pptpd and radius

View: New views
4 Messages — Rating Filter:   Alert me  

pptpd and radius

by Stephen Carville-6 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

I am brand new to poptop and I am having devil of a time getting it to
talk to radius.  However before even getting into those problems, I
better ask if it is even possible to authenticate pptpd with radius
using the /etc/shadow password file.

--
Stephen Carville

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Poptop-server mailing list
Poptop-server@...
https://lists.sourceforge.net/lists/listinfo/poptop-server

Re: pptpd and radius

by Charlie Brady-13 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message


On Thu, 12 Nov 2009, Stephen Carville wrote:

> I am brand new to poptop and I am having devil of a time getting it to
> talk to radius.

pptp doesn't authenticate. pppd is what authenticates - you configure pppd
to use the radius plugin.

---
Charlie


------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Poptop-server mailing list
Poptop-server@...
https://lists.sourceforge.net/lists/listinfo/poptop-server

Re: pptpd and radius

by Nick Owen-3 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

On Thu, Nov 12, 2009 at 2:43 PM, Stephen Carville
<stephen.carville@...> wrote:
> I am brand new to poptop and I am having devil of a time getting it to
> talk to radius.  However before even getting into those problems, I
> better ask if it is even possible to authenticate pptpd with radius
> using the /etc/shadow password file.
>

It is possible to get it to talk radius I did a tutorial on this some time ago:

http://www.howtoforge.net/security-issues-and-poptop-pptp

It is mostly about adding two-factor authentication/one-time passwords
to PPTP vpns, but should help.

I'm not sure about requiring an account on the server, unless you run
the radius through PAM and require both a system account and a radius
authentication.

HTH,

nick

--
--
Nick Owen
WiKID Systems, Inc.
404.962.8983
http://www.wikidsystems.com
Commercial/Open Source Two-Factor Authentication

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Poptop-server mailing list
Poptop-server@...
https://lists.sourceforge.net/lists/listinfo/poptop-server

Re: pptpd and radius

by Adam Robertson-3 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Our poptop uses MS Chap authentication, there should be a plug in for Radius.
Adam


On Mon, Nov 16, 2009 at 6:16 AM, Nick Owen <owen.nick@...> wrote:
On Thu, Nov 12, 2009 at 2:43 PM, Stephen Carville
<stephen.carville@...> wrote:
> I am brand new to poptop and I am having devil of a time getting it to
> talk to radius.  However before even getting into those problems, I
> better ask if it is even possible to authenticate pptpd with radius
> using the /etc/shadow password file.
>

It is possible to get it to talk radius I did a tutorial on this some time ago:

http://www.howtoforge.net/security-issues-and-poptop-pptp

It is mostly about adding two-factor authentication/one-time passwords
to PPTP vpns, but should help.

I'm not sure about requiring an account on the server, unless you run
the radius through PAM and require both a system account and a radius
authentication.

HTH,

nick

--
--
Nick Owen
WiKID Systems, Inc.
404.962.8983
http://www.wikidsystems.com
Commercial/Open Source Two-Factor Authentication

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Poptop-server mailing list
Poptop-server@...
https://lists.sourceforge.net/lists/listinfo/poptop-server


------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Poptop-server mailing list
Poptop-server@...
https://lists.sourceforge.net/lists/listinfo/poptop-server