Web server / Discussion

This is the discussion related to the wiki page Web server.

page 1 of 212next »

Sudoers file

newpenguin 28 May 2008 13:53

I have managed to follow the instructions up to the point of opening port 8080 and being able to see the files from outside my network.

When I try to go further I run into all sorts of problems.

I have tried editing the sudoers file but instead of having a list like the tutorial suggests the sudoer file looks like-

# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
#

# Host alias specification

# User alias specification

# Cmnd alias specification

# Defaults specification

# Runas alias specification

# User privilege specification
root        ALL=(ALL) ALL

# Uncomment to allow people in group wheel to run all commands
# %wheel    ALL=(ALL)    ALL

# Same thing without a password
# %wheel    ALL=(ALL)    NOPASSWD: ALL

# Samples
# %users  ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users  localhost=/sbin/shutdown -h now

www-data    ALL=(root) NOPASSWD : /usr/bin/install,\
                /usr/bin/diff,\
                /usr/www/nbin/mdadm.sh,\
                /usr/www/nbin/ethtool.sh,\
                /usr/www/nbin/chmod.sh,\
                /usr/www/nbin/chown.sh,\
                /usr/www/nbin/chgrp.sh,\
                /usr/www/nbin/touch.sh,\
                /usr/www/nbin/mkdir.sh,\
                /usr/www/nbin/fdisk.sh,\
                /usr/www/nbin/fs_addUser.sh,\
                /usr/www/nbin/fs_chgPasswd.sh,\
                /usr/www/nbin/fs_delUser.sh,\
                /usr/www/nbin/makeSharedir.sh,\
                /usr/www/nbin/renameShare.sh,\
                /usr/www/nbin/restartSamba.sh,\
                /usr/www/nbin/restartNetwork.sh,\
                /usr/www/nbin/quickRestartNetwork.sh,\
                /usr/www/nbin/rmShareDir.sh,\
                /usr/www/nbin/setAdminUser.sh,\
                /usr/www/nbin/setDeviceDate.sh,\
                /usr/www/nbin/setDeviceTime.sh,\
                /usr/www/nbin/updNetwork.sh,\
                /usr/www/nbin/dm_setDriveType.sh,\
                /usr/www/nbin/dm_formatExternal.sh,\
                /usr/www/nbin/dm_formatInternal.sh,\
                /usr/www/nbin/dm_removeUSBdevice.sh,\
                /usr/www/nbin/shareControl.sh,\
                /usr/www/nbin/wget.sh,\
                /usr/www/nbin/commonfuncs,\
        /usr/www/nbin/applyupgrade.sh,\
        /usr/www/nbin/checkupgrade.sh,\
        /usr/www/nbin/getupgrade.sh,\
                /usr/mionet/mionetd,\
                /etc/RAID-message-sender-en.sh,\
                /sbin/mdadm --detail *,\
                /bin/dd of=/dev/null count=1b if=*,\
                /etc/init.d/samba.sh,\
                /sbin/hdparm -I /dev/sda /dev/sdb,\
                /sbin/hdparm -I /dev/sda,\
                /sbin/hdparm -I /dev/sdb,\
                /bin/sh -c /bin/echo * >/sys/devices/platform/wdc-fan/speed,\
                /bin/sh -c /bin/echo * >/sys/class/leds/*,\
                /usr/www/nbin/updateNFS.sh,\
        /usr/www/nbin/copy.sh,\
        /usr/www/nbin/remove.sh,\
        /usr/www/nbin/check_open_files.sh,\
        /usr/www/nbin/inetdControl.sh,\
        /usr/www/nbin/cleanUpgradeDir.sh

When I try to add "/shares/internal/PUBLIC/WWW/Admin/SetWebUser.sh" to the end of the list with visudo I get a syntax error at line 79.

Where am I going wrong?

Thanks

Alan

Re: Sudoers file

TeinturMan 28 May 2008 18:56

Hi NewPenguin
You simply must add "/shares/internal/PUBLIC/WWW/Admin/SetWebUser.sh" at the end of the list,
but be carefull that at each end of line, there is a ",\" , except for the last line.

==> In your case, you need to replace
/usr/www/nbin/cleanUpgradeDir.sh

by

/usr/www/nbin/cleanUpgradeDir.sh,/shares/internal/PUBLIC/WWW/Admin/SetWebUser.sh

Regards,

Teinturman.

Re: Sudoers file

TeinturMan 28 May 2008 19:14

Hi,
I realized that my explanations were not clear enough .
I have updated the "web server" tutorial to make this part more clear.

Thanks for your post.
Teinturman.

Re: Sudoers file

newpenguin 28 May 2008 19:20

Thank you

Following the tutorial

newpenguin 30 May 2008 21:38

Just a note to say thanks to Teinturman for his help in getting this secure web access set up.

I had a few problems since I use a windows XP machine usually and I have a limited experience with unix.

To connect to the mybook I used ssh access with PuTTy and I installed nano with the optware installation.
To get the larger pieces of code into the files I used EditPad Lite and transferred them onto the mybook using SmartFTP using a "SFTP over SSH" connection logged in as root (I didn't disable login as root until after I'd completed the tutorial)

Note the default configuration of EditPad Lite saves the files in DOS compatible format (change this to unix encoding) which was a major cause of my problems.

I hope this helps somebody in a similar situation.

Alan

SSL Error

ex007 04 Jul 2008 10:40

Greate Tutorial TeinturMan! Exelent work!

However I got an unrelated error, the secure part of the webserver does not work for me. I've checked the log file and I get the following errors each time I try to access an secure webpage.

10:18:22: (connections.c.245) SSL: 1 error:00000000:lib(0):func(0):reason(0)
10:18:27: (connections.c.245) SSL: 1 error:00000000:lib(0):func(0):reason(0)

I've searched the web for the exact error without sucsess but got som hints that it might be the lighthttpd server version that has a bug. I will continue to look into it but I hope that anyone here might have experiens of the problem earlier.

Kind Regards
ex007

Re: SSL Error

TeinturMan 04 Jul 2008 10:55

Hi ex007,
It is probably not a version problem of lighttpd as all Mybooks seems to have the same…

some possibilities are :
Check the Lighttpd.conf File. ( or send it to me , so that i can check if everything is ok.)

Check the files and permissions on the /share/internal/PUBLIC/WWW folder.
Send us the result of the following command :
ls -l /share/internal/PUBLIC/WWW folder.

Have you done some installations before the webserver tutorial or is it your first hack on your Mybook?

Re: SSL Error

ex007 04 Jul 2008 13:39

Thank you for a fast reply. I've checked the configuration file and the righs of the listing but can't se anything. This is the first 'hack' I've done, although I've restored the drive acording to the Rescue Procedure instructions.

The config file have I uploaded to another site.
lighttpd.conf

Here is a filelisting of the Website structure.

[root@MyBookWorld PUBLIC]# ls -lR
.:
total 4
drwxr-xr-x 5 root root 4096 Jul  4 09:31 WWW

./WWW:
total 16
drwxr-xr-x 2 root root 4096 Jul  4 09:44 Admin
drwxr-xr-x 2 root root 4096 Jul  4 10:29 Public
drwxr-xr-x 2 root root 4096 Jul  4 10:29 Welcome
-rw-r--r-- 1 root root 1628 Jul  4 09:40 fr.pem

./WWW/Admin:
total 20
-rw-r--rw- 1 root root    0 Jul  4 09:44 Adminaccess.log
-rwxr-xr-x 1 root root 3011 Jul  4 09:31 Globe.gif
-rwxr-xr-x 1 root root  560 Jul  4 09:40 SetWebUser.sh
-rwxr-xr-x 1 root root 6018 Jul  4 09:40 WebMgr.pl
-rw-r--r-- 1 root root   83 Jul  4 09:41 WebUsers.htdigest.user
-rw-r--rw- 1 root root    0 Jul  4 09:31 access.log

./WWW/Public:
total 8
-rw-r--r-- 1 root root 27 Jul  4 09:29 Welcome.htm
-rw-r--r-- 1 root root 21 Jul  4 10:29 index.php

./WWW/Welcome:
total 4
-rw-r--r-- 1 root root 21 Jul  4 10:29 index.php

Last edited on 04 Jul 2008 13:49 by ex007 Show more

Re: SSL Error

TeinturMan 05 Jul 2008 14:35

Sorry, i have no idea what could be the cause of this SSL ERROR problem…

(account deleted) 21 Aug 2008 19:46

he gives me

[root@Festplatte ~]# 2008-08-21 21:32:08: (configfile.c.796) source: /etc/lighttpd/lighttpd.conf line: 120 pos: 1 parser failed somehow near here: }

when i want to start lighttp

line 120:

$SERVER["socket"] == ":3210" {
index-file.names = ( "WebMgr.pl" )
fastcgi.server = ( "WebMgr.pl" =>
((
"socket" => "/tmp/lighttpd.webmgr.socket",
"bin-path" => "/shares/internal/PUBLIC/WWW/Admin/WebMgr.pl",
"check-local" => "disable",
"min-procs" => 1,
"max-procs" => 1,
"idle-timeout" => 30,
)),
".pl" => (( "socket" => "",)),
"nasMaster.pl" => (( "socket" => "",))
)
ssl.engine = "enable"
ssl.pemfile = "/shares/internal/PUBLIC/WWW/fr.pem"

Re:

TeinturMan 21 Aug 2008 22:46

Hi, have you closed the end brackets ( }) ?
Have you checked that Webmgr.pl was existing?
same for fr.pem?
regards.

Re:

(account deleted) 22 Aug 2008 14:09

Here my Config, both files are there, i've done ervy step

server.document-root = "/usr/www/lib/"
server.pid-file = "/var/run/lighttpd.pid"
server.errorlog = "/var/log/lighttpd/error.log"

server.port = 80

server.username = "www-data"
server.groupname = "www-data"

server.modules = (
"mod_auth",
"mod_access",
"mod_alias",
"mod_cgi",
"mod_fastcgi",
"mod_accesslog"
)

server.errorfile-prefix = "/usr/www/lib/error-"

mimetype.assign = (
".html" => "text/html",
".txt" => "text/plain",
".jpg" => "image/jpeg",
".png" => "image/png",
".gif" => "image/gif",
".css" => "text/css"
)

#accesslog.filename = "/var/log/lighttpd/access.log"

static-file.exclude-extensions = ( ".fcgi", ".php", ".rb", "~", ".inc", ".cgi" )
index-file.names = ( "nasMaster.pl" )

1. bruce - I don't think we need this now…

#cgi.assign = ( ".cgi" => "/usr/bin/perl" )

alias.url = ( "/auth" => "/usr/www/lib" )

auth.backend = "htdigest"
auth.backend.htdigest.userfile = "/var/private/lighttpd.htdigest.user"
auth.require = ( "/auth" =>
(
"method" => "digest",
"realm" => "nas admin",
"require" => "valid-user"

1. bruce - removed user=
2. "require" => "user=admin"

)
)

fastcgi.debug = 0

1. Bruce - Removed host & port and replaced with a socket
2. "host" => "127.0.0.1",
3. "port" => 1026,

fastcgi.server = ( ".pl" =>
(( "socket" => "/tmp/lighttpd.fcgi.socket",
"bin-path" => "/usr/www/lib/nasMaster.pl",
"check-local" => "disable",
"min-procs" => 1,
"max-procs" => 1,
"idle-timeout" => 30,
"bin-environment" => (
# Environment variables for nasMaster.pl
"PERL5LIB" => "/usr/www/lib",
"NAS_NBIN" => "/usr/www/nbin",
),
)),
"nasMaster.pl" => (( "socket" => "/tmp/lighttpd.fcgi.socket",
"check-local" => "disable",
))
)

$SERVER["socket"] == ":8080" {
index-file.names = ( "Welcome.htm" ,"index.php")
server.document-root = "/shares/internal/PUBLIC/WWW/Public"
fastcgi.server = (
"nasMaster.pl" => (( "socket" => "",)),
".php" => (( "bin-path" => "/opt/bin/php-fcgi",
"socket" => "/tmp/php.socket",
"bin-environment" => (
"LD_LIBRARY_PATH" => "/opt/lib",
),
)),
".pl" => (( "socket" => "",)))
}

$SERVER["socket"] == ":443" {

server.network-backend = "write"
index-file.names = ( "Welcome.htm" ,"index.php")
server.document-root = "/shares/internal/PUBLIC/WWW/Welcome"

auth.backend.htdigest.userfile = "/shares/internal/PUBLIC/WWW/Admin/WebUsers.htdigest.user"
auth.require = ( "/" =>
(
"method" => "digest",
"realm" => "WEB",
"require" => "valid-user"
)
)
accesslog.filename = "/shares/internal/PUBLIC/WWW/Admin/access.log"

fastcgi.server = (
"nasMaster.pl" => (( "socket" => "",)),
".php" => (( "bin-path" => "/opt/bin/php-fcgi",
"socket" => "/tmp/php.socket",
"bin-environment" => (
"LD_LIBRARY_PATH" => "/opt/lib",
),
)),
".pl" => (( "socket" => "",)))
}

ssl.engine = "enable"
ssl.pemfile = "/shares/internal/PUBLIC/WWW/fr.pem"
}

$SERVER["socket"] == ":3210" {
index-file.names = ( "WebMgr.pl" )
fastcgi.server = ( "WebMgr.pl" =>
((
"socket" => "/tmp/lighttpd.webmgr.socket",
"bin-path" => "/shares/internal/PUBLIC/WWW/Admin/WebMgr.pl",
"check-local" => "disable",
"min-procs" => 1,
"max-procs" => 1,
"idle-timeout" => 30,
)),
".pl" => (( "socket" => "",)),
"nasMaster.pl" => (( "socket" => "",))
)
ssl.engine = "enable"
ssl.pemfile = "/shares/internal/PUBLIC/WWW/fr.pem"

server.document-root = "/shares/internal/PUBLIC/WWW/Admin"
auth.backend.htdigest.userfile = "/shares/internal/PUBLIC/WWW/Admin/WebUsers.htdigest.user"
auth.require = ( "/" =>
(
"method" => "digest",
"realm" => "WEBADMIN",
"require" => "valid-user"
))

accesslog.filename = "/shares/internal/PUBLIC/WWW/Admin/Adminaccess.log"
}

Last edited on 22 Aug 2008 14:16 by (account deleted) Show more

Re:

chorlton 22 Aug 2008 15:12

From this snippet of your file

".pl" => (( "socket" => "",)))
# this closing brace should not be here
}
# end of comments

ssl.engine = "enable"
ssl.pemfile = "/shares/internal/PUBLIC/WWW/fr.pem"
}

$SERVER["socket"] == ":3210" {
index-file.names = ( "WebMgr.pl" )
fastcgi.server = ( "WebMgr.pl" =>
((
"socket" => "/tmp/lighttpd.webmgr.socket",

I think that you have an extra closing brace between the comments I have marked.

Re:

(account deleted) 23 Aug 2008 18:41

Thank you, didnt see that one ;)

TeinturMan 16 Oct 2008 23:33

Hi All, i have released the V1.1.6 of the Web Server Admin User interface ( https://<Mybook>:3210)

New features are :

• Change of the log paths

I have changed the recommended configuration in lighttpd.conf for the log file because it was preventing firmware upgrade.

==> If you use Web Server hack , You should check your lighttpd.conf :
in the 443 section :
accesslog.filename = "/var/log/lighttpd/lighttpd-Welcome-access.log"

in the 3210 section :
accesslog.filename = "/var/log/lighttpd/lighttpd-Admin-access.log"

Note that the new version will still work, even if you do not change lighttpd.conf…

• New Log checking options

- You can now : reset the log files
- remove your local ip addresses from the log, so that you can see immediately who tried to connect to your box from internet.

• Installation :

- Ensure that you are using the v1.1.6 version of WebMgr.pl script ( You may not have this version if you installed WebServer before 17 Oct. 2008.)

wget http://mybookworld.wikidot.com/local--files/web-server/WebMgr.pl -O /shares/internal/PUBLIC/WWW/Admin/WebMgr.pl

regards,

New Release of Web Server Tutorial !

TeinturMan 15 Nov 2008 10:25

New Version of Web Server Tutorial

Removed : File Manager
The file manager is no longer included in the 3210 admin interface. it has been replaced by AccessBook.

Fully automated installation procedure
the installation procedure is very very simple…
In the future it could even be proposed as the very first step to gain access to the Mybook…

Some Relooking
Look is inspired from AccessBook Look…

Feature Manager
it is easy to install and manage components of your Mybook.
Feature Manager is a very open interface and anybody can create it's own Feature Packs and publish them in the wiki. (I hope a lot of people will do that…)
Creating a new simple feature-pack is as simple as creating a folder containing a sh script…

Standard installed features are :
reboot Mybook
Install / Generate some feature packs
Activate / DeActivate php on web sites
OPTWARE installation and configuration checks.
List of startup scripts…

You can check the version here :
web-server

if you were already using an old version of the Web Server, you can follow the same procedure as the Full install one as each step of the installation procedure will check and be respectfull of existing installations…

Also note that because it is a major version release and it is quite new (15/11/2008) ,
i will be reactive if you have some problem (bugfree program does not exists in true life :-)…):
TeinturMan.

I also need to have some confirmation that everything goes fine….
Regards,

System_Configuration Feature Pack update

TeinturMan 01 Feb 2009 16:04

Hi all,
i have updated the System_Configuration Feature Pack to add a "Send Email Report Feature" …

You can configure your Mybook to send you a report daily or weekly ….

For now, the report contains only disk space information…

Each Feature Pack can have it's own report that will be added automatically to the Main report…

In order to update your Mybook :
Simply paste the following url in the Feature installer page ( https://<Mybook>:3210 )
http://mybookworld.wikidot.com/local--files/web-server/System_Configuration.tar

Regards,

file has gone..

(account deleted) 08 Feb 2009 21:03

when i try to wget the file at the start it just hangs, so i tried to download it manually and the page just says 'the file does not exist'

could someone re up it somewhere? thanks

Re: file has gone..

TeinturMan 08 Feb 2009 21:52

Hi 4ndr3wk,
i just re checked and the file is there, i can download it via wget….
please, check your Network configuration and syntax of your command…
Regards,

Re: file has gone..

(account deleted) 15 Feb 2009 01:25

Yes i do apologise, it must of been something at my end or i was doing something wrong, mostly works fine now, just one problem right now is if i access the mybook without a set port (e.g:mybook.local) instead of (mybook.local:3120) it asks for a password, and if i enter the standard admin and 123456 it doesnt accept, have i missed something?
Thanks

EDIT: Never mind, perhaps i should read instructions more carefully :)

Last edited on 15 Feb 2009 01:40 by (account deleted) Show more

Re: file has gone..

TeinturMan 15 Feb 2009 10:01

Hello,
the process is to connect to https://<mybook>:3210
then create ne users whou will be allowed to connect to https://<Mybook>

admin / 123456 do not have the right to connect to https://<Mybook>

==> You can create 1 account for each of your friends. within the https://<mybook>:3210 interface.
Regards,

New AccessBook Version : Shuffle !

TeinturMan 28 Feb 2009 22:53

Hi, a new AccessBook Verison is available :
- Code review from a security perspective
- Added a shuffle feature to the streaming option.

to install it, copy/paste the following url in the feature pack installer ( https://<Mybook>:3210 )

http://mybookworld.wikidot.com/local--files/web-server/Web_Server.tar

Then go to the Web_Server / AccessBook menu,
then check your external url in the text box, then click "Modify " button…

How can you check that you have the new version?
When clicking the "play" green arrow in front of a folder, a mp3 streaming page is displayed with 2 links : "play all" and "shuffle".

Enjoy,
teinturman.

nugga 21 May 2009 20:24

any one tested this on the new white MBWE's?

AccessBook on White Mybook

TeinturMan 21 May 2009 20:29

Hi,
AccessBook for White light Mybook will be ready very very soon,
i have reviewed totally the code to make it work with White light.

i am currently testing the White light AccessBook version.

i am very near the release now….
Regards,

Re: AccessBook on White Mybook

nugga 22 May 2009 17:48

Sounds so good please give me a call after the test is finished.
If you could make a guide too then i would just love you :)

Re: AccessBook on White Mybook

nugga 15 Jun 2009 17:56

Ty Teinturman it seems to work perfectly.

page 1 of 212next »