VPN Access denied CHAP authentication failed

Question

Level 1

9 points

VPN Access denied CHAP authentication failed

I have xServe with 10.3.9
All users have shadow passwords.
Every time i want to connet to the server with VPN i get this message:

Thu Jan 11 19:56:24 2007 : PPTP connection established.
Thu Jan 11 19:56:24 2007 : Using interface ppp0
Thu Jan 11 19:56:24 2007 : Connect: ppp0 <--> socket[34:17]
Thu Jan 11 19:56:24 2007 : Remote message: Access denied.
Thu Jan 11 19:56:24 2007 : CHAP authentication failed
Thu Jan 11 19:56:24 2007 : Connection terminated.
Thu Jan 11 19:56:24 2007 : PPTP disconnecting...
Thu Jan 11 19:56:24 2007 : PPTP disconnected

I can use any kind of account. Same when i use the administration account.
What do i wrong ??

Thank you for your help

G5, Mac OS X (10.3.9)

Posted on Jan 11, 2007 11:02 AM

Reply

Answer 1

David_x

Level 4

3,011 points

Jan 12, 2007 1:21 PM in response to MacDaniel

Any vpn access restrictions set in Server Admin (Settings: Access) ?

-david

Reply

Answer 2

MacDaniel Author

Level 1

9 points

Jan 14, 2007 4:35 AM in response to David_x

Any vpn access restrictions set in Server Admin
(Settings: Access) ?

-david

No restrictions in the settings (no Group, nothing??(

Daniel

Reply

Answer 3

David_x

Level 4

3,011 points

Jan 14, 2007 5:43 AM in response to MacDaniel

Just noticed you were on 10.3. I had the following noted down for an old issue with 10.3 PPTP. Might be applicable (or might not)...

Open Internet Connect.
Click VPN (PPTP).
From the Configuration pop-up menu, choose Edit Configuration.
From the Encryption pop-up menu, choose None.

-david

Message was edited by: David_x
Link found: http://docs.info.apple.com/article.html?artnum=107706

Reply

Answer 4

David_x

Level 4

3,011 points

Jan 14, 2007 6:02 AM in response to MacDaniel

I think 10.3 also needed 'Advanced' password types (rather than shadow). Can you change these in Workgroup Manager (under Advanced tab-> Password Type) ?

-david

Reply

Answer 5

Jan 16, 2007 3:58 PM in response to David_x

I have a similar problem:
OS X Server 10.3.9 running on a G3; clients running OS X 10.4.8.
I used Server Admin to set up the server with L2TP and set the shared secret[1]; I used Internet Connect to try to get a client to connect to the server. The result is always the same: The client says "Authentication Failed" and the server's logs record the conversation (Here's the relevant part):

...Tue Jan 16 15:55:08 2007 : sent [CHAP Challenge id=0x1 <c9af9d6375c13e5657d49c44c6ab8259>, name = "inside"]
Tue Jan 16 15:55:08 2007 : rcvd [LCP EchoReq id=0x0 magic=0x9101c22f]
Tue Jan 16 15:55:08 2007 : sent [LCP EchoRep id=0x0 magic=0xf01aa2]
Tue Jan 16 15:55:08 2007 : rcvd [LCP EchoRep id=0x0 magic=0x9101c22f]
Tue Jan 16 15:55:08 2007 : rcvd [CHAP Response id=0x1 <f27c5a611e1e9cf68c17d04d37448b6d00000000000000000f035bba35b5a714589e7292c1fba0 78d57fb3640b62a08e00>, name = "timberwoof"]
Tue Jan 16 15:55:08 2007 : sent [CHAP Failure id=0x1 "E=691 R=1 C=C9AF9D6375C13E5657D49C44C6AB8259 V=0 M=Access denied."]
Tue Jan 16 15:55:08 2007 : CHAP peer authentication failed for remote host timberwoof
Tue Jan 16 15:55:08 2007 : sent [LCP TermReq id=0x2 "Authentication failed"]
Tue Jan 16 15:55:08 2007 : rcvd [LCP TermReq id=0x2 "Failed to authenticate ourselves to peer"]
...

The user 'timberwoof' exists on the server. I tried changing password type to Advanced, but there's a catch-22 situtation: no user is set up with Advanced password, and it can only be changed to that by a user using Advanced password.

[1] Has anyone else noticed that the dialog box for setting this in Server Admin 10.4.7 is broken? It always forgets the shared secret and then complains that none has been entered.

Reply