DSM-G600, DNS-3xx and NSA-220 Hack Forum

brain · 2007-10-10 11:52:07

I have a DNS-323 working in Raid1 mode with two Seagate 500gb drives. All has been working very well for a week (for my purposes).

Two days ago I ran Windows Vista Home Premium "Backup and Restore Center" where the destination I changed from a local hard drive to the DNS-323. Now the application detected the network DNS-323 fine, actual Backups worked just fine from two machines on my network. However now is where the problem stated.

From one machine I can open the folder where the backups reside and I can move down the folder in that directory structure without any problems and see all the zip files that are created. (in the folder properties dialog in the security tab in the group or users names list are: Everybody, Nobody (DNS-323\Nobody) and 501 (DNS-323/501) all with special permission which allows read/write/delete etc)

However the backup from the other machine I cannot open the folder where the backups reside. The application said the backup was successful and by looking at the free space before and after the backup I am sure it did in fact work. But when I try to open the folder I get a "Access is denied message". So I though I would delete the folders and subfolder. Well same issue - access denied message occurs. (in the properties dialog in the security tab in the group or users names list is: Linux User... (DNS-323\admin) with special permission which allows read/write/delete etc). The other User and groups are gone!!!

So somehow the backup program on one machine has altered the folder security setting and this I think causes me the problem I have. I have tried many ways to recover the situation without any success. D-Link tech support were useless.

The question is how can I recover this situation - i.e. make the folders read/write/delete'able again?

p.s. The only difference between the two machine that I think may have something to do with the problem is:

On the machine where the folder properties remain unchanged, case a above, that is the DNS-323 folders are accessible in the registry
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\LMCompatibilityLevel = 0x3

On the machine where the folder properties have changed, case 2 above, that is the DNS-323 folders are NOT accessible in the registry
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\LMCompatibilityLevel = 0x1

blizzard182 · 2007-10-11 03:39:32

Do you have telnet and fonz fun_plug? If you do, tell me and I will tell you how to set up folder permissions at Linux level. That might work for you.

Regards

brain · 2007-10-11 06:28:37

I have telnet (server talk), not that I an an expert with it but I can follow instructions. For example I was able to log on to the DNS-323 using Telnet but did not know what to do next or what commends were available.

As to fun_plug - this I can install.

Also overnight I tried changing HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\LMCompatibilityLevel from 0x1 to 0x3 and then tried Windows Vista Home Premium "Backup and Restore Center" again. The folder it created I can opened/delete/etc. Therefore what I can confirm is that having HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\LMCompatibilityLevel = 0x1 may cause the problem.

I would appreciate the directions to remove the folders, thanks.

brain · 2007-10-11 10:02:09

I have now installed fun_plug and telnet (from http://dns323.kood.org/howto:telnet) and rebooted the machine.

Out of interest I tried to open the offending folder using FTP but received the message
ftp> cd
Remote directory GEOFF-PC
550 GEOFF-PC: Permission denied.
ftp>
when I tried to enter / open that folder to delete the files therein.

leper · 2007-10-11 21:44:18

Run the following:
telnet ip_address_to_dns323

You will be prompted with a black screen that looks like this:

Code:

BusyBox v1.6.1 (2007-07-22 13:51:10 CEST) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

/ #

Change directory (cd) to the directory that's causing problem (or rather, one level above this directory). It depends on which directory you picked when assigning your user access. For example:

If the directory you're having trouble with is named "images", and is located in the "ftp" folder, which is located on "Volume_1" (set via the webaccess ftp interface), you would:

Code:

# cd /mnt/HD_a2/ftp <enter>
# ls -la <enter>

The result of above commands shows something like this:

Code:

drwxrwxrwx    3 nobody   501          4096 Jul 29 20:29 images

If some of the rwx are shown as ---, your permissions somehow got changed. To solve this, you would:

Code:

chmod 777 images

After that, you should be able to do whatever with the directories (even via windows).

brain · 2007-10-12 04:05:58

Leper thank you for the direction but I seem to have a problem, perhaps you can help.

When I try to telnet I get the following:
telnet 192.168.0.32 21
220 DNS-323 FTP server (Version wu-2.6.2(52) Tue Jan 2 14:13:26 CST 2007) ready.

I end up with a FTP session not a busybox3 telnet session! Therefore I assume by fun_plug and starttelnet are not working but I cannot see any problems.

This is what is in my root drive - see top image in attachment DNS323gjb1.jpg (and the file records are unix LF format). I put onto DNS-323 as ASCII files.

In lnx_bin are the two files as per bottom image in attachment DNS323gjb1.jpg. I put onto DNS-323 as binary files.

For me "chmod 777" would not work but "quote site chmod 777" did work and I used this command against all 4 files.

And just to be sure here is what is in fun_plug.
dmesg > /mnt/Volume_1/dmesg.out
/mnt/Volume_1/nc -l -p 10000 -e /bin/sh &

mkdir /mnt/Volume_1/lnx_bin/
cd /mnt/Volume_1/lnx_bin/

/mnt/Volume_1/starttelnet.sh

export PATH=$PATH:/mnt/Volume_1/lnx_bin/

So I am not sure what I have done wrong. I am not sure what dmseg > .. does but I assume a file called dmseg.out should be created in root folder which is not the case. If this is correct then fun_plug is not working.

Suggestions?

brain · 2007-10-12 04:17:47

Also if I use port 23 this is what I get

telnet 192.168.0.32
Connecting To 192.168.0.32...Could not open connection to the host, on port 23:
Connect failed

MiK · 2007-10-12 08:42:03

I would suggest using this fun_plug: http://www.inreto.de/dns323/fun-plug/0.3/

..and make sure to read the README.txt!

leper · 2007-10-13 11:15:16

there must be something wrong with your telnet session then. maybe it isn't loaded as it should be. you should be able to connect to port 23 (21 is the ftp port, so that should not work).

try to rename the fun_plug file to something else (fun_plug.old), then reboot your dns323.

download this new fun_plug http://www.inreto.de/dns323/fun-plug/0. … 0.3.tar.gz. the newer version is a bit better (created by fonz, here on the forums).

unpack the funplug-0.3.tar.gz, using winrar (or whatever you have at hand) to the Volume_1 directory on the dns323. you should then have two new files there

Code:

fun_plug
fun_plug.tar

reboot the device again, and the new fun_plug will install itself. instead of the lnx_bin directory you should now have one called fun_plug.d. try telnet again.

Code:

telnet 192.168.0.32
OR
telnet name_of_dns323

you should not need to specify the port. i hope this helps you.

if it does not, download an ftp-client (like flashfxp) and connect to the device. you should be able to chmod (change permissions) through an ftp client as well.

brain · 2007-10-14 01:00:00

Again thank you Leper and others for your suggestions.

Before I proceed with http://www.inreto.de/dns323/fun-plug/0. … 0.3.tar.gz one question. It seems to refer to /mnt/HD_a2 in the code whereas by 1.03 system the volume I think is called /mnt/Volume_1.

Does this matter or is the code smart enough to figure our the volume name?

MiK · 2007-10-14 02:27:25

HD_a2 is the "real" name, whereas Volume_1 is an "alias". That's why /mnt/HD_a2 is used in fun_plug

brain · 2007-10-14 09:05:06

OK - thank you all (esp Leper and MiK), I have successfully removed the directories using the above information. All the guidance and advice worked a treat.

Of course it is now interesting to note that in using Windows Vista Home Premium "Backup and Restore Center" with HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\LMCompatibilityLevel = 0x1 the folder security on the DNS-323 is corrupted whereas when set to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\LMCompatibilityLevel = 0x3 (this I beliedve is the default) the folder security is not corrupted.

leper · 2007-10-14 12:21:45

glad to hear it worked out ok

DSM-G600, DNS-3xx and NSA-220 Hack Forum

Announcement

#1 2007-10-10 11:52:07

Canot delete folders on DNS-323

#2 2007-10-11 03:39:32

Re: Canot delete folders on DNS-323

#3 2007-10-11 06:28:37

Re: Canot delete folders on DNS-323

#4 2007-10-11 10:02:09

Re: Canot delete folders on DNS-323

#5 2007-10-11 21:44:18

Re: Canot delete folders on DNS-323

Code:

Code:

Code:

Code:

#6 2007-10-12 04:05:58

Re: Canot delete folders on DNS-323

#7 2007-10-12 04:17:47

Re: Canot delete folders on DNS-323

#8 2007-10-12 08:42:03

Re: Canot delete folders on DNS-323

#9 2007-10-13 11:15:16

Re: Canot delete folders on DNS-323

Code:

Code:

#10 2007-10-14 01:00:00

Re: Canot delete folders on DNS-323

#11 2007-10-14 02:27:25

Re: Canot delete folders on DNS-323

#12 2007-10-14 09:05:06

Re: Canot delete folders on DNS-323

#13 2007-10-14 12:21:45

Re: Canot delete folders on DNS-323

Board footer