Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Yosemite server VPN authentication errors

I have tried a couple of different times to set up the VPN feature on OS X Server on Yosemite and can't get it working as it always fails to authenticate. I've searched here and on the web and cannot find a solution (though I've seen a few posts where other people have run into this. Both PPTP and L2P fail. I've pasted in a typical connection failure from the log below. Help would be greatly appreciated! Thanks.


Sat Feb 21 17:27:35 2015 : rcvd [CHAP Response id=0xa0 <97078d4d2c7e31be1597d93d2d943ab2000000000000000095fed4d27bf576de1736ca4a5d0fbe ad59b0a54acc8493cb00>, name = "trippin"]

Sat Feb 21 17:27:35 2015 : DSAuth plugin: unsupported authen authority: recved ShadowHash;HASHLIST:<SALTED-SHA512,SMB-NT,CRAM-MD5,RECOVERABLE,SALTED-SHA512-PB KDF2>, want ApplePasswordServer

Sat Feb 21 17:27:35 2015 : DSAuth plugin: MPPE key required, but its retrieval failed.

Sat Feb 21 17:27:35 2015 : sent [CHAP Failure id=0xa0 "S=A790D9EECD07AE85C40D1364135A1CB9E8242A85 M=Access granted"]

Sat Feb 21 17:27:35 2015 : CHAP peer authentication failed for trippin

Sat Feb 21 17:27:35 2015 : sent [LCP TermReq id=0x2 "Authentication failed"]

Sat Feb 21 17:27:35 2015 : Connection terminated.

Posted on Feb 22, 2015 8:14 AM

Reply
Question marked as Best reply

Posted on Feb 22, 2015 5:57 PM

The "VPN MPPE Key Access User" is missing or misconfigured. Follow the instructions in this support article to recreate it.

4 replies

Aug 29, 2015 10:56 PM in response to Linc Davis

Similar errors, but the solution doesn't work. Errors:

Aug 29 22:46:08 knossos.private pppd[1880]: DSAuth plugin: unsupported authen authority: recved ShadowHash;HASHLIST:<SALTED-SHA512,SMB-NT,CRAM-MD5,RECOVERABLE,SALTED-SHA512-PB KDF2>, want ApplePasswordServer

Aug 29 22:46:08 knossos.private pppd[1880]: DSAuth plugin: MPPE key required, but its retrieval failed.

Aug 29 22:46:08 knossos.private pppd[1880]: CHAP peer authentication failed for Mark


The referenced support article refers to OSX 10.3 through 10.6.x. I'm running 10.10.5.


The article refers to /usr/sbin/vpnXXX. That file doesn't exist. It does exist in /Applications/Server.app/Contents/ServerRoot.


Running it for case (1), since the user is local to the Mac Mini, appears to succeed, but the above errors continue.


Ideas?

Yosemite server VPN authentication errors

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.