On Tue, 16 Sep 2003 22:24:00 +0100, "Nick" wrote:
[.....]
> However I still get the annoying "MPPE required, but kernel has no
> support" in my /var/log/messages.
>
> What can I be doing wrong?
1. Make sure that you really have MPPE compiled into the kernel - after
reboot just do dmesg|grep ^MPPE. You should see:
MPPE/MPPC encryption/compression module registered

If MPPE is compiled as module, you have to add
alias ppp-compress-18 ppp_mppe_mppc to /etc/modules.conf and do depmod -a

2. Make sure that you call proper pppd version (i.e. with appropriate
patch applied) if you have few versions on your system.

If you need only MPPE, I suggest using MPPE module distributed
with pppd-2.4.2 sources.


Regards,
/J.D.
--
Jan Dubiec, jdx@slackware.pl, mobile: +48 602 101787

G³êboka wiara wymaga p³ytkiego rozumu i nik³ej wiedzy.

No, I'm sure you've just got different versions of the patches.

I got the same error you did.

lsmod revealed that the ppp_mppe kernel module had been loaded.
grep for "MPPE" in the strings of pppd showed about 47 hits.

Looked to me like the kernel and pppd both had mppe support.

However, they didn't have the same support, as it turned out, and
wouldn't talk to each other.

Somewhere in the docs of my pppd source I found that the mppe kernel
module should show the phrase "BSD without advertisement clause". It
didn't. Hmmm.

I had gotten the kernel patch from www.planetmirror.com/pub/mppe, and
pppd from the source, the samba site, www.samba.org/ppp. It was 2.4.2b3.

Turns out, the pppd from samba is supposed to have a linux kernel patch
directory in it. The 2.4.2b3 tarball does not. However, if you grab one
of the cvs tarballs from another site, or follow the instructions on the
site and get your own cvs checkout, you'll get a current copy (bleeding
edge) of pppd, WITH the kernel patches.

That kernel and that pppd DO talk to each other, MPPE-wise.

The set from planetmirror I assume would also talk together, except that
last I looked I would have had to downgrade to pppd 2.4.1, and possibly
apply a mschap v2 patch.

But, was that successfull? NO! I got the MPPE feature working, both
sides all happily negotiated, but for some reason the crypto is out of
step. Nothing but garbage spewed out at 31200 baud. Both sides happily
spewing garbage at each other until I got tired of watching the debug logs.

But, there is a happy ending.

The good folks installed a cisco 2511 this week. I am now happily saying
bye bye to the RAZ connection attempt. Finally, after 2 months, I can
connect, but only through the cisco, not through the *#$%$*$* ding-dong
microsoft box. Burn baby Burn!!!

I suggest you pressure your good folks too. There are alternatives to
microsoft you know.

-rob
rjanes@primustel.ca

In article <87llsokpg2.fsf@hs001.slackware.pl>, "Jan Dubiec"
wrote:

> On Tue, 16 Sep 2003 22:24:00 +0100, "Nick" wrote:
> [.....]
>> However I still get the annoying "MPPE required, but kernel has no
>> support" in my /var/log/messages.
>>
>> What can I be doing wrong?
> 1. Make sure that you really have MPPE compiled into the kernel - after
> reboot just do dmesg|grep ^MPPE. You should see: MPPE/MPPC
> encryption/compression module registered
>
> If MPPE is compiled as module, you have to add alias ppp-compress-18
> ppp_mppe_mppc to /etc/modules.conf and do depmod -a
>
> 2. Make sure that you call proper pppd version (i.e. with appropriate
> patch applied) if you have few versions on your system.
>
> If you need only MPPE, I suggest using MPPE module distributed with
> pppd-2.4.2 sources.
>
>
> Regards,
> /J.D.

On Fri, 19 Sep 2003 10:51:53 -0400, "Rob Janes" wrote:
> No, I'm sure you've just got different versions of the patches.
>
> I got the same error you did.
I don't have any errors. :-) I suppose you address your response to Nick.
I just responded to Nick's post because I had noticed that he uses my
patches.

[.....]
> I had gotten the kernel patch from www.planetmirror.com/pub/mppe, and
> pppd from the source, the samba site, www.samba.org/ppp. It was 2.4.2b3.
The patches from Planetmirror are outdated and have few bugs. More, their
pppd patch is only for ver. 2.4.1. Your problem was that you had mixed
kernel patch from Planetmirror (sometimes called OpenSSL based patch)
with pppd-2.4.2. They aren't compatible.

There are two current patch sets on the Net:
- the one included in CVS version of pppd-2.4.2 (supports only MPPE),
- mine from http://free.polbox.pl/h/hs001 (MPPE+MPPC).

Both work quite well. Although my patch shouldn't be used in some
countries due to MPPC patent problem.

[.....]
> site and get your own cvs checkout, you'll get a current copy (bleeding
> edge) of pppd, WITH the kernel patches.
Not so bleeding. Pppd CVS haven't been updated for over a month. ;-)

[.....]
> I suggest you pressure your good folks too. There are alternatives to
> microsoft you know.
Oh yes.

Regards,
/J.D.
--
Jan Dubiec, jdx@slackware.pl, mobile: +48 602 101787

G³êboka wiara wymaga p³ytkiego rozumu i nik³ej wiedzy.