Peer failed CHAP authentication on vpn

Question

Peer failed CHAP authentication on vpn

Can anyone shed any light on this issue.
When I attempt o log in to the VPN on my server certain users fail, the log shows the following
Wed Aug 2 22:15:33 2006 : Peer kristen failed CHAP authentication
Wed Aug 2 22:15:33 2006 : sent [CHAP Failure id=0xbd "\37777777677\37777777777\37777777771\37777777660"]
Wed Aug 2 22:15:33 2006 : sent [LCP TermReq id=0x2 "Authentication failed"]
Wed Aug 2 22:15:33 2006 : rcvd [LCP TermReq id=0x2 "Failed to authenticate ourselves to peer"]
Wed Aug 2 22:15:33 2006 : sent [LCP TermAck id=0x2]
Wed Aug 2 22:15:33 2006 : rcvd [LCP TermAck id=0x2]
Wed Aug 2 22:15:33 2006 : Connection terminated.
Wed Aug 2 22:15:33 2006 : PPTP disconnecting...
Wed Aug 2 22:15:33 2006 : PPTP disconnected
2006-08-02 22:15:33 EDT --> Client with address = 192.168.1.214 has hungup

Posted on Aug 2, 2006 7:50 PM

Reply

Answer 1

Aug 3, 2006 1:15 AM in response to Bradley Macdonald

What version server and what kind of password does the user(s) have OD/Advanced or Basic?

Reply

Answer 2

Aug 3, 2006 5:18 AM in response to Leif Carlsson

We experience the same prolem.

vpn works fine, then stops accepting connections. (CHAP errors)

10.4.6 server, connected to directory system.
Windows guys can't authenticate, mac users can't authenticate as well.
same error in both pptp, ans ipsec. We tried to use kerberos, but never really made it work.

Restarting VPN service does not solve the issue. It goes back to normal after system reboot though.

All users have open directory-type passwords.

Reply

Answer 3

Aug 3, 2006 6:10 PM in response to Leif Carlsson

10.4.7 and we are using OD.

Reply

Answer 4

Aug 4, 2006 2:30 AM in response to Bradley Macdonald

The login name is entered exactly as it is in WGM using short or longname?

The MPPE user (vpn_xxxxxxx) user is present in OD/LDAP?

All users are permitted to use VPN or just a group?

DirAdmin, System Admin/root can use VPN?

Reply

Answer 5

Simon2.3

Level 1

20 points

Aug 7, 2006 10:55 AM in response to Leif Carlsson

Hi There.

I have suffered the same problem today.. Maybe because its monday..

Anyway i am ruuning 10.4.7 in Standalone, so i dont think Its a directory issue.

However first time it occurred i solved it immediately by implementing an advanced firewall rule Allow "MY SERVER" 224.0.0.2 out via en0.

It worked fine for 6 hours made several connections, however now it has given up again, and the magic rule appears not to work. Looking for clues...

Mac client to mac server going thru 2 firewalls, i suspect WGM ACL.
Will be keeping an eye on this thread..........

Reply

Answer 6

Simon2.3

Level 1

20 points

Aug 7, 2006 11:08 AM in response to Simon2.3

I should add....

rule was traffic to 224.0.0.251 via 5353..

Rebooted the system. still had the problem...
Magic rule invoked long enough to get connection solved it.

I now suspect firewall..
(but then i have all of 3 months exp 🙂

Reply