, inclusive tive que modificar o /etc/ppp/pap-secrets, porém
quando utilizo o +pap o provedor recusa "peer refused to authenticate:
terminating link":


Jan  1 01:21:41 g100 pppd[3716]: Connect: ppp0 <--> /dev/ttyUSB0
Jan  1 01:21:42 g100 pppd[3716]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth pap> <magic 0x2a15fe3c> <pcomp> <accomp>]
Jan  1 01:21:42 g100 pppd[3716]: rcvd [LCP ConfReq id=0x20 <asyncmap 0x0>
<auth chap MD5> <magic 0x9ec980f1> <pcomp> <accomp>]
Jan  1 01:21:42 g100 pppd[3716]: sent [LCP ConfNak id=0x20 <auth eap>]
Jan  1 01:21:42 g100 pppd[3716]: rcvd [LCP ConfRej id=0x1 <auth pap>]
Jan  1 01:21:42 g100 pppd[3716]: sent [LCP ConfReq id=0x2 <asyncmap 0x0>
<magic 0x2a15fe3c> <pcomp> <accomp>]
Jan  1 01:21:42 g100 pppd[3716]: rcvd [LCP ConfReq id=0x21 <asyncmap 0x0>
<auth chap MD5> <magic 0x9ec980f1> <pcomp> <accomp>]
Jan  1 01:21:42 g100 pppd[3716]: sent [LCP ConfNak id=0x21 <auth eap>]
Jan  1 01:21:42 g100 pppd[3716]: rcvd [LCP ConfAck id=0x2 <asyncmap 0x0>
<magic 0x2a15fe3c> <pcomp> <accomp>]
Jan  1 01:21:42 g100 pppd[3716]: rcvd [LCP ConfReq id=0x22 <asyncmap 0x0>
<auth chap MD5> <magic 0x9ec980f1> <pcomp> <accomp>]
Jan  1 01:21:42 g100 pppd[3716]: sent [LCP ConfNak id=0x22 <auth eap>]
Jan  1 01:21:42 g100 pppd[3716]: rcvd [LCP ConfReq id=0x23 <asyncmap 0x0>
<auth chap MD5> <magic 0x9ec980f1> <pcomp> <accomp>]
Jan  1 01:21:42 g100 pppd[3716]: sent [LCP ConfNak id=0x23 <auth eap>]
Jan  1 01:21:42 g100 pppd[3716]: rcvd [LCP ConfReq id=0x24 <asyncmap 0x0>
<auth chap MD5> <magic 0x9ec980f1> <pcomp> <accomp>]
Jan  1 01:21:42 g100 pppd[3716]: sent [LCP ConfNak id=0x24 <auth eap>]
Jan  1 01:21:42 g100 pppd[3716]: rcvd [LCP ConfReq id=0x25 <asyncmap 0x0>
<auth chap MD5> <magic 0x9ec980f1> <pcomp> <accomp>]
Jan  1 01:21:42 g100 pppd[3716]: sent [LCP ConfRej id=0x25 <auth chap MD5>]
Jan  1 01:21:42 g100 pppd[3716]: rcvd [LCP ConfReq id=0x26 <asyncmap 0x0>
<magic 0x9ec980f1> <pcomp> <accomp>]
Jan  1 01:21:42 g100 pppd[3716]: sent [LCP ConfAck id=0x26 <asyncmap 0x0>
<magic 0x9ec980f1> <pcomp> <accomp>]
Jan  1 01:21:42 g100 pppd[3716]: sent [LCP EchoReq id=0x0 magic=0x2a15fe3c]
Jan  1 01:21:42 g100 pppd[3716]: peer refused to authenticate: terminating
link
Jan  1 01:21:42 g100 pppd[3716]: sent [LCP TermReq id=0x3 "peer refused to
authenticate"]
Jan  1 01:21:42 g100 pppd[3716]: rcvd [LCP DiscReq id=0x27 magic=0x9ec980f1]
Jan  1 01:21:42 g100 pppd[3716]: rcvd [LCP EchoRep id=0x0 magic=0x9ec980f1
2a 15 fe 3c]
Jan  1 01:21:42 g100 pppd[3716]: rcvd [LCP TermAck id=0x3]


Então o lógico e natural seria assumir que a autenticação não é PAP, porém
outro modem conecta sem problemas:


Connect: ppp0 <--> /dev/ttyUSB3
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xa053d16f> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x0 <asyncmap 0x0> <auth chap MD5> <magic 0xf12a90>
<pcomp> <accomp>]
sent [LCP ConfNak id=0x0 <auth chap MS-v2>]
rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0xa053d16f> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth pap> <magic 0xf12a90> <pcomp>
<accomp>]
sent [LCP ConfAck id=0x1 <asyncmap 0x0> <auth pap> <magic 0xf12a90> <pcomp>
<accomp>]
sent [LCP EchoReq id=0x0 magic=0xa053d16f]
sent [PAP AuthReq id=0x1 user="secret" password=<hidden>]
rcvd [LCP DiscReq id=0x2 magic=0xf12a90]
rcvd [LCP EchoRep id=0x0 magic=0xf12a90 a0 53 d1 6f]
rcvd [PAP AuthAck id=0x1 ""]
PAP authentication succeeded
sent [IPCP ConfReq id=0x1 <addr 0.0.0.0>]
rcvd [IPCP ConfNak id=0x1 <ms-dns1 10.11.12.13> <ms-dns2 10.11.12.14>
<ms-wins 10.11.12.13> <ms-wins 10.11.12.14>]
sent [IPCP ConfReq id=0x2 <addr 0.0.0.0> <ms-dns1 10.11.12.13> <ms-dns2
10.11.12.14> <ms-wins 10.11.12.13> <ms-wins 10.11.12.14>]
rcvd [IPCP ConfNak id=0x2 <ms-dns1 10.11.12.13> <ms-dns2 10.11.12.14>
<ms-wins 10.11.12.13> <ms-wins 10.11.12.14>]
sent [IPCP ConfReq id=0x3 <addr 0.0.0.0> <ms-dns1 10.11.12.13> <ms-dns2
10.11.12.14> <ms-wins 10.11.12.13> <ms-wins 10.11.12.14>]
rcvd [IPCP ConfNak id=0x3 <ms-dns1 10.11.12.13> <ms-dns2 10.11.12.14>
<ms-wins 10.11.12.13> <ms-wins 10.11.12.14>]
sent [IPCP ConfReq id=0x4 <addr 0.0.0.0> <ms-dns1 10.11.12.13> <ms-dns2
10.11.12.14> <ms-wins 10.11.12.13> <ms-wins 10.11.12.14>]
rcvd [IPCP ConfNak id=0x4 <ms-dns1 10.11.12.13> <ms-dns2 10.11.12.14>
<ms-wins 10.11.12.13> <ms-wins 10.11.12.14>]
sent [IPCP ConfReq id=0x5 <addr 0.0.0.0> <ms-dns1 10.11.12.13> <ms-dns2
10.11.12.14> <ms-wins 10.11.12.13> <ms-wins 10.11.12.14>]
rcvd [IPCP ConfNak id=0x5 <ms-dns1 10.11.12.13> <ms-dns2 10.11.12.14>
<ms-wins 10.11.12.13> <ms-wins 10.11.12.14>]
sent [IPCP ConfReq id=0x6 <addr 0.0.0.0> <ms-dns1 10.11.12.13> <ms-dns2
10.11.12.14> <ms-wins 10.11.12.13> <ms-wins 10.11.12.14>]
rcvd [IPCP ConfNak id=0x6 <ms-dns1 10.11.12.13> <ms-dns2 10.11.12.14>
<ms-wins 10.11.12.13> <ms-wins 10.11.12.14>]
sent [IPCP ConfReq id=0x7 <addr 0.0.0.0> <ms-dns1 10.11.12.13> <ms-dns2
10.11.12.14> <ms-wins 10.11.12.13> <ms-wins 10.11.12.14>]
rcvd [IPCP ConfReq id=0x0]
sent [IPCP ConfNak id=0x0 <addr 0.0.0.0>]
rcvd [IPCP ConfRej id=0x7 <ms-wins 10.11.12.13> <ms-wins 10.11.12.14>]
sent [IPCP ConfReq id=0x8 <addr 0.0.0.0> <ms-dns1 10.11.12.13> <ms-dns2
10.11.12.14>]
rcvd [IPCP ConfReq id=0x1]
sent [IPCP ConfAck id=0x1]
rcvd [IPCP ConfNak id=0x8 <addr 10.48.5.40> <ms-dns1 10.61.255.62> <ms-dns2
200.153.0.68>]
sent [IPCP ConfReq id=0x9 <addr 10.48.5.40> <ms-dns1 10.61.255.62> <ms-dns2
200.153.0.68>]
rcvd [IPCP ConfAck id=0x9 <addr 10.48.5.40> <ms-dns1 10.61.255.62> <ms-dns2
200.153.0.68>]
Could not determine remote IP address: defaulting to 10.64.64.64
local  IP address 10.48.5.40
remote IP address 10.64.64.64
primary   DNS address 10.61.255.62
secondary DNS address 200.153.0.68


Infelizmente ainda não consegui um contato direto com a operadora.

Muito obrigado pela ajuda Bruno, se houver outra dica ficarei extramemente
agradecido.

Obrigado.

Hamilton Vera

Em 30 de janeiro de 2012 13:01, Bruno Cabral <bruno at openline.com.br>escreveu:

>
> Tentou "+pap" ou "pap" no options.pppd ?
> !3runo Cabral--Cursos e Consultoria BGP/OSPF
>
> > Estou utilizando o modem Huawei EM 770W para utilizar os serviços de
> "VPN"
> > da vivo "zapvpn.vivo.com.br" . Pelo que percebi esse serviço utiliza a
> > autenticação PAP.
> >
> > Infelizmente o modem EM 770W por algum motivo desconhecido só tenta
> > negociar MS-CHAP. Já tentei várias opções no PPPD do linux para forçar
> > negociação PAP:
> (...)> -chap
> > refuse-chap
> > refuse-mschap
> > refuse-mschap-v2
>
> __
> masoch-l list
> https://eng.registro.br/mailman/listinfo/masoch-l
>



-- 
http://hvera.wordpress.com