Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way to configure the PPTP server under Ubuntu 10.04 to allow users to log in with their username/password from the local machine (the Ubuntu server, that is, not where they are connecting from)? I don't want to have to add a new username to /etc/ppp/chap-secrets every time I create a user, nor do I particularly want to store passwords in plain text like that.

share|improve this question
PPTP encryption is fundamentally broken. Unless it is used briefly and casually, OR you're forced to use it for whatever reason, I'd think about looking at other solutions. (see – Avery Payne May 12 '14 at 20:34

It's not possible to store them crypted, because pptpd does CHAP which is a challenge response procedure. Your server needs your password in cleartext to do it.

share|improve this answer

The option is called "login":

Use the system password database for authenticating the peer using PAP, and record the user in the system wtmp file. Note that the peer must have an entry in the /etc/ppp/pap-secrets file as well as the system password database to be allowed access.

Now you would need require-pap since users would have to send theirs passwords unencrypted but that's starting smell as PBP (Pretty Bad Privacy), isn't it? Also, it is PBP even with MPPE.

So, concluding, that was bad idea.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.