Getting MPPE into my Linux Kernel. - PPP

This is a discussion on Getting MPPE into my Linux Kernel. - PPP ; I have been trying this for ages. I now have linux kernel version 2.4.22 with patch linux-2.4.22-mppe-mppc-0.98.patch. All goes OK. The MPPE stuff is compiled into the kernel. I also have ppp version 2.4.2 which is patched with ppp-2.4.2-stdopt-mppe-mppc-0.82.patch However ...

+ Reply to Thread
Results 1 to 4 of 4

Thread: Getting MPPE into my Linux Kernel.

  1. Getting MPPE into my Linux Kernel.

    I have been trying this for ages.
    I now have linux kernel version 2.4.22 with patch
    linux-2.4.22-mppe-mppc-0.98.patch. All goes OK. The MPPE stuff is
    compiled into the kernel.

    I also have ppp version 2.4.2 which is patched with
    ppp-2.4.2-stdopt-mppe-mppc-0.82.patch

    However I still get the annoying "MPPE required, but kernel has no
    support" in my /var/log/messages.

    What can I be doing wrong?

    My var/log/messages is below.

    Sep 15 21:40:31 localhost pppd[5688]: pppd 2.4.2b3 started by root, uid 0
    Sep 15 21:13:27 localhost modprobe: modprobe: Can't locate module nls_iso8859-1
    Sep 15 21:40:31 localhost pppd[5688]: pppd 2.4.2b3 started by root, uid 0
    Sep 15 21:40:32 localhost kernel: PCI: Found IRQ 10 for device 00:0b.0
    Sep 15 21:40:32 localhost kernel: HCF ASIC ID: 210
    Sep 15 21:40:32 localhost kernel: HCF DATAPUMP PART: '71' REV: 'BA'
    Sep 15 21:40:34 localhost chat[5729]: abort on (NO CARRIER)
    Sep 15 21:40:34 localhost chat[5729]: abort on (NO DIALTONE)
    Sep 15 21:40:34 localhost chat[5729]: abort on (ERROR)
    Sep 15 21:40:34 localhost chat[5729]: abort on (NO ANSWER)
    Sep 15 21:40:34 localhost chat[5729]: abort on (BUSY)
    Sep 15 21:40:34 localhost chat[5729]: report (CONNECT)
    Sep 15 21:40:34 localhost chat[5729]: send (AT&F^M)
    Sep 15 21:40:34 localhost chat[5729]: expect (OK)
    Sep 15 21:40:34 localhost chat[5729]: AT&F^M^M
    Sep 15 21:40:34 localhost chat[5729]: OK
    Sep 15 21:40:34 localhost chat[5729]: -- got it
    Sep 15 21:40:34 localhost chat[5729]: send (ATS0=2DT1470PHONENUMBER^M)
    Sep 15 21:40:35 localhost chat[5729]: expect (CONNECT)
    Sep 15 21:40:35 localhost chat[5729]: ^M
    Sep 15 21:41:08 localhost chat[5729]: ATS0=2DT1470PHONENUMBER^M^M
    Sep 15 21:41:08 localhost chat[5729]: CONNECT
    Sep 15 21:41:08 localhost chat[5729]: -- got it
    Sep 15 21:41:08 localhost chat[5729]: send (CLIENT^M)
    Sep 15 21:41:08 localhost pppd[5688]: Serial connection established.
    Sep 15 21:41:08 localhost pppd[5688]: Serial connection established.
    Sep 15 21:41:08 localhost pppd[5688]: using channel 1
    Sep 15 21:41:08 localhost pppd[5688]: Using interface ppp0
    Sep 15 21:41:08 localhost pppd[5688]: Using interface ppp0
    Sep 15 21:41:08 localhost pppd[5688]: Connect: ppp0 <--> /dev/modem
    Sep 15 21:41:08 localhost pppd[5688]: Connect: ppp0 <--> /dev/modem
    Sep 15 21:41:09 localhost pppd[5688]: sent [LCP ConfReq id=0x1 ]
    Sep 15 21:41:09 localhost pppd[5688]: rcvd [LCP ConfReq id=0x0 < 17 04 00 52>]
    Sep 15 21:41:09 localhost pppd[5688]: sent [LCP ConfRej id=0x0 < 17 04 00 52>]
    Sep 15 21:41:09 localhost pppd[5688]: rcvd [LCP ConfAck id=0x1 ]
    Sep 15 21:41:10 localhost pppd[5688]: rcvd [LCP ConfReq id=0x1 ]
    Sep 15 21:41:10 localhost pppd[5688]: sent [LCP ConfAck id=0x1 ]
    Sep 15 21:41:10 localhost pppd[5688]: rcvd [CHAP Challenge id=0x0 <79a4af193624267b097985bf467ba5d2>, name = "ELD-RAS"]
    Sep 15 21:41:10 localhost pppd[5688]: sent [CHAP Response id=0x0 <3926f5bdae1afbb99de05473d170a6a400000000000000001d 16c6a104d48ffdbd5ea323dda771c877a045cfc387dbf300>, name = "my.username"]
    Sep 15 21:41:10 localhost pppd[5688]: rcvd [CHAP Success id=0x0 "S=ADE8EF006785EA8C32FBD719F14783B5879302EE"]
    Sep 15 21:41:10 localhost pppd[5688]: MPPE required, but kernel has no support.
    Sep 15 21:41:10 localhost pppd[5688]: MPPE required, but kernel has no support.
    Sep 15 21:41:10 localhost pppd[5688]: sent [LCP TermReq id=0x2 "MPPE required but not available"]
    Sep 15 21:41:10 localhost pppd[5688]: rcvd [CCP ConfReq id=0x3 ]
    Sep 15 21:41:10 localhost pppd[5688]: Discarded non-LCP packet when LCP not open
    Sep 15 21:41:10 localhost pppd[5688]: rcvd [IPCP ConfReq id=0x4 ]
    Sep 15 21:41:10 localhost pppd[5688]: Discarded non-LCP packet when LCP not open
    Sep 15 21:41:10 localhost pppd[5688]: rcvd [LCP TermAck id=0x2 "MPPE required but not available"]
    Sep 15 21:41:10 localhost pppd[5688]: Connection terminated.
    Sep 15 21:41:10 localhost pppd[5688]: Connection terminated.
    Sep 15 21:41:11 localhost pppd[5688]: Hangup (SIGHUP)
    Sep 15 21:41:11 localhost pppd[5688]: Hangup (SIGHUP)
    Sep 15 21:41:11 localhost pppd[5688]: Exit.
    Sep 15 21:41:11 localhost pppd[5688]: Exit.

    For info, I am trying to connect to a W98 server over dialup.

    Any help appreciated.

    --
    Nick Thomas

  2. Re: Getting MPPE into my Linux Kernel.

    On Tue, 16 Sep 2003 22:24:00 +0100, "Nick" wrote:
    [.....]
    > However I still get the annoying "MPPE required, but kernel has no
    > support" in my /var/log/messages.
    >
    > What can I be doing wrong?

    1. Make sure that you really have MPPE compiled into the kernel - after
    reboot just do dmesg|grep ^MPPE. You should see:
    MPPE/MPPC encryption/compression module registered

    If MPPE is compiled as module, you have to add
    alias ppp-compress-18 ppp_mppe_mppc to /etc/modules.conf and do depmod -a

    2. Make sure that you call proper pppd version (i.e. with appropriate
    patch applied) if you have few versions on your system.

    If you need only MPPE, I suggest using MPPE module distributed
    with pppd-2.4.2 sources.


    Regards,
    /J.D.
    --
    Jan Dubiec, jdx@slackware.pl, mobile: +48 602 101787

    Głęboka wiara wymaga płytkiego rozumu i nikłej wiedzy.

  3. Re: Getting MPPE into my Linux Kernel.

    No, I'm sure you've just got different versions of the patches.

    I got the same error you did.

    lsmod revealed that the ppp_mppe kernel module had been loaded.
    grep for "MPPE" in the strings of pppd showed about 47 hits.

    Looked to me like the kernel and pppd both had mppe support.

    However, they didn't have the same support, as it turned out, and
    wouldn't talk to each other.

    Somewhere in the docs of my pppd source I found that the mppe kernel
    module should show the phrase "BSD without advertisement clause". It
    didn't. Hmmm.

    I had gotten the kernel patch from www.planetmirror.com/pub/mppe, and
    pppd from the source, the samba site, www.samba.org/ppp. It was 2.4.2b3.

    Turns out, the pppd from samba is supposed to have a linux kernel patch
    directory in it. The 2.4.2b3 tarball does not. However, if you grab one
    of the cvs tarballs from another site, or follow the instructions on the
    site and get your own cvs checkout, you'll get a current copy (bleeding
    edge) of pppd, WITH the kernel patches.

    That kernel and that pppd DO talk to each other, MPPE-wise.

    The set from planetmirror I assume would also talk together, except that
    last I looked I would have had to downgrade to pppd 2.4.1, and possibly
    apply a mschap v2 patch.

    But, was that successfull? NO! I got the MPPE feature working, both
    sides all happily negotiated, but for some reason the crypto is out of
    step. Nothing but garbage spewed out at 31200 baud. Both sides happily
    spewing garbage at each other until I got tired of watching the debug logs.

    But, there is a happy ending.

    The good folks installed a cisco 2511 this week. I am now happily saying
    bye bye to the RAZ connection attempt. Finally, after 2 months, I can
    connect, but only through the cisco, not through the *#$%$*$* ding-dong
    microsoft box. Burn baby Burn!!!

    I suggest you pressure your good folks too. There are alternatives to
    microsoft you know.

    -rob
    rjanes@primustel.ca

    In article <87llsokpg2.fsf@hs001.slackware.pl>, "Jan Dubiec"
    wrote:

    > On Tue, 16 Sep 2003 22:24:00 +0100, "Nick" wrote:
    > [.....]
    >> However I still get the annoying "MPPE required, but kernel has no
    >> support" in my /var/log/messages.
    >>
    >> What can I be doing wrong?

    > 1. Make sure that you really have MPPE compiled into the kernel - after
    > reboot just do dmesg|grep ^MPPE. You should see: MPPE/MPPC
    > encryption/compression module registered
    >
    > If MPPE is compiled as module, you have to add alias ppp-compress-18
    > ppp_mppe_mppc to /etc/modules.conf and do depmod -a
    >
    > 2. Make sure that you call proper pppd version (i.e. with appropriate
    > patch applied) if you have few versions on your system.
    >
    > If you need only MPPE, I suggest using MPPE module distributed with
    > pppd-2.4.2 sources.
    >
    >
    > Regards,
    > /J.D.


  4. Re: Getting MPPE into my Linux Kernel.

    On Fri, 19 Sep 2003 10:51:53 -0400, "Rob Janes" wrote:
    > No, I'm sure you've just got different versions of the patches.
    >
    > I got the same error you did.

    I don't have any errors. :-) I suppose you address your response to Nick.
    I just responded to Nick's post because I had noticed that he uses my
    patches.

    [.....]
    > I had gotten the kernel patch from www.planetmirror.com/pub/mppe, and
    > pppd from the source, the samba site, www.samba.org/ppp. It was 2.4.2b3.

    The patches from Planetmirror are outdated and have few bugs. More, their
    pppd patch is only for ver. 2.4.1. Your problem was that you had mixed
    kernel patch from Planetmirror (sometimes called OpenSSL based patch)
    with pppd-2.4.2. They aren't compatible.

    There are two current patch sets on the Net:
    - the one included in CVS version of pppd-2.4.2 (supports only MPPE),
    - mine from http://free.polbox.pl/h/hs001 (MPPE+MPPC).

    Both work quite well. Although my patch shouldn't be used in some
    countries due to MPPC patent problem.

    [.....]
    > site and get your own cvs checkout, you'll get a current copy (bleeding
    > edge) of pppd, WITH the kernel patches.

    Not so bleeding. Pppd CVS haven't been updated for over a month. ;-)

    [.....]
    > I suggest you pressure your good folks too. There are alternatives to
    > microsoft you know.

    Oh yes.

    Regards,
    /J.D.
    --
    Jan Dubiec, jdx@slackware.pl, mobile: +48 602 101787

    Głęboka wiara wymaga płytkiego rozumu i nikłej wiedzy.

+ Reply to Thread