freeradius + poptop + mysql 연동 질문

freeradius + pptp + mysql

연동 설치하려고 합니다.

CentOS5 사용중이구요

웹상의 해외 설치법들 참고하여 하고있습니다.

radius 와 mysql은 연동된거같은데 pptp와 인증이 안되는거 같네요.

아래의 메세지 부분입니다.

#/var/log/messages

Mar  2 12:14:45 localhost pptpd[5708]: CTRL: Starting call (launching pppd, opening GRE)
Mar  2 12:14:45 localhost pppd[5709]: Plugin radius.so loaded.
Mar  2 12:14:45 localhost pppd[5709]: RADIUS plugin initialized.
Mar  2 12:14:45 localhost pppd[5709]: Plugin radattr.so loaded.
Mar  2 12:14:45 localhost pppd[5709]: RADATTR plugin initialized.
Mar  2 12:14:45 localhost pppd[5709]: Plugin /usr/lib/pptpd/pptpd-logwtmp.so loaded.
Mar  2 12:14:45 localhost pppd[5709]: pppd 2.4.4 started by root, uid 0
Mar  2 12:14:45 localhost pppd[5709]: Using interface ppp0
Mar  2 12:14:45 localhost pppd[5709]: Connect: ppp0 <--> /dev/pts/1
Mar  2 12:14:48 localhost pptpd[5708]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
Mar  2 12:14:48 localhost pppd[5709]: Peer 4444 failed CHAP authentication
Mar  2 12:14:48 localhost pppd[5709]: Connection terminated.
Mar  2 12:14:48 localhost pppd[5709]: Exit.
--------------------------------------------------------------------------------------------------

/etc/ppp/options.pptp

name pptpd

refuse-pap
refuse-chap
require-mschap-v2

ms-dns 168.126.63.1
proxyarp

lock

nobsdcomp

novj
novjccomp

nologfd

mtu 1450
mru 1450
plugin radius.so
plugin radattr.so

-------------------------------------------------------------------------------------

# radiusd-XXX

Mon Mar  2 17:17:33 2009 : Info: Starting - reading configuration files ...
Mon Mar  2 17:17:33 2009 : Debug: reread_config:  reading radiusd.conf
Mon Mar  2 17:17:33 2009 : Debug: Config:   including file: /etc/raddb/clients.conf
Mon Mar  2 17:17:33 2009 : Debug: Config:   including file: /etc/raddb/sql.conf
Mon Mar  2 17:17:33 2009 : Debug:  main: prefix = "/usr"
Mon Mar  2 17:17:33 2009 : Debug:  main: localstatedir = "/var"
Mon Mar  2 17:17:33 2009 : Debug:  main: logdir = "/var/log/radius"
Mon Mar  2 17:17:33 2009 : Debug:  main: libdir = "/usr/lib"
Mon Mar  2 17:17:33 2009 : Debug:  main: radacctdir = "/var/log/radius/radacct"
Mon Mar  2 17:17:33 2009 : Debug:  main: hostname_lookups = no
Mon Mar  2 17:17:33 2009 : Debug:  main: snmp = no
Mon Mar  2 17:17:33 2009 : Debug:  main: max_request_time = 30
Mon Mar  2 17:17:33 2009 : Debug:  main: cleanup_delay = 5
Mon Mar  2 17:17:33 2009 : Debug:  main: max_requests = 256
Mon Mar  2 17:17:33 2009 : Debug:  main: delete_blocked_requests = 0
Mon Mar  2 17:17:33 2009 : Debug:  main: port = 0
Mon Mar  2 17:17:33 2009 : Debug:  main: allow_core_dumps = no
Mon Mar  2 17:17:33 2009 : Debug:  main: log_stripped_names = no
Mon Mar  2 17:17:33 2009 : Debug:  main: log_file = "/var/log/radius/radius.log"
Mon Mar  2 17:17:33 2009 : Debug:  main: log_auth = no
Mon Mar  2 17:17:33 2009 : Debug:  main: log_auth_badpass = no
Mon Mar  2 17:17:33 2009 : Debug:  main: log_auth_goodpass = no
Mon Mar  2 17:17:33 2009 : Debug:  main: pidfile = "/var/run/radiusd.pid"
Mon Mar  2 17:17:33 2009 : Debug:  main: user = "(null)"
Mon Mar  2 17:17:33 2009 : Debug:  main: group = "(null)"
Mon Mar  2 17:17:33 2009 : Debug:  main: usercollide = no
Mon Mar  2 17:17:33 2009 : Debug:  main: lower_user = "no"
Mon Mar  2 17:17:33 2009 : Debug:  main: lower_pass = "no"
Mon Mar  2 17:17:33 2009 : Debug:  main: nospace_user = "no"
Mon Mar  2 17:17:33 2009 : Debug:  main: nospace_pass = "no"
Mon Mar  2 17:17:33 2009 : Debug:  main: checkrad = "/usr/sbin/checkrad"
Mon Mar  2 17:17:33 2009 : Debug:  main: proxy_requests = yes
Mon Mar  2 17:17:33 2009 : Debug:  main: debug_level = 0
Mon Mar  2 17:17:33 2009 : Debug: read_config_files:  reading dictionary
Mon Mar  2 17:17:33 2009 : Debug: read_config_files:  reading naslist
Mon Mar  2 17:17:33 2009 : Info: Using deprecated naslist file.  Support for this will go away soon.
Mon Mar  2 17:17:33 2009 : Debug: read_config_files:  reading clients
Mon Mar  2 17:17:33 2009 : Debug: read_config_files:  reading realms

======================================================================

윈도우에서 vpn클라이언트로 접속시

보안에서는

CHAP

MS-CHAP

MS-CHAP V2 사용합니다.