17

My Mac mini has been working just fine with macOS Mojave as a VPN server following the migration method described in the macOS Server Service Migration Guide, but after upgrading to macOS Catalina there is trouble.

The VPN clients connect just fine on the internal network, but not on an external network; which makes the VPN server a bit pointless!

I can confirm that all was working well with the server running macOS Mojave, and my iOS 13 and iPadOS 13 clients have been connecting just fine; it is the upgrade to macOS Catalina on the server that has caused this problem.

Here are the log entries for a failed connection:

2019-10-12 20:42:38 CDT Incoming call... Address given to client = 10.0.0.224  
Sat Oct 12 20:42:38 2019 : Directory Services Authentication plugin initialized  
Sat Oct 12 20:42:38 2019 : Directory Services Authorization plugin initialized  
Sat Oct 12 20:42:38 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:38 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:38 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:38 2019 : L2TP incoming call in progress from 'xx.xx.xxx.xxx'...  
Sat Oct 12 20:42:38 2019 : L2TP received SCCRQ  
Sat Oct 12 20:42:38 2019 : L2TP sent SCCRP  
2019-10-12 20:42:38 CDT Incoming call... Address given to client = 10.0.0.225  
Sat Oct 12 20:42:38 2019 : Directory Services Authentication plugin initialized  
Sat Oct 12 20:42:38 2019 : Directory Services Authorization plugin initialized  
Sat Oct 12 20:42:38 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:38 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:38 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:38 2019 : L2TP incoming call in progress from 'xx.xx.xxx.xxx'...  
Sat Oct 12 20:42:38 2019 : L2TP received SCCRQ  
Sat Oct 12 20:42:38 2019 : L2TP sent SCCRP  
2019-10-12 20:42:40 CDT Incoming call... Address given to client = 10.0.0.226  
Sat Oct 12 20:42:40 2019 : Directory Services Authentication plugin initialized  
Sat Oct 12 20:42:40 2019 : Directory Services Authorization plugin initialized  
Sat Oct 12 20:42:40 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:40 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:40 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:40 2019 : L2TP incoming call in progress from 'xx.xx.xxx.xxx'...  
Sat Oct 12 20:42:40 2019 : L2TP received SCCRQ  
Sat Oct 12 20:42:40 2019 : L2TP sent SCCRP  
2019-10-12 20:42:44 CDT Incoming call... Address given to client = 10.0.0.227  
Sat Oct 12 20:42:44 2019 : Directory Services Authentication plugin initialized  
Sat Oct 12 20:42:44 2019 : Directory Services Authorization plugin initialized  
Sat Oct 12 20:42:44 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:44 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:44 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:44 2019 : L2TP incoming call in progress from 'xx.xx.xxx.xxx'...  
Sat Oct 12 20:42:44 2019 : L2TP received SCCRQ  
Sat Oct 12 20:42:44 2019 : L2TP sent SCCRP  
2019-10-12 20:42:48 CDT Incoming call... Address given to client = 10.0.0.228  
Sat Oct 12 20:42:48 2019 : Directory Services Authentication plugin initialized  
Sat Oct 12 20:42:48 2019 : Directory Services Authorization plugin initialized  
Sat Oct 12 20:42:48 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:48 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:48 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:48 2019 : L2TP incoming call in progress from 'xx.xx.xxx.xxx'...  
Sat Oct 12 20:42:48 2019 : L2TP received SCCRQ  
Sat Oct 12 20:42:48 2019 : L2TP sent SCCRP  
2019-10-12 20:42:52 CDT Incoming call... Address given to client = 10.0.0.229  
Sat Oct 12 20:42:52 2019 : Directory Services Authentication plugin initialized  
Sat Oct 12 20:42:52 2019 : Directory Services Authorization plugin initialized  
Sat Oct 12 20:42:52 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:52 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:52 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:52 2019 : L2TP incoming call in progress from 'xx.xx.xxx.xxx'...  
Sat Oct 12 20:42:52 2019 : L2TP received SCCRQ  
Sat Oct 12 20:42:52 2019 : L2TP sent SCCRP  
2019-10-12 20:42:56 CDT Incoming call... Address given to client = 10.0.0.230  
Sat Oct 12 20:42:56 2019 : Directory Services Authentication plugin initialized  
Sat Oct 12 20:42:56 2019 : Directory Services Authorization plugin initialized  
Sat Oct 12 20:42:56 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:56 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:56 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:56 2019 : L2TP incoming call in progress from 'xx.xx.xxx.xxx'...  
Sat Oct 12 20:42:56 2019 : L2TP received SCCRQ  
Sat Oct 12 20:42:56 2019 : L2TP sent SCCRP  
2019-10-12 20:42:58 CDT    --> Client with address = 10.0.0.224 has hung-up  
2019-10-12 20:42:58 CDT    --> Client with address = 10.0.0.225 has hung-up  
2019-10-12 20:43:00 CDT    --> Client with address = 10.0.0.226 has hung-up  
2019-10-12 20:43:04 CDT    --> Client with address = 10.0.0.227 has hung-up  
2019-10-12 20:43:08 CDT    --> Client with address = 10.0.0.228 has hung-up  
2019-10-12 20:43:12 CDT    --> Client with address = 10.0.0.229 has hung-up  
2019-10-12 20:43:16 CDT    --> Client with address = 10.0.0.230 has hung-up  

I’m currently using the built-in VPN on macOS Catalina 10.15.1

9
  • 2
    Can you edit in the bottom of the page the version of server.app and the sw_vers on the server in question?
    – bmike
    Commented Nov 4, 2019 at 12:48
  • 1
    Exact same client, exact same router and firewall. Only difference is the server running Catalina vice Mojave. Commented Nov 12, 2019 at 3:34
  • 3
    discussions.apple.com/thread/250730386 Commented Nov 12, 2019 at 3:38
  • 1
    If you connect your iPhone or iPad to a macOS computer and open Console.app (/Applications/Utilities/Console.app), you should see the device in the Sources list (you may need to open the sources list from View/View Sources). If you then filter on "ppp" or "racoon" you can see VPN related traffic. Commented Nov 15, 2019 at 1:49
  • 1
    Also need to see the client VPN settings and cipher preferences...
    – Dean Admin
    Commented Jul 11, 2021 at 18:34

1 Answer 1

1

The migration guide isn't well-designed: A lot of folks would likely miss this section.

The following services require users whose password type is RECOVERABLE:
VPN
• RADIUS
If macOS Server is installed and configured, you can use it to create additional users whose password type can be set to RECOVERABLE.
NOTE: If Server app is removed, you will no longer be able to create users whose password type is RECOVERABLE

3
  • @user3344646, did you give up? (Good advice from Peltzer above, too.) Commented Dec 12, 2021 at 18:24
  • I tried all this and nothing. I had server installed and the account was set with the password recoverable. Commented Dec 13, 2021 at 19:17
  • Ah well. I thought I'd stumbled on the answer. I guess it will be for some. (I presume you meant password TYPE recoverable. You didn't respond to Peltzer.) Commented Dec 14, 2021 at 23:44

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .