DSM-G600, DNS-3xx and NSA-220 Hack Forum

- People in these forums have gotten ssh working using a debian chroot, see:
http://dns323.kood.org/howto:chroot_debian
I found confirmation of this by searching the forum threads for "ssh", and I found:
e.g: http://dns323.kood.org/forum/p980-20070 … .html#p980

- I don't see a default binary for ssh on KRH's great download site (see posting: http://dns323.kood.org/forum/p850-20070 … .html#p850), but you will find telnet there (and you can potentially tunnel it securely - though I agree I wouldn't want to do that, if I could use ssh, either):
KRH download site:
http://www.dns323.info/

- From what I've read, you can ALSO cross-compile an ssh binary (a standalone application) from these instructions:
http://dns323.kood.org/howto:crosscompile

Last edited by someguy (2007-02-25 05:24:34)

i have build the files budt its missing /dev/random so i can not get it working right now.

budt im working on it.

(random fixed soon there if all go nice)

Last edited by KRH (2007-02-27 19:50:48)

you can create /dev/random with:

            mknod /dev/random c 1 8

i think the terminal problem may be solved by compiling dropbear
without --disable-openpty (see attached .dnsbuild script).  it works
fine with /dev/ptmx setup like this:

            mknod -m 0666 /dev/ptmx c 5 2
            mkdir /dev/pts
            mount -t devpts devpts /dev/pts

i did all that and successfully logged into my dns box. however:

i didn't get a prompt when using the default shell (/bin/sh, busybox
1.00-pre1).  login is successful, and I get the welcome message, but
no prompt.

but it works when i use my busybox 1.4.2 ash. for this, i had to
change my login shell in /etc/passwd to /opt/bin/ash, and add
/opt/bin/ash to /etc/shells (using telnet+vi or nfs).

bad news is that /etc/passwd and /etc/shells are replaced from
/.../mtd1 after reboot...  so your dropbear start script should do the
modifications to /etc/passwd and /etc/shells automatically.

ps: you can find my dropbear-0.49 package at http://www.inreto.de/dns323/

tobyg wrote:

Type "5784468" and hit enter after you see the "Busybox 1.0.0" welcome banner when telnetting/ssh'ing in.

Should've been 4 8 15 16 23 42

/Apan

@utilityboy, can you post your ssh binary? I'm sure a lot of us could make good use of it.  It would be great to get it on the download site. Thanks!

someguy wrote:

@utilityboy, can you post your ssh binary? I'm sure a lot of us could make good use of it.  It would be great to get it on the download site. Thanks!

i just followed fonz's instructions and grabbed the package from his site: http://www.inreto.de/dns323/

SFTP?

Anyone who can post a quick instruction on how to get an SFTP server up on the DNS-323? I got the native dropbear (thanks fonz) up and running but that does not come with an SFTP server. Dropbear works fine and I can connect.

I tried to do it in chrooted etch. I have chrooted etch set up as described in the howto, seems to work fine. I start ssh using /etc/init.d/ssh start, it seems to start, although I can not see an SSH process using top? When I connect using ssh under fedora I get a question about password, I type it and then the promt disappear. When I try to connect using winSCP, and get the response that the server does not run an SFTP service? I am probably missing something with the chrooted environment, with user setup?

Can anyone who got this working in chrooted etch write a small howto?

Or if anyone got a toolchain up and have OpenSSH compiled, can you share? This would be fantastic as it would take the burden of having to run a bootsrtap environment for the SSH server.

Also, considering the discussion regarding SSHFS, have anyone solved that? I think it can not be done on dropbear due to the lack of an SFTP daemon, or am I wrong? As far as i understand SSHFS is depending on SFTP rather than SSH?

Any help seriously appreciated

Last edited by bob (2007-04-15 20:49:04)

Yes fonz,

that is what I have understood as well. That means we need a native OpenSSH binary, or can I somehow use the one in chrooted etch? Your dropbear binary runs without chrooted etch which is the beauty of the whole story.

/bob

Here it is. It wasn't as easy as expected, though. To use it:
- copy attached sftp-server binary to /mnt/HD_a2/fun_plug.d/bin
- replace /mnt/HD_a2/fun_plug.d/start/dropbear.sh script with the attached version

A small change to dropbear.sh ("chmod a+w /dev/null") is needed, because for some reason /dev/null wasn't world-writeable on my 323 (firmware 1.02).

Last edited by fonz (2007-04-16 22:36:19)

fonz to the rescue! I'm looking forward to trying it out. 
If it works, the only thing missing that I'd wish for is the equivalent of a dropbear denyhosts.

someguy wrote:

If it works, the only thing missing that I'd wish for is the equivalent of a dropbear denyhosts.

After a quick look at the denyhosts site, I think that will require quite a bit of work. So far I see three problems:
- dropbear doesn't read "hosts.deny" / doesn't use libwrap
- dropbear's log format is different
- I'm not going to compile python (in the foreseeable future)

Approaches to the first problem could be:
- Change dropbear to use libwrap
- Run dropbear from inetd, using tcpd

IMO, second and third problems are best solved by rewriting denyhosts, and not use python.

Hi,

I have a (probably simple) problem that I just can not understand. I have installed fonz binaries (dropbear+ssh). I can start dropbear (using ps I can see it is running).

I login using telnet  and add a user (useradd -p test test) and tries to connect using cygwins ssh client and get the following error message:

[1291] Apr 18 19:29:21 exit after auth (test): error changing directory

I figured that this is because there is no user /home/test library so I make one:
mkdir /home/test
chmod 777 /home/test
When I try to connect I now get the following message:
[1311] Apr 18 19:36:56 exit after auth (test): child failed

I also changed the /etc/passwd and /etc/shells to use ash as described by fonz above, but it does not change anything.

What am I doing wrong?

Pleez help

/bob