Problem CHAP Challenge with PPP v2.5.1-dev

Jean Francois TRAP <[email protected]>
Newsgroups org.kernel.vger.linux-ppp
Message-ID <DU0PR02MB8689D701B0331BC192E86145B3C22@DU0PR02MB8689.eurprd02.prod.outlook.com>
Hello,

For an embedded system using ppp v2.4.7 on a linux from scratch v4.14 base, this works without a hitch.
For security reasons, we're migrating to linux from scratch v6.1 and ppp v2.5.1-dev.

With the same configuration, the same SIM card, I encounter the following problem:

2024-06-14T10:52:56.761615+02:00 REDY-02448-00029 REDY: Script /usr/sbin/chat -f /etc/ppp/modem/chat-dialer-3G finished (pid 1791), status = 0x0
2024-06-14T10:52:56.761666+02:00 REDY-02448-00029 REDY: Serial connection established.
2024-06-14T10:52:56.761693+02:00 REDY-02448-00029 REDY: using channel 6
2024-06-14T10:52:56.764893+02:00 REDY-02448-00029 REDY: Using interface ppp0
2024-06-14T10:52:56.767072+02:00 REDY-02448-00029 REDY: Connect: ppp0 <--> /dev/ttymxc0
2024-06-14T10:52:56.774101+02:00 REDY-02448-00029 REDY: Warning - secret file /etc/ppp/pap-secrets has world and/or group access
2024-06-14T10:52:56.775690+02:00 REDY-02448-00029 REDY: sent [LCP ConfReq id=0x1 <asyncmap 0xa0000>]
2024-06-14T10:52:56.789506+02:00 REDY-02448-00029 REDY: rcvd [LCP ConfAck id=0x1 <asyncmap 0xa0000>]
2024-06-14T10:52:57.745536+02:00 REDY-02448-00029 REDY: rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MD5> <magic 0x52181044> <pcomp> <accomp>]
2024-06-14T10:52:57.745583+02:00 REDY-02448-00029 REDY: sent [LCP ConfRej id=0x1 <magic 0x52181044> <pcomp> <accomp>]
2024-06-14T10:52:57.758670+02:00 REDY-02448-00029 REDY: rcvd [LCP ConfReq id=0x2 <asyncmap 0x0> <auth chap MD5>]
2024-06-14T10:52:57.758742+02:00 REDY-02448-00029 REDY: sent [LCP ConfAck id=0x2 <asyncmap 0x0> <auth chap MD5>]
2024-06-14T10:52:57.771800+02:00 REDY-02448-00029 REDY: rcvd [CHAP Challenge id=0x1 <913f58c149608e12686da08e27fb8f01>, name = ""]
2024-06-14T10:52:57.773667+02:00 REDY-02448-00029 REDY: Warning - secret file /etc/ppp/chap-secrets has world and/or group access
2024-06-14T10:52:57.801692+02:00 REDY-02448-00029 REDY: sent [CHAP Response id=0x1 <84ec7e00000000000000003b00000000000000161cd73a0000000038c0a67400bac779000d0000c0db877e09000000e44e060038c0a67468b3030028bda67400000000acdb877e4454437470da877e000d00003b0000000000000027100f00000000000000000000bac77984dd877ef4c60400c0db877e00000000288e2901c0db877ec4da877e0000000000000000000000000000000000000000000000000000000000000000000000000000000000>, name = "orange"]
2024-06-14T10:52:57.820165+02:00 REDY-02448-00029 REDY: rcvd [CHAP Failure id=0x1 "I don't like you.  Go 'way."]
2024-06-14T10:52:57.820203+02:00 REDY-02448-00029 REDY: CHAP authentication failed: I don't like you.  Go 'way.
2024-06-14T10:52:57.820226+02:00 REDY-02448-00029 REDY: CHAP authentication failed
2024-06-14T10:52:57.820248+02:00 REDY-02448-00029 REDY: sent [LCP TermReq id=0x2 "Failed to authenticate ourselves to peer"]
2024-06-14T10:52:57.821973+02:00 REDY-02448-00029 REDY: rcvd [LCP TermReq id=0x3 "Authentication failed"]

Here is the file   /etc/ppp/chap-secrets

 orange    *      orange     *

when I delete the chap-secrets file it forces PAP authentication and the connection works again.
As it is preferable to work in CHAP, I need to solve this problem.

2024-06-14T10:35:06.757817+02:00 REDY-02448-00029 REDY: Script /usr/sbin/chat -f /etc/ppp/modem/chat-dialer-3G finished (pid 1447), status = 0x0
2024-06-14T10:35:06.757866+02:00 REDY-02448-00029 REDY: Serial connection established.
2024-06-14T10:35:06.757892+02:00 REDY-02448-00029 REDY: using channel 4
2024-06-14T10:35:06.760979+02:00 REDY-02448-00029 REDY: Using interface ppp0
2024-06-14T10:35:06.762779+02:00 REDY-02448-00029 REDY: Connect: ppp0 <--> /dev/ttymxc0
2024-06-14T10:35:06.769482+02:00 REDY-02448-00029 REDY: Warning - secret file /etc/ppp/pap-secrets has world and/or group access
2024-06-14T10:35:06.771248+02:00 REDY-02448-00029 REDY: sent [LCP ConfReq id=0x1 <asyncmap 0xa0000>]
2024-06-14T10:35:06.784789+02:00 REDY-02448-00029 REDY: rcvd [LCP ConfAck id=0x1 <asyncmap 0xa0000>]
2024-06-14T10:35:07.740286+02:00 REDY-02448-00029 REDY: rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MD5> <magic 0x52181044> <pcomp> <accomp>]
2024-06-14T10:35:07.740371+02:00 REDY-02448-00029 REDY: sent [LCP ConfRej id=0x1 <magic 0x52181044> <pcomp> <accomp>]
2024-06-14T10:35:07.753004+02:00 REDY-02448-00029 REDY: rcvd [LCP ConfReq id=0x2 <asyncmap 0x0> <auth chap MD5>]
2024-06-14T10:35:07.753050+02:00 REDY-02448-00029 REDY: sent [LCP ConfNak id=0x2 <auth pap>]
2024-06-14T10:35:07.767028+02:00 REDY-02448-00029 REDY: rcvd [LCP ConfReq id=0x3 <asyncmap 0x0> <auth pap>]
2024-06-14T10:35:07.767077+02:00 REDY-02448-00029 REDY: sent [LCP ConfAck id=0x3 <asyncmap 0x0> <auth pap>]
2024-06-14T10:35:07.768474+02:00 REDY-02448-00029 REDY: Warning - secret file /etc/ppp/pap-secrets has world and/or group access
2024-06-14T10:35:07.768637+02:00 REDY-02448-00029 REDY: sent [PAP AuthReq id=0x1 user="orange" password=<hidden>]
2024-06-14T10:35:07.779335+02:00 REDY-02448-00029 REDY: rcvd [PAP AuthAck id=0x1 ""]
2024-06-14T10:35:07.779382+02:00 REDY-02448-00029 REDY: PAP authentication succeeded
2024-06-14T10:35:07.781973+02:00 REDY-02448-00029 REDY: sent [CCP ConfReq id=0x1 <deflate 15> <deflate(old#) 15> <bsd v1 15>]
2024-06-14T10:35:07.783382+02:00 REDY-02448-00029 REDY: sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>]
2024-06-14T10:35:07.796410+02:00 REDY-02448-00029 REDY: rcvd [LCP ProtRej id=0x4 80 fd 80 fd 01 01 00 0f 1a 04 78 00 18 04 78]
2024-06-14T10:35:07.796445+02:00 REDY-02448-00029 REDY: Protocol-Reject for 'Compression Control Protocol' (0x80fd) received
2024-06-14T10:35:10.784751+02:00 REDY-02448-00029 REDY: sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>]
2024-06-14T10:35:13.786887+02:00 REDY-02448-00029 REDY: sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>]
2024-06-14T10:35:13.799647+02:00 REDY-02448-00029 REDY: rcvd [IPCP ConfReq id=0x1]
2024-06-14T10:35:13.799692+02:00 REDY-02448-00029 REDY: sent [IPCP ConfNak id=0x1 <addr 0.0.0.0>]
2024-06-14T10:35:13.801671+02:00 REDY-02448-00029 REDY: rcvd [IPCP ConfRej id=0x1 <compress VJ 0f 01>]
2024-06-14T10:35:13.801705+02:00 REDY-02448-00029 REDY: sent [IPCP ConfReq id=0x2 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>]
2024-06-14T10:35:13.812676+02:00 REDY-02448-00029 REDY: rcvd [IPCP ConfReq id=0x2 <addr 192.200.1.21>]
2024-06-14T10:35:13.812713+02:00 REDY-02448-00029 REDY: sent [IPCP ConfAck id=0x2 <addr 192.200.1.21>]
2024-06-14T10:35:13.812737+02:00 REDY-02448-00029 REDY: rcvd [IPCP ConfNak id=0x2 <addr 90.117.164.221> <ms-dns1 192.168.10.110> <ms-dns2 194.51.3.56>]
2024-06-14T10:35:13.812763+02:00 REDY-02448-00029 REDY: sent [IPCP ConfReq id=0x3 <addr 90.117.164.221> <ms-dns1 192.168.10.110> <ms-dns2 194.51.3.56>]
2024-06-14T10:35:13.826431+02:00 REDY-02448-00029 REDY: rcvd [IPCP ConfAck id=0x3 <addr 90.117.164.221> <ms-dns1 192.168.10.110> <ms-dns2 194.51.3.56>]
2024-06-14T10:35:13.829159+02:00 REDY-02448-00029 REDY: local  IP address 90.xxx.xxx.xxx
2024-06-14T10:35:13.830292+02:00 REDY-02448-00029 REDY: remote IP address 192.xxx.xxx.xxx
2024-06-14T10:35:13.831297+02:00 REDY-02448-00029 REDY: primary   DNS address 192.xxx.xxx.xxx
2024-06-14T10:35:13.832379+02:00 REDY-02448-00029 REDY: secondary DNS address 194.xxx.xxx.xxx
2024-06-14T10:35:13.839411+02:00 REDY-02448-00029 REDY: Script /etc/ppp/ip-up started (pid 1459)
2024-06-14T10:35:14.135757+02:00 REDY-02448-00029 REDY: Script /etc/ppp/ip-up finished (pid 1459), status = 0x0

the file   /etc/ppp/pap-secrets   is the same as   /etc/ppp/chap-secrets

The pppd v2.5.0 has the same problem with different folder locations.

thank you for your help

Jean-François TRAP
WIT company
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.