[Samba] VPN server and logon to Samba PDC

[David C. Rankin]

Jon Theil Nielsen wrote:
> My goal is to make VPN access to our Samba PDC (FreeBSD 7.0) so that users
> can access there home shares from Windows clients.
> I have read the instructions at
> http://samba.org/ftp/unpacked/lorikeet/pppd/final-report.pdf, but I can't
> make it work. 
<snip>
> Regards,
> Jon

Jon,

	I do it this way:

pptp VPN server

/etc/pptpd.conf
option /etc/ppp/options.pptp
debug (comment out after testing)
localip 192.168.7.12
remoteip 192.168.7.2-5
pidfile /var/run/pptpd.pid

/etc/ppp/options.pptp
lock
noauth
nobsdcomp
lcp-echo-failure 10
lcp-echo-interval 10

/etc/ppp/options
name bonza.rbpllc.com
noipdefault
noauth
lock
local
lcp-echo-interval 30
lcp-echo-failure 4
lcp-max-configure 60
lcp-restart 2
idle 600
noipx
file /etc/ppp/filters
proxyarp
ms-dns 192.168.7.15
ms-wins 192.168.7.15
refuse-chap
refuse-mschap

/etc/ppp/pap-secrets
*       bonza.rbpllc.com        ""
<username>   <yourserver.yourdomain.com>   <password>  *

/etc/ppp/chap-secrets
<username>           *               <password>          *

	Of course, use your own information and get rid of the "< >" in the pap 
and chap-secret files. Good luck. This works like a charm. Just don't 
forget to open [port 1723] in your firewall and router for accessing the 
server locally as well as remotely. Also, you may need:

# TAG: bcrelay <if>
bcrelay eth0

in /etc/pptpd.conf if you are running an older version of pptpd to 
improve remote browsing.


-- 
David C. Rankin, J.D., P.E.
Rankin Law Firm, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
Telephone: (936) 715-9333
Facsimile: (936) 715-9339
www.rankinlawfirm.com