DSM-G600, DNS-3xx and NSA-220 Hack Forum

fonz wrote:

[There're examples in the lighttpd documentation:
http://trac.lighttpd.net/trac/wiki/Docs … ration#id1
http://trac.lighttpd.net/trac/wiki/Tuto … figuration  (10 minutes example)

Thanks fonz for those links.  I tried those but just can't get it to work.  For some reason lighttpd is not running after making the changes and giving it the sh command.  I am getting confused with what I already have in my lighttpd.conf file and what I need to add and where.

Ok, after getting frustrated as hell with this.  I dug more in to it and started out from scratch.  This link also helped me as well.
http://www.cyberciti.biz/faq/howto-ligh … iguration/

Apparently I was confused when I said I wanted a virtual host.  Who knows, maybe there is a way for it to work.  But that wasn't working the way I wanted it using the links fonz gave me.  So I made a completely separate directory for my second domain.  Made the two new *.conf files for each domain.  And made the settings in the original lighttpd.conf to point to those two separate domains when called on.

Also, Thanks to the code KyleK posted above for "lighttpd -f.../../" helped in troubleshooting any errors.

Thanks!

Fonz,
I'm having some trouble with ffp 0.5.  I have been downloading it several times in the past couple of weeks, as I have been doing some experimentation mdadm and have been changing partitions and formatting seveal times a day.  No problems unitl yesterday.  Now it is no longer fulley loading.  I have tried it on 2 fresh hard drives.  It is hanging up while updating /etc/shadow.  Since that is happening, it is not getting far enought to load telnet.  I compared it to a version that I have running on my other unit, and the thing that is different is passwd.sh.  It is not on my older unit.  I know it was added in April, but I don't recall it being executable by default.  I also see that the fun_plug was updated this past Thursday, which is the day before the problem began.  Could something have been accidently done that is causing the problem? 

Anyway, that is the script being run at the end of the log.  Below is the end of the log from a fresh installation (fresh format on clean disk, separate volume):

var/packages/shadow-4.0.18.2-2
var/packages/strace-4.5.16-3
var/packages/unfs3-0.9.20-4
var/lib
var/lib/sshd
tmp
libexec
libexec/ssh-keysign
libexec/sftp-server
* OK
* Running /ffp/etc/rc ...
* /ffp/start/rcS.sh ...
* /ffp/start/adjtimex.sh inactive
* /ffp/start/passwd.sh ...
Saving /etc/passwd to /etc/passwd.orig ...
Changing shells: /bin/sh -> /ffp/bin/sh ...
Updating /etc/shadow ...

bq041 wrote:

Code:

Updating /etc/shadow ...

I've seen this before, and it's most likely a problem with your password files. Here's the workaround: Edit fun_plug and insert the following chmod command:

...
# run commands
chmod a-x /ffp/start/passwd.sh
...

passwd.sh runs pwconv, which has a bug and may hang. pwconv(8):

BUGS
       Errors in the password or group files (such as invalid or duplicate entries) may cause these programs to loop forever or fail in other strange ways. Please run
       pwck and grpck to correct any such errors before converting to or from shadow passwords or groups.

After running pwck and grpck to fix the problems (I guess, it'll find a duplicate user, ftp?), don't forget to run store-passwd.sh to write the changes to flash. You can then remove the chmod line from fun_plug.

I don't know what breaks the password files. It didn't happen on my dns.

@Fonz

I'm using funplug-0.5 with lighttpd and PHP (all latest versions) and a PHP script is complaining that the function gzinflate() is undefined. I check the PHP configuration and apparently it was compiled with zlib support. Do you know why PHP still doesn't "know" this function?

Sorry to bump in...

I have a newbie question... 4 months ago, I installed Fun_plug 1.03 reading numerous help files around here and installed the Backup procedure by Chumby. Everything went fine till recently when I tried to access my backed up files 5 days ago and found out that i encountered "access denied" - probably some form of  administrative rights... anyway...

I've re-formated my 2 drives, upgraded my dns-323 firmware to 1.05 and tried to install fonz's fun_plug 0.5 to no avail... The installation procedure is so simple, place the 2 files in Volume_1 and reboot. The 2 files simply don't decompressed in my Volume_1 . I even tried to install .04 after "unRARing" them in my Volume_1 and after the reboots (physically shutting off and powering back the unit) I still find those 2 files intact no matter what I do... I placed my files (either .04 or .05) there using Filezilla after allowing ftp in the DNS web interface.

So my case is: DNS-323, Vista and a week-end spent trying to put fun_plug back on.

In desperation I post here, hoping somebody can enlighted me on what I am doing wrong.

Thanks in advance for any hints

Solo

I've had exactly the same Problem. The fun_plug gets started from Volume_2, but installs itself to Volume_1. Try putting the Files to Volume_2

mrmiketheman wrote:

YEAHHH  FONZ! 

So for others who encounter a problem logging in as root with SSH under fonz 0.5. Here are the detailed instructions for installing openssh on fonz 0.5.

1. Download openssh and shadow from fonz's 0.5 distribution http://www.inreto.de/dns323/fun-plug/0.5-experimental/

2. funpkg -i the openssh, openssl (for libcrypt), and shadow packages (I don't recall any other dependencies, perhaps others can comment).

3. Add root to the /etc/shadow password file using fonz's "Setting Passwords" instructions at http://www.inreto.de/dns323/fun-plug/0.3/ (attached below). First add root to /etc/shadow, THEN while logged in as root, run passwd to set the root passwd in the /etc/shadow file.

4. 'chage -l root' will show when the password expires (note first field)
       # chage -l root
       Last password change                                    : password must be changed
       Password expires                                        : never
       Password inactive                                       : never
       Account expires                                         : never
       Minimum number of days between password change          : 0
       Maximum number of days between password change          : 99999
       Number of days of warning before password expires       : 7
   

5. 'chage -d 2008-04-04 root' will change the last password change date to something more current

6. 'pwconv' will copy changes from /etc/passwd to /etc/shadow

6. Since store-passwd.sh is NOT included in 0.5 yet, I've attached it below from the 0.3 distribution. Make sure you run store-passwd.sh at the end to save your changes to NVRAM, otherwise you'll get to do all of this again at the next reboot

ADDENDUM:
--------------
http://www.inreto.de/dns323/fun-plug/0.3/  change root password excerpt.
      -- Setting passwords --

      passwd and smbpasswd can be used to change passwords on the command
      line. To make password changes permanent (i.e. survive reboots), the
      changed password files must be written to flash memory. A script is
      included for that purpose. After running passwd or smbpasswd, run:

       store-passwd.sh

      By default, root has no entry in /etc/shadow and passwd will store
      the password in /etc/passwd instead. If you want your root password
      in /etc/shadow, you can manually add an entry before running passwd:

       echo "root::0:0:99999:7:::" >>/etc/shadow

      IMPORTANT: Be sure you run the command exactly as shown. Screwing up
      the shadow file can cause serious problems.

Can someone please try to walk me through getting the SSH set up on this? I can't seem to figure this thing out, and it is totally frustrating me....

Steps 1 and 2 I have done... no problem.... Here is the output from steps 1 & 2... (2nd time I went to install them)...

/mnt/HD_a2/packages # funpkg -i openssh-5.0p1-3.tgz
Skipping openssh-5.0p1-3.tgz (installed: openssh-5.0p1-2)
/mnt/HD_a2/packages # funpkg -i openssl-0.9.8g-3.tgz
Skipping openssl-0.9.8g-3.tgz (already installed)
/mnt/HD_a2/packages # funpkg -i shadow-4.0.18.2-2.tgz
Skipping shadow-4.0.18.2-2.tgz (already installed)
/mnt/HD_a2/packages #

Then Step 3 is where I get lost....  I have NO IDEA how to set the root password........ ?????????
I used the echo "root::0:0:99999:7:::" >>/etc/shadow
and "root::0:0:99999:7:::" was added to shadow when I look at it with vi.... ok..... so NOW what?

I run the step 4 command, and this is what I get.....
/mnt/HD_a2/packages # chage -l root
Last password change                                    : Jun 16, 2008
Password expires                                        : never
Password inactive                                       : never
Account expires                                         : never
Minimum number of days between password change          : 0
Maximum number of days between password change          : 99999
Number of days of warning before password expires       : 7
/mnt/HD_a2/packages #

But WHY does it say last password change was June 16th 2008?????? How can that be if it ISN'T 06/16/2008 yet, and I was never PROMPTED to enter a password for root???

Where do I go from here? How do I choose a password for root for SSH? Right now, I have telnet access enable through my router so I can fiddle with this from work, but ovbiously it isn't good to leave it open, so I manually turn off port forwarding on port 23 for telnet....

Thanks guys for helping a linux N00b....

Thanks KyleK for the help, it is GREATLY appreciated!!!!

I ran the passwd root as you instructed, and plicked & confirmed a password on this....

Then I ran step 5 with:
chage -d 2008-06-16 root

Finally, I ran:
pwconv
and also ran:
store-passwd.sh

after a reboot, etc/shadow has the following in it:

root:UBycaXMBbDxjs:14046:0:99999:7:::
root::0:0:99999:7:::

Then I try to connect to the DNS with Putty, and I get the following errors......
2008-06-16 03:24:07    Looking up host "10.10.5.30"
2008-06-16 03:24:07    Connecting to 10.10.5.30 port 22
2008-06-16 03:24:08    Failed to connect to 10.10.5.30: Network error: Connection refused
2008-06-16 03:24:08    Network error: Connection refused


Any other outputs I can provide?

Ethereal_Dragon wrote:

after a reboot, etc/shadow has the following in it:

root:UBycaXMBbDxjs:14046:0:99999:7:::
root::0:0:99999:7:::

Now you have a duplicate. Run 'pwck' to fix it. It will ask to delete the duplicate lines. Enter 'n' for the first one, 'y' for the second one (root::0:0:99999:7::. Don't forget store-passwd.sh, when finished.

Ethereal_Dragon wrote:

When I try to use PuTTY to get into it, I am still getting connection refused.

You did start the ssh server, right? http://dns323.kood.org/howto:ffp#openss … ell_server
putty is a good ssh client for windows. It can both connect to telnet and ssh servers - be sure you select the correct method.

Well everyone... I feel like a total MORON... The SSH is working PERFECTLY FINE... The problem was that the FIREWALL at work (corporate firewall, nothing I can do) was blocking the SSH request. I tested it from my LAN out to the internet and back, works fine. I disabled the port forwarding just to MAKE SURE it wasn't just hitting it on the LAN... Didn't go through at that point.  So, I guess I will have to leave telnet access up and running for while I am at work. (with port forwarding on port 23 turned off of COURSE).

Thanks again everyone!!!

Hi

Problem (i) failed updating of packages:
I am trying to update ffp 0.5. I have rsynced the packages and I am installing as follows, but in fact things like busybox are not upgraded. How can I force an upgrade?  (see log below)

Problem (ii) terminal colors
I also have some other problems that might be related to these failed upgrades. I have 2 DNS323 and the second one the terminal colors are not the same as the first :-( On first box ls -l gives the nice coloured display, wheras on the second all black and white. I can temporarily force colour if I use the optional argument to ls, but this does not stick. Any advice on what to change to get back the colouring would be welcome.

Thanks

root@EROS:/mnt/HD_a2/packages# funpkg -i *.tgz               
Skipping apr-1.2.12-2.tgz (already installed)
Skipping apr-util-1.2.12-1.tgz (already installed)
Skipping autoconf-2.61-2.tgz (already installed)
Skipping automake-1.10.1-2.tgz (already installed)
Skipping bash-3.2-3.tgz (already installed)
Skipping binutils-2.18.50.0.1-4.tgz (already installed)
Skipping bison-2.3-3.tgz (already installed)
Skipping btpd-0.13-4.tgz (already installed)
Skipping busybox-1.10.4-1.tgz (installed: busybox-1.10.0-4)
Skipping bzip2-1.0.5-2.tgz (already installed)
Skipping convmv-1.12-2.tgz (already installed)
Skipping coreutils-6.10-2.tgz (already installed)
Skipping cvs-1.11.22-2.tgz (already installed)
Skipping db42-4.2.52-1.tgz (already installed)
Skipping dejagnu-1.4.4-2.tgz (already installed)
Skipping dialog-1.1-3.tgz (already installed)
Skipping diffutils-2.8.7-3.tgz (already installed)
Skipping dns323-utils-0.7.176-2.tgz (already installed)
Skipping dnsmasq-2.41-2.tgz (already installed)
Skipping e2fsprogs-1.40.6-3.tgz (already installed)
Skipping expat-2.0.1-3.tgz (already installed)
Skipping expect-5.43.0-2.tgz (already installed)
Skipping ffp-scripts-0.5-16.tgz (already installed)
Skipping file-4.23-3.tgz (already installed)
Skipping findutils-4.2.32-2.tgz (already installed)
Skipping flex-2.5.33-5.tgz (installed: flex-2.5.33-4)
Skipping gawk-3.1.6-3.tgz (already installed)
Skipping gcc-4.1-2.tgz (already installed)
Skipping gdb-6.6-2.tgz (already installed)
Skipping gettext-0.17-2.tgz (already installed)
Skipping grep-2.5.3-2.tgz (already installed)
Skipping groff-1.19.2-3.tgz (already installed)
Skipping gzip-1.3.12-2.tgz (already installed)
Skipping id3lib-3.8.3-3.tgz (already installed)
Skipping imagemagick-6.4.1_6-1.tgz (already installed)
Skipping joe-3.5-1.tgz (already installed)
Skipping kernel-headers-2.6.9.1-2.tgz (already installed)
Skipping less-418-3.tgz (already installed)
Skipping libiconv-1.12-3.tgz (already installed)
Skipping libjpeg-6b-1.tgz (already installed)
Skipping libnbcompat-cvs-2.tgz (already installed)
Skipping libpng-1.2.29-1.tgz (already installed)
Skipping libtool-1.5.24-1.tgz (already installed)
Skipping libusb-0.1.12-1.tgz (already installed)
Skipping libxml2-2.6.31-2.tgz (already installed)
Skipping lighttpd-1.4.19-4.tgz (already installed)
Skipping lsof-4.80-1.tgz (already installed)
Skipping m4-1.4.10-2.tgz (already installed)
Skipping make-3.81-3.tgz (already installed)
Skipping man-1.6e-3.tgz (already installed)
Skipping mediatomb-0.11.0-5.tgz (already installed)
Skipping ncurses-5.6-4.tgz (already installed)
Skipping neon-0.25.5-1.tgz (already installed)
Skipping netatalk-2.0.3-2.tgz (already installed)
Skipping nfs-utils-1.1.0-4.tgz (already installed)
Skipping ntp-4.2.4p4-4.tgz (already installed)
Skipping openssh-5.0p1-3.tgz (installed: openssh-5.0p1-1)
Skipping openssl-0.9.8g-3.tgz (already installed)
Skipping parted-1.8.8-1.tgz (already installed)
Skipping patch-2.5.9-3.tgz (already installed)
Skipping pcre-7.4-3.tgz (already installed)
Skipping perl-5.8.8-2.tgz (already installed)
Skipping php-5.2.6-2.tgz (installed: php-5.2.5-4)
Skipping portmap-6.0-4.tgz (already installed)
Skipping rcorder-cvs-4.tgz (already installed)
Skipping readline-5.2-3.tgz (already installed)
Skipping rsync-3.0.2-2.tgz (already installed)
Skipping screen-4.0.3-2.tgz (already installed)
Skipping sed-4.1.5-3.tgz (already installed)
Skipping shadow-4.0.18.2-2.tgz (already installed)
Skipping smartmontools-5.38-3.tgz (already installed)
Skipping sqlite-3.5.6-3.tgz (already installed)
Skipping strace-4.5.16-3.tgz (already installed)
Skipping subversion-1.4.6-2.tgz (already installed)
Skipping tar-1.19-2.tgz (already installed)
Skipping tcl-8.4.16-3.tgz (already installed)
Skipping tcp_wrappers-7.6-3.tgz (already installed)
Skipping texinfo-4.11-3.tgz (already installed)
Skipping tree-1.5.1.1-2.tgz (already installed)
Skipping uclibc-0.9.29-3.tgz (already installed)
Skipping unfs3-0.9.20-4.tgz (already installed)
Skipping usbutils-0.73-1.tgz (already installed)
Skipping vim-7.1-2.tgz (already installed)
Skipping zlib-1.2.3-3.tgz (already installed)