asked on

Linux as PPP server

I know it's been asked a hundred times before, but I've already spent about 50 points looking up PAQ's and still cannot find the correct answer.

Here's the deal... setting up our RedHat 6.1 as a ppp dialin server.

I installed mgetty. I can dial in and get a shell account access.

How do I turn that to ppp?

I read PPP-HOWTO and that seems hacky... log in, type ppp, then negotiate PPP on the client end? That's bad form.

I read some stuff on comp.os.linux.networking, which helped a little, but not completely.

What I need to know:
Once mgetty is set up (I did compile with -DAUTO_PPP) what next?

How do you set up the pap-secrets file? On the newsgroup I saw that you only need:
* * "" *

How does the client receive it's IP? Do I need DHCP server set up on the dialin server?

Basically: Once mgetty is installed, what files need to be edited, and how?

Thanks... I know this is a huge repeat question, but like I said, I read 6 or 7 PAQ's and didnt get my full answer.

edskee

ASKER

This is the best I get... I get a login shell, regardless of the auto-ppp I turned on... and when I manually run pppd:

pppd: The remote system is required to authenticate itself but I
pppd: couldn't find any secret (password) which would let it use an IP address.

Here's my pap-secrets:
* * "" *

Thats it... what pppd options should I use?

This is driving me nuts.

ASKER CERTIFIED SOLUTION

kiffney

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

edskee

ASKER

How do you get it to use the existing username/password combos in /etc/passwd instead of the pap-secrets file?

edskee

ASKER

It works! All except the username and password part... for each person who needs to dialin, I really dont want to have to edit the pap-secrets file... how do I do it otherwise?

kiffney

Use the 'login' option on the server's pppd setup. You still need an entry in the pap-secrets file, but you can put "" in the secrets column. The dialer-in has the username in the name column, * in the server column, "" in the secrets column, and either * or a set of ip addresses allowed in the address columnt.

kiffney

I meant to say, the dialed-into machine has "" in the secrets column and 'login' in the options file - this makes the server check the user's password against /etc/passwd. You still need a username entry in the server's pap-secrets, but it can just be

* * "" *

and the dialing-in person sets "remotename" to be his login name and his password to be his login password.

edskee

ASKER

Thanks man, fixed all my problems!