Yosemite Server 4.1, L2TP works but PPTP doesn't
I have a Yosemite 10.10.3 + Server 4.1 on the public internet, all necessary ports are open. VPN service is configured to provide both L2TP and PPTP connections.
An L2TP connection from a remote client works perfectly. Using the same user account on the same remote client, a PPTP connection fails. The failed connection log is below. I see the "MPPE key required" error, but the MPPE key user exists. I'm not sure what to make of the "unsupported authen authority" error.
I've tried deleting /Library/Preferences/SystemConfiguration/com.apple.RemoteAccessServers.plist and reconfiguring the VPN service from scratch, to no avail.
Any ideas?
| 2015-05-30 18:27:15 CDT | Incoming call... Address given to client = 10.0.77.106 |
Sat May 30 18:27:28 2015 : Directory Services Authentication plugin initialized
Sat May 30 18:27:29 2015 : Directory Services Authorization plugin initialized
Sat May 30 18:27:29 2015 : publish_entry SCDSet() failed: Success!
Sat May 30 18:27:29 2015 : publish_entry SCDSet() failed: Success!
Sat May 30 18:27:29 2015 : publish_entry SCDSet() failed: Success!
Sat May 30 18:27:29 2015 : PPTP incoming call in progress from '50.24.133.195'...
Sat May 30 18:27:29 2015 : PPTP connection established.
Sat May 30 18:27:29 2015 : using link 0
Sat May 30 18:27:29 2015 : Using interface ppp0
Sat May 30 18:27:30 2015 : Connect: ppp0 <--> socket[34:17]
Sat May 30 18:27:30 2015 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x27312944> <pcomp> <accomp>]
Sat May 30 18:27:30 2015 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x31212e0e> <pcomp> <accomp>]
Sat May 30 18:27:30 2015 : lcp_reqci: returning CONFACK.
Sat May 30 18:27:30 2015 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x31212e0e> <pcomp> <accomp>]
Sat May 30 18:27:30 2015 : rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x27312944> <pcomp> <accomp>]
Sat May 30 18:27:30 2015 : sent [LCP EchoReq id=0x0 magic=0x27312944]
Sat May 30 18:27:30 2015 : sent [CHAP Challenge id=0x41 <257946557646032c1f7f212d0e212968>, name = "kim.kairosnet.com"]
Sat May 30 18:27:30 2015 : rcvd [LCP EchoReq id=0x0 magic=0x31212e0e]
Sat May 30 18:27:30 2015 : sent [LCP EchoRep id=0x0 magic=0x27312944]
Sat May 30 18:27:30 2015 : rcvd [LCP EchoRep id=0x0 magic=0x31212e0e]
Sat May 30 18:27:30 2015 : rcvd [CHAP Response id=0x41 <79cd77ead48da081c88c3c871cb44d4200000000000000000005f3a5507569c20c8d0b59aa5f55 f7b319c8ab45e4c9a900>, name = "jon"]
Sat May 30 18:27:38 2015 : DSAuth plugin: unsupported authen authority: recved Kerberosv5;;jon@LKDC:SHA1.48C48F920285753FE8EC5A1DE8113FF79618CC46;LKDC:SHA1.48 C48F920285753FE8EC5A1DE8113FF79618CC46, want ApplePasswordServer
Sat May 30 18:27:38 2015 : DSAuth plugin: MPPE key required, but its retrieval failed.
Sat May 30 18:27:38 2015 : sent [CHAP Failure id=0x41 "S=09C2B85FEB84037B40FF6645E684A921C97628C2 M=Access granted"]
Sat May 30 18:27:38 2015 : CHAP peer authentication failed for jon
Sat May 30 18:27:38 2015 : sent [LCP TermReq id=0x2 "Authentication failed"]
Sat May 30 18:27:38 2015 : Connection terminated.
Sat May 30 18:27:39 2015 : PPTP disconnecting...
Sat May 30 18:27:39 2015 : PPTP disconnected
| 2015-05-30 18:27:39 CDT | --> Client with address = 10.0.77.106 has hungup |
Mac Pro, OS X Yosemite (10.10.3), Server 4.1