DSM-G600, DNS-3xx and NSA-220 Hack Forum

dropbear supports public key authentication, too. /ffp is only present in the 0.5 funplug.

map7 wrote:

I'm using funplug 0.4, then ipkg, then openssh through ipkg.

I want to use openssh instead of dropbear so that i can connect to a ssh using an rsa public key.

The problem is I cannot start it.  On the wiki it says to start it through 'sh /ffp/start/sshd.sh start' but I don't have an /ffp directory.  I do have a /opt/etc/init.d/S40sshd file but it requires $SSHD_ENABLE to be set to yes. 

Where do I set this environment variable?

# cat /opt/etc/default/openssh
SSHD_ENABLE=yes
SSHD_NO_PID_KILLALL=/opt/sbin/sshd

It is sourced at the very beginning of /opt/etc/init.d/S40sshd

sjmac wrote:

Look in /opt/etc/init.d for the optware startup scripts, there should be one for openssh.

You could copy that to your /mnt/HD_a2/fun_plug.d/start folder. (Only minor mods needed, if any?)

Unfortunately, when I started openssh server and connected, I then had to type in a secret key:
5784468

This unlocks the built in busybox shell.

fonz - can you offer a clue about how I could hack the openssh server to do this automatically, or tweak the configuration so that the more up-to-date busybox included in your fun_plug 0.4 is used instead?

On optware platforms, I usually edit /etc/passwd and set the shell of normal user to /opt/bin/bash. Sometimes I also need to edit /etc/shells to add /opt/bin/bash there.
There're also quite recent busybox, dash, rc, tcsh, zsh available in the feed.

See http://trac.nslu2-linux.org/optware/bro … rc.optware on how to invoke all the start scripts in /opt/etc/init.d

sjmac wrote:

Or someone could make the optware openssh depend on the optware busybox on the DNS323, and use /opt/bin/sh all the time.

BTW, does anyone have any experience that says that bash is too heavy for the DNS323? Or know how much space/CPU effort BusyBox saves?

I don't think that's a good idea. The openssh package should use whatever shell the user likes.

Even for nslu2 bash is not too heavy, it should be fine for dns-323.