Hi,

I think I found a bug in mpd 4.0b5. When setting up as a ppp server and 
trying to connect via linux pppd I get the following chap login failure:

rcvd [CHAP Challenge id=0x1 <bb1e6825148f00432e1df51e2241c249>, name = ""]
sent [CHAP Response id=0x1 
<71d5d079919f310e1a04a5a366c0d4b1b7c130e6b7c130e6f499db4880aa31ec08e20f720f83735396e8a0e2995fa4a700>,
 
name = "sebster"]
rcvd [LCP EchoRep id=0x0 magic=0x5bca9214]
rcvd [CHAP Success id=0x1 "S=4CA1E7ABF3CFD2FA11D335D0BCFFC061B5668D78"]
MS-CHAPv2 mutual authentication failed.
CHAP authentication failed
sent [LCP TermReq id=0x2 "Failed to authenticate ourselves to peer"]

The chap success packet has an incorrect incorrect response to the 
challenge because it uses an uninitialized NT hash instead of the hash 
derived from the shared secret. By changing line 520 of chap.c from

    GenerateAuthenticatorResponse(a->params.msoft.nt_hash, pv->ntHash,

to

    GenerateAuthenticatorResponse(secret, pv->ntHash,

this problem is resolved.

Note that this problem does not exist in 3.18: the same configuration 
gives the following output:

rcvd [CHAP Challenge id=0x1 <bb1e68f7d2ab156f17163778cb1cf276>, name = ""]
sent [CHAP Response id=0x1 
<4d2115e439d88648ba87ccc1a3e88c6ab7c190deb7c190de8fb276c4912736be46609e5d292b6a913997cc41333de19000>,
 
name = "sebster"]
rcvd [LCP EchoRep id=0x0 magic=0x411a984c]
rcvd [CHAP Success id=0x1 "S=FD1AC3533A35D7668FB5D24910D711DBFFF01C59"]
CHAP authentication succeeded

Regards,
Sebastiaan




-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Mpd-users mailing list
Mpd-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mpd-users

Reply via email to