Ubuntu
network-manager package

pptp vpn fails with "no valid secrets"

Asked by Steve Romanow on 2008-10-20

Running intrepid beta with nm 0.7 svn 10152008.

I have added a pptp vpn connection. I manually edited the chap-secrets file. it does nto appear to be launching the pppd. It fails and says there is no valid secrets file.

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu network-manager Edit question
Assignee:
No assignee Edit question
Solved by:
Sonya Finkey
Solved:
2008-11-02
Last query:
2008-11-02
Last reply:
2008-11-01
Alassane (alassane-maiga) said : #1

I think it's a bug. If you don't input your password in the settings it works for me. you should try it

Steve Romanow (slestak989) said : #2

This gets me further along. I do not get the "no valid secrets" error. The PPTP vpn will still not start though.

How can i get more info out of ppp? Enable debug in options?

Steve Romanow (slestak989) said : #3

looking at output of daemon.log while trying to connect I get teh following output. Not sure if it helps.

Oct 24 22:36:08 e1505 NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' just appeared, activating connections
Oct 24 22:36:12 e1505 NetworkManager: <info> VPN plugin state changed: 3
Oct 24 22:36:12 e1505 NetworkManager: <info> VPN connection 'COMMERCE' (Connect) reply received.
Oct 24 22:36:12 e1505 pptp[6528]: nm-pptp-service-6514 log[main:pptp.c:314]: The synchronous pptp option is NOT activated
Oct 24 22:36:12 e1505 pptp[6541]: nm-pptp-service-6514 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
Oct 24 22:36:12 e1505 pptp[6541]: nm-pptp-service-6514 log[ctrlp_disp:pptp_ctrl.c:739]: Received Start Control Connection Reply
Oct 24 22:36:12 e1505 pptp[6541]: nm-pptp-service-6514 log[ctrlp_disp:pptp_ctrl.c:773]: Client connection established.
Oct 24 22:36:13 e1505 pptp[6541]: nm-pptp-service-6514 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 7 'Outgoing-Call-Request'
Oct 24 22:36:13 e1505 pptp[6541]: nm-pptp-service-6514 log[ctrlp_disp:pptp_ctrl.c:858]: Received Outgoing Call Reply.
Oct 24 22:36:13 e1505 pptp[6541]: nm-pptp-service-6514 log[ctrlp_disp:pptp_ctrl.c:897]: Outgoing call established (call ID 0, peer's call ID 50150).
Oct 24 22:36:14 e1505 pptp[6541]: nm-pptp-service-6514 log[ctrlp_disp:pptp_ctrl.c:950]: PPTP_SET_LINK_INFO received from peer_callid 0
Oct 24 22:36:14 e1505 pptp[6541]: nm-pptp-service-6514 log[ctrlp_disp:pptp_ctrl.c:953]: send_accm is 00000000, recv_accm is FFFFFFFF
Oct 24 22:36:14 e1505 pptp[6541]: nm-pptp-service-6514 warn[ctrlp_disp:pptp_ctrl.c:956]: Non-zero Async Control Character Maps are not supported!
Oct 24 22:36:14 e1505 pptp[6541]: nm-pptp-service-6514 log[ctrlp_disp:pptp_ctrl.c:950]: PPTP_SET_LINK_INFO received from peer_callid 0
Oct 24 22:36:14 e1505 pptp[6541]: nm-pptp-service-6514 log[ctrlp_disp:pptp_ctrl.c:953]: send_accm is FFFFFFFF, recv_accm is FFFFFFFF
Oct 24 22:36:14 e1505 pptp[6541]: nm-pptp-service-6514 warn[ctrlp_disp:pptp_ctrl.c:956]: Non-zero Async Control Character Maps are not supported!
Oct 24 22:36:14 e1505 pptp[6528]: nm-pptp-service-6514 warn[decaps_hdlc:pptp_gre.c:204]: short read (-1): Input/output error
Oct 24 22:36:14 e1505 pptp[6528]: nm-pptp-service-6514 warn[decaps_hdlc:pptp_gre.c:216]: pppd may have shutdown, see pppd log
Oct 24 22:36:14 e1505 pptp[6541]: nm-pptp-service-6514 log[callmgr_main:pptp_callmgr.c:234]: Closing connection (unhandled)
Oct 24 22:36:14 e1505 pptp[6541]: nm-pptp-service-6514 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 12 'Call-Clear-Request'

Steve Romanow (slestak989) said : #4

does NM pptp plugin source /etc/ppp/options.pptp? It seems to contradict the setting from the NM gui...

it says to refuse chap, refuse mschap, refuse eap. All auth methods that are set to try in the NM gui.

Amael (amael) said : #5

Same than Alassanne here, if I enter the password in the settings, it won't connect saying "no valid secrets". But when I try to connect without the password saved, and type it in during connection, it works ! (I also have a manually set chap-secrets file)

Best Sonya Finkey (finkey-deactivatedaccount) said : #6

Hi -

Here's how to get it working in Ubuntu Intrepid for a Windows home network. Before trying this, be sure your router allows PPTP service.

Open Network Configuration (Start, System, Preferences).
Highlight your VPN connection, hit Edit.
At IPv4 Settings Tab: choose method Automatic (VPN).
At VPN Tab:
1 - input the IP address of the target computer.
2 - input your user name. Leave all else blank.
3 - hit Advanced button.
At Authentication:
1 - UNcheck PAP (because PAP means to allow unsecured passage - this is the source of "no shared shared secrets")
2 - Check CHAP, MSCHAP and MSCHAPv2.
At Security and Compression:
1 - Check Use Point-to-point encryption (MPPE)
2 - Select 128-bit (most secure).
3 - Check Allow stateful encryption.
At Echo: check Allow PPP echo packets.
Leave all else blank. Hit OK, OK to save and get out.

Note: Your password is requested on VPN startup. I did not try to add it to the keyring.

Steve Romanow (slestak989) said : #7

Sonya's point to deselect PAP was the key point that I think got this working. tyvm!

Steve Romanow (slestak989) said : #8

Thanks Sonya Finkey, that solved my question.

Sonya Finkey (finkey-deactivatedaccount) said : #9

You're welcome!.

CoderChris (coderchris) said : #10

Alassanne's solution worked for me - now I just need to get my vpn settings right so the connection doesn't fail :P

ScottLij (scott-lijewski) said : #11

Thanks for the solution... just wonder if there's a way to save the password so you don't have to type it in every time? When I try saving it in the VPN I get this same error again. Thanks.

rcharki (rcharki) said : #12

All ,
Thanks for the solution it works fine for me

Mike (ashgolfer) said : #13

Having same trouble, looking for advance button in step 3 Vpn tab.

Sonya Finkey (finkey-deactivatedaccount) said : #14

Hi Mike, This missing button may have to do with the network package in use for VPN, if possible, try other downloads. That button should exist. Hope this helps, Sonya