[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

OD - issues with VPN auth

Subject: OD - issues with VPN auth
From: Iain Morris <email@hidden>
Date: Mon, 28 Jul 2008 12:26:36 -0700
Delivered-to: email@hidden
Delivered-to: email@hidden
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:from:to :content-type:content-transfer-encoding:mime-version:subject:date :x-mailer; bh=L19brmh4GQkCg9/bIIqN2RyTIMSOj35t3rwbKmZqVM4=; b=iQKScqPnORSy7p9HOgzy9B8rC6UGSPQ8MTUhhPnT8CN6Q1/qdooxv1bboCS5ZF648y CYpEeqIqPrpnVpuJ6QUBjxs1/+80tbBrIC6Q6hjBn/xKiavyMrviHylFbV+NNKEvBxxX HG+E5Z+xtjZo+z/3R2aSsix318YosbLQVxQeI=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:from:to:content-type:content-transfer-encoding :mime-version:subject:date:x-mailer; b=KnHvDbzcO0E/23NNIlwOAV6O39LZyJJLOekD0zzotCACXWWcb8lyCvdojqXFp0HE6t oGry/2HUeLd3w93aiEG7FIcOzuYKwMsJjc5+K0rCVRh/atqPt5SHtP5PA9+W9sB93LJL T2XsWYBgEv6hoEMH4rKn39j/PNWnSmQ2/WELE=

Greetings,

We use an OD server (10.5.4) to authenticate two other 10.5.4 servers running the stock VPN. Each provides access to separate portions of internal nets.

It has worked flawlessly for months, but this weekend, both vpns stopped authenticating users. There were no errors in the OD logs, except for this repeating message in /var/log/system.log any time someone tried to connect:

Jul 28 09:23:45 (hostname) /usr/sbin/PasswordService[54]: wrong-sized secret 32 Jul 28 09:23:45 (hostname) /usr/sbin/PasswordService[54]: Unexpected State Reached in MS-CHAPv2 plugin

The second we re-entered a user's password in WGM in OD, they could log in again via VPN.

We also authenticate users via OD for Kerio mail (Kerberos), and this worked fine throughout the problem.

So it seems to be an issue on the OD server, related specifically to authenticating via MS-CHAPv2, or even more specifically, MS-CHAPv2 with the stock VPN server.

Thanks for any insights you can provide. Not sure if this is a bug, or if there is something I am overlooking. _______________________________________________ Do not post admin requests to the list. They will be ignored. Macos-x-server mailing list (email@hidden) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/macos-x-server/email@hidden

This email sent to email@hidden

Prev by Date: Re: US-CERT Vulnerability Note VU#800113
Next by Date: Re: User account creation paradigm in OSXS
Previous by thread: Re: Storage array/SAN for Xserve
Next by thread: Migrating SSL from 10.2 to 10.4
Index(es):
- Date
- Thread

Home