Re: Problem connecting to pptpd server

Pierre-Gildas MILLON <[email protected]> Fri, 16 May 2014 23:14:48 +0200
Newsgroups gmane.network.poptop
Message-ID <[email protected]>
This is a multi-part message in MIME format.
--===============5682164553319255175==
Content-Type: multipart/alternative;
	boundary="------------040307030708050102090308"

This is a multi-part message in MIME format.
--------------040307030708050102090308
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit

I didn't read the logs before writing my last email.
I noticed the unrecognized option '-chapms' because I added the "OpenSSL 
licensed ppp-2.4.1 fork with MPPE only" options.
I removed the options and the connection now works perfectly ! Some 
routing now remains to connect the two networks but it looks promising !

Many thanks for your time !

Pierre-Gildas MILLON

Le 16/05/2014 23:08, Pierre-Gildas MILLON a écrit :
> Hi,
>
> Following an intuition, I changed some parameters on the firewall and 
> there was a remaining masquerade parameter that was messing up the 
> whole thing.
>
> Now, the logs are a bit different :
>
> May 16 22:58:14 mercure pptpd[1417]: MGR: connections limit (100) 
> reached, extra IP addresses ignored
> May 16 22:58:14 mercure pptpd[1418]: MGR: Manager process started
> May 16 22:58:14 mercure pptpd[1418]: MGR: Maximum of 100 connections 
> available
> May 16 22:58:17 mercure pptpd[1420]: CTRL: Client 88.190.22.113 
> control connection started
> May 16 22:58:18 mercure pptpd[1420]: CTRL: Starting call (launching 
> pppd, opening GRE)
> May 16 22:58:18 mercure pppd[1421]: In file /etc/ppp/options.pptpd: 
> unrecognized option '-chapms'
> May 16 22:58:18 mercure pptpd[1420]: GRE: 
> read(fd=6,buffer=6124a0,len=8196) from PTY failed: status = -1 error = 
> Input/output error, usually caused by unexpected termination of pppd, 
> check option syntax and pppd logs
> May 16 22:58:18 mercure pptpd[1420]: CTRL: PTY read or GRE write 
> failed (pty,gre)=(6,7)
> May 16 22:58:18 mercure pptpd[1420]: CTRL: Client 88.190.22.113 
> control connection finished
>
> I'll try to dig a little on my side but if you have any clue...
>
> @Charlie: I tried to setup openvpn and experienced the same problem 
> (as explained it was a network issue and not a pptp one).
> I would prefer to setup pptp because I want to connect a remote router 
> that only manage pptp and not openvpn.
> Pierre-Gildas MILLON
> Le 16/05/2014 16:17, Charlie Brady a écrit :
>>
>>
>>
>> On Fri, May 16, 2014 at 9:47 AM, Pierre-Gildas MILLON 
>> <[email protected] <mailto:[email protected]>> wrote:
>>
>>     I updated the paste as you suggested (-f -s 200).
>>
>>
>> The connection was closed by the remote end. You'll need to diagnose 
>> the issue there.
>>
>> But before doing that you should seriously consider using openvpn (or 
>> something else) instead.
>>
>> 23256 select(5, [0 4], [], NULL, NULL)  = 1 (in [0])
>> 23256 read(0, 0xc575a0, 512)            = -1 ECONNRESET (Connection 
>> reset by peer)
>> 23256 time([1400247963])                = 1400247963
>> 23256 sendto(3, "<29>May 16 15:46:03 pptp[23256]: anon 
>> log[pptp_read_some:pptp_ctrl.c:551]: read error: Connection reset by 
>> peer", 111, MSG_NOSIGNAL, NULL, 0) = 111
>> 23256 rt_sigaction(SIGINT, {0x40a4f6, [INT], SA_RESTORER|SA_RESTART, 
>> 0x7fbea86154f0}, {0x40a4dc, [INT], SA_RESTORER|SA_RESTART, 
>> 0x7fbea86154f0}, 8) = 0
>> 23256 rt_sigaction(SIGTERM, {0x40a4f6, [TERM], 
>> SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, {0x40a4dc, [TERM], 
>> SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, 8) = 0
>> 23256 select(5, [0 4], [], NULL, {0, 0}) = 1 (in [0], left {0, 0})
>> 23256 read(0, "", 512)                  = 0
>> 23256 time([1400247963])                = 1400247963
>> 23256 sendto(3, "<29>May 16 15:46:03 pptp[23256]: anon 
>> log[pptp_read_some:pptp_ctrl.c:544]: read returned zero, peer has 
>> closed", 110, MSG_NOSIGNAL, NULL, 0) = 110
>>
>>     Pierre-Gildas MILLON
>>
>>     Le 16/05/2014 15:06, Charlie Brady a écrit :
>>>
>>>
>>>
>>>     On Fri, May 16, 2014 at 6:43 AM, Pierre-Gildas MILLON
>>>     <[email protected] <mailto:[email protected]>> wrote:
>>>
>>>         Thanks for the quick answer,
>>>
>>>         Here's the strace: http://pastebin.com/W8Bck12t
>>>
>>>         I've no idea what to look for :/
>>>
>>>
>>>     You'll need to use -f to trace child processes. And it would be
>>>     a good idea to use "-s NNN" with some NNN > 100, so that you can
>>>     read the text of log messages.
>>>
>>>
>>>
>>>         Pierre-Gildas MILLON
>>>
>>>         Le 16/05/2014 12:32, James Cameron a écrit :
>>>         > On Fri, May 16, 2014 at 12:07:26PM +0200, Pierre-Gildas
>>>         MILLON wrote:
>>>         >> anon fatal[open_callmgr:pptp.c:495]: Could not launch
>>>         call manager after
>>>         >> 3 tries.
>>>         > That will do it.
>>>         >
>>>         > Diagnose next with strace before pppd, find out what is
>>>         happening to
>>>         > prevent call manager start.
>>>         >
>>>
>>>
>>>         ------------------------------------------------------------------------------
>>>         "Accelerate Dev Cycles with Automated Cross-Browser Testing
>>>         - For FREE
>>>         Instantly run your Selenium tests across 300+ browser/OS combos.
>>>         Get unparalleled scalability from the best Selenium testing
>>>         platform available
>>>         Simple to use. Nothing to install. Get started now for free."
>>>         http://p.sf.net/sfu/SauceLabs
>>>         _______________________________________________
>>>         Poptop-server mailing list
>>>         [email protected]
>>>         <mailto:[email protected]>
>>>         https://lists.sourceforge.net/lists/listinfo/poptop-server
>>>
>>>
>>>
>>>     This e-mail (including any attachments) is for the sole use of
>>>     the intended recipient(s) and may contain information that is
>>>     confidential and/or protected by legal privilege. Any
>>>     unauthorized review, use, copy, disclosure or distribution of
>>>     this e-mail is strictly prohibited. If you are not the intended
>>>     recipient, please notify Mitel immediately and destroy all
>>>     copies of this e-mail.  Mitel does not accept any liability for
>>>     breach of security, error or virus that may result from the
>>>     transmission of this message. 
>>
>>
>>
>> This e-mail (including any attachments) is for the sole use of the 
>> intended recipient(s) and may contain information that is 
>> confidential and/or protected by legal privilege. Any unauthorized 
>> review, use, copy, disclosure or distribution of this e-mail is 
>> strictly prohibited. If you are not the intended recipient, please 
>> notify Mitel immediately and destroy all copies of this e-mail. 
>>  Mitel does not accept any liability for breach of security, error or 
>> virus that may result from the transmission of this message. 
>


--------------040307030708050102090308
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<html>
  <head>
    <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <div class="moz-cite-prefix">I didn't read the logs before writing
      my last email.<br>
      I noticed the unrecognized option '-chapms' because I added the
      "OpenSSL licensed ppp-2.4.1 fork with MPPE only" options.<br>
      I removed the options and the connection now works perfectly !
      Some routing now remains to connect the two networks but it looks
      promising !<br>
      <br>
      Many thanks for your time !<br>
      <pre class="moz-signature" cols="72">Pierre-Gildas MILLON</pre>
      Le 16/05/2014 23:08, Pierre-Gildas MILLON a écrit :<br>
    </div>
    <blockquote cite="mid:[email protected]" type="cite">
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
      <div class="moz-cite-prefix">Hi,<br>
        <br>
        Following an intuition, I changed some parameters on the
        firewall and there was a remaining masquerade parameter that was
        messing up the whole thing.<br>
        <br>
        Now, the logs are a bit different :<br>
        <br>
        May 16 22:58:14 mercure pptpd[1417]: MGR: connections limit
        (100) reached, extra IP addresses ignored<br>
        May 16 22:58:14 mercure pptpd[1418]: MGR: Manager process
        started<br>
        May 16 22:58:14 mercure pptpd[1418]: MGR: Maximum of 100
        connections available<br>
        May 16 22:58:17 mercure pptpd[1420]: CTRL: Client 88.190.22.113
        control connection started<br>
        May 16 22:58:18 mercure pptpd[1420]: CTRL: Starting call
        (launching pppd, opening GRE)<br>
        May 16 22:58:18 mercure pppd[1421]: In file
        /etc/ppp/options.pptpd: unrecognized option '-chapms'<br>
        May 16 22:58:18 mercure pptpd[1420]: GRE:
        read(fd=6,buffer=6124a0,len=8196) from PTY failed: status = -1
        error = Input/output error, usually caused by unexpected
        termination of pppd, check option syntax and pppd logs<br>
        May 16 22:58:18 mercure pptpd[1420]: CTRL: PTY read or GRE write
        failed (pty,gre)=(6,7)<br>
        May 16 22:58:18 mercure pptpd[1420]: CTRL: Client 88.190.22.113
        control connection finished<br>
        <br>
        I'll try to dig a little on my side but if you have any clue...<br>
        <br>
        @Charlie: I tried to setup openvpn and experienced the same
        problem (as explained it was a network issue and not a pptp
        one).<br>
        I would prefer to setup pptp because I want to connect a remote
        router that only manage pptp and not openvpn.<br>
        <pre class="moz-signature" cols="72">Pierre-Gildas MILLON</pre>
        Le 16/05/2014 16:17, Charlie Brady a écrit :<br>
      </div>
      <blockquote
cite="mid:CAPvOGzYNhB6utkxjmAE66tRTGZADmkaeU6Q7Fhzr5iWM2k--Lw@mail.gmail.com"
        type="cite">
        <div dir="ltr"><br>
          <div class="gmail_extra"><br>
            <br>
            <div class="gmail_quote">On Fri, May 16, 2014 at 9:47 AM,
              Pierre-Gildas MILLON <span dir="ltr">&lt;<a
                  moz-do-not-send="true"
                  href="mailto:[email protected]" target="_blank">[email protected]</a>&gt;</span>
              wrote:<br>
              <blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
                <div text="#000000" bgcolor="#FFFFFF">
                  <div>I updated the paste as you suggested (-f -s 200).<br>
                  </div>
                </div>
              </blockquote>
              <div><br>
              </div>
              <div>The connection was closed by the remote end. You'll
                need to diagnose the issue there.</div>
              <div><br>
              </div>
              <div>But before doing that you should seriously consider
                using openvpn (or something else) instead.</div>
              <div><br>
              </div>
              <div>
                <div>23256 select(5, [0 4], [], NULL, NULL)  = 1 (in
                  [0])</div>
                <div>23256 read(0, 0xc575a0, 512)            = -1
                  ECONNRESET (Connection reset by peer)</div>
                <div>23256 time([1400247963])                =
                  1400247963</div>
                <div>23256 sendto(3, "&lt;29&gt;May 16 15:46:03
                  pptp[23256]: anon log[pptp_read_some:pptp_ctrl.c:551]:
                  read error: Connection reset by peer", 111,
                  MSG_NOSIGNAL, NULL, 0) = 111</div>
                <div>23256 rt_sigaction(SIGINT, {0x40a4f6, [INT],
                  SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, {0x40a4dc,
                  [INT], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, 8) = 0</div>
                <div>23256 rt_sigaction(SIGTERM, {0x40a4f6, [TERM],
                  SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, {0x40a4dc,
                  [TERM], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, 8) =
                  0</div>
                <div>23256 select(5, [0 4], [], NULL, {0, 0}) = 1 (in
                  [0], left {0, 0})</div>
                <div>23256 read(0, "", 512)                  = 0</div>
                <div>23256 time([1400247963])                =
                  1400247963</div>
                <div>23256 sendto(3, "&lt;29&gt;May 16 15:46:03
                  pptp[23256]: anon log[pptp_read_some:pptp_ctrl.c:544]:
                  read returned zero, peer has closed", 110,
                  MSG_NOSIGNAL, NULL, 0) = 110</div>
              </div>
              <div><br>
              </div>
              <div> </div>
              <blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
                <div text="#000000" bgcolor="#FFFFFF">
                  <div>
                    <pre cols="72">Pierre-Gildas MILLON
</pre>
                    Le 16/05/2014 15:06, Charlie Brady a écrit :<br>
                  </div>
                  <blockquote type="cite">
                    <div>
                      <div class="h5">
                        <div dir="ltr"><br>
                          <div class="gmail_extra"><br>
                            <br>
                            <div class="gmail_quote">On Fri, May 16,
                              2014 at 6:43 AM, Pierre-Gildas MILLON <span
                                dir="ltr">&lt;<a moz-do-not-send="true"
                                  href="mailto:[email protected]"
                                  target="_blank">[email protected]</a>&gt;</span>
                              wrote:<br>
                              <blockquote class="gmail_quote"
                                style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">Thanks


                                for the quick answer,<br>
                                <br>
                                Here's the strace: <a
                                  moz-do-not-send="true"
                                  href="http://pastebin.com/W8Bck12t"
                                  target="_blank">http://pastebin.com/W8Bck12t</a><br>
                                <br>
                                I've no idea what to look for :/<br>
                              </blockquote>
                              <div><br>
                              </div>
                              <div>You'll need to use -f to trace child
                                processes. And it would be a good idea
                                to use "-s NNN" with some NNN &gt; 100,
                                so that you can read the text of log
                                messages. </div>
                              <div><br>
                              </div>
                              <div><br>
                              </div>
                              <div><br>
                              </div>
                              <div> </div>
                              <blockquote class="gmail_quote"
                                style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
                                Pierre-Gildas MILLON<br>
                                <br>
                                Le 16/05/2014 12:32, James Cameron a
                                écrit :<br>
                                <div>&gt; On Fri, May 16, 2014 at
                                  12:07:26PM +0200, Pierre-Gildas MILLON
                                  wrote:<br>
                                  &gt;&gt; anon
                                  fatal[open_callmgr:pptp.c:495]: Could
                                  not launch call manager after<br>
                                  &gt;&gt; 3 tries.<br>
                                  &gt; That will do it.<br>
                                  &gt;<br>
                                  &gt; Diagnose next with strace before
                                  pppd, find out what is happening to<br>
                                  &gt; prevent call manager start.<br>
                                  &gt;<br>
                                  <br>
                                  <br>
                                </div>
                                <div>
                                  <div>------------------------------------------------------------------------------<br>
                                    "Accelerate Dev Cycles with
                                    Automated Cross-Browser Testing -
                                    For FREE<br>
                                    Instantly run your Selenium tests
                                    across 300+ browser/OS combos.<br>
                                    Get unparalleled scalability from
                                    the best Selenium testing platform
                                    available<br>
                                    Simple to use. Nothing to install.
                                    Get started now for free."<br>
                                    <a moz-do-not-send="true"
                                      href="http://p.sf.net/sfu/SauceLabs"
                                      target="_blank">http://p.sf.net/sfu/SauceLabs</a><br>
_______________________________________________<br>
                                    Poptop-server mailing list<br>
                                    <a moz-do-not-send="true"
                                      href="mailto:[email protected]"
                                      target="_blank">[email protected]</a><br>
                                    <a moz-do-not-send="true"
                                      href="https://lists.sourceforge.net/lists/listinfo/poptop-server"
                                      target="_blank">https://lists.sourceforge.net/lists/listinfo/poptop-server</a><br>
                                  </div>
                                </div>
                              </blockquote>
                            </div>
                            <br>
                          </div>
                        </div>
                        <br>
                      </div>
                    </div>
                    <font size="1">This e-mail (including any
                      attachments) is for the sole use of the intended
                      recipient(s) and may contain information that is
                      confidential and/or protected by legal privilege.
                      Any unauthorized review, use, copy, disclosure or
                      distribution of this e-mail is strictly
                      prohibited. If you are not the intended recipient,
                      please notify Mitel immediately and destroy all
                      copies of this e-mail.  Mitel does not accept any
                      liability for breach of security, error or virus
                      that may result from the transmission of this
                      message.</font> </blockquote>
                  <br>
                </div>
              </blockquote>
            </div>
            <br>
          </div>
        </div>
        <br>
        <font size="1">This e-mail (including any attachments) is for
          the sole use of the intended recipient(s) and may contain
          information that is confidential and/or protected by legal
          privilege. Any unauthorized review, use, copy, disclosure or
          distribution of this e-mail is strictly prohibited. If you are
          not the intended recipient, please notify Mitel immediately
          and destroy all copies of this e-mail.  Mitel does not accept
          any liability for breach of security, error or virus that may
          result from the transmission of this message.</font> </blockquote>
      <br>
    </blockquote>
    <br>
  </body>
</html>

--------------040307030708050102090308--


--===============5682164553319255175==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------------------------------------------------------------
"Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
Instantly run your Selenium tests across 300+ browser/OS combos.
Get unparalleled scalability from the best Selenium testing platform available
Simple to use. Nothing to install. Get started now for free."
http://p.sf.net/sfu/SauceLabs
--===============5682164553319255175==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Poptop-server mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/poptop-server

--===============5682164553319255175==--