September 20, 201411 yr Am smack in the middle of rewriting denyhosts and ssh plug-ins for v6. You're correct that denyhosts doesn't have a functioning configuration page. One of the issues is that php in v6 operates slightly differently when it comes to how screen updates work upon submitting a form. Eg when apply button is pressed. I should have denyhosts working within 24hrs. Will post an update here when done. Thats fantastic. Any news on this?
October 22, 201411 yr Am smack in the middle of rewriting denyhosts and ssh plug-ins for v6. You're correct that denyhosts doesn't have a functioning configuration page. One of the issues is that php in v6 operates slightly differently when it comes to how screen updates work upon submitting a form. Eg when apply button is pressed. I should have denyhosts working within 24hrs. Will post an update here when done. Thats fantastic. Any news on this? I PM'd Rich (overbyrn) on this and he sent me a link to his github page that for some reason I was not able to find on my own. The plugs here have been updated about a month ago. https://github.com/overbyrn/unraid-v6-plugins I installed denyhosts on unRAID 6b10a using this URL on the plugin page: https://raw.githubusercontent.com/overbyrn/unraid-v6-plugins/master/denyhosts.plg It installed and configured fine, and I'm hopeful the kiddies will be stymied. Thanks for this, Rich Update: I had an issue with the plugin turning itself off after a few hours. Nothing was being written to the WORK_DIR either (which seemed odd) so I checked permissions. The denyhosts script runs as nobody but the directory (on my cache drive) had permissions for root, since I made the directory under root. Changed it to nobody:users 775 and now at least there are some files written in the WORK_DIRS directory. I'm sure nobody else needs to be reminded of making the permissions compatible.
October 26, 201411 yr I've been running the denyhosts plg for a few days now and have the following observations. I can't find the event log for the plg. The FAQ for denyhosts suggests /var/log but it's not there. The plugin seems to quit on a fairly regular basis. When it doesn't quit, there is no update of the files in the WORK_DIR. I found that if you 'restart' the plg through the WebGUI:settings page that the WORK_DIR will be updated. I wound up setting an hourly cron to restart. There are still a lot of attempted logins. I looked to see if I could set up synchronization mode (using the database of DOS IPs) The link below suggested editing the denyhosts.cfg file. This is supposed to work with denyhosts 2.0 and up (this plg is 2.6) http://denyhosts.sourceforge.net/faq.html#sync_enable I modified the .cfg file in /boot/config/plugins/denyhosts/denyhosts.cfg and rebooted the plg. I got this in the syslog: /boot/config/plugins/denyhosts/denyhosts.cfg: line 22: SYNC_SERVER: command not found /boot/config/plugins/denyhosts/denyhosts.cfg: line 23: SYNC_INTERVAL: command not found /boot/config/plugins/denyhosts/denyhosts.cfg: line 26: SYNC_DOWNLOAD_THRESHOLD: command not found /boot/config/plugins/denyhosts/denyhosts.cfg: line 27: SYNC_DOWNLOAD_RESILIENCY: command not found /boot/config/plugins/denyhosts/denyhosts.cfg: line 22: SYNC_SERVER: command not found /boot/config/plugins/denyhosts/denyhosts.cfg: line 23: SYNC_INTERVAL: command not found /boot/config/plugins/denyhosts/denyhosts.cfg: line 26: SYNC_DOWNLOAD_THRESHOLD: command not found /boot/config/plugins/denyhosts/denyhosts.cfg: line 27: SYNC_DOWNLOAD_RESILIENCY: command not found So it looks like the Synch mode is not available in this plg. I *think* this means that while denyhosts is able to learn from its own attackers it is not learning from the collective. Edit: Overnight, i see now that there is a new sync-hosts directory in my working directory but it was made with root owner (30 kb after a couple of days). It has a whole bunch of (suspect) IPs in it so it's apparently pulling those from the denyhosts repository. Maybe the inability to quench the login efforts is related to these new permissions problems. Not sure how this jibes with the error message "SYNC-SERVER command not found" error above. I've also edited the deny files to add wildcards (xxx.xxx.xxx.*) to the major abusers. The number of attacks seems to be diminishing now. Thanks Dennis
October 27, 201411 yr Problem with the SSH plugin on V5.. Been working fine, rebooted unraid today and the ssh plugin isn't installed... I get this when I try to manually install it; success file /boot/packages/openssh-5.9p1-i486-3_slack13.37.txz: downloading from -q --no-check-certificate http://slackware.cs.utah.edu/pub/slackware/slackware-13.37/patches/packages/openssh-5.9p1-i486-3_slack13.37.txz ... bad download, deleting The file is missing on the listed remote server, but the package does exist in /boot/packages Shouldn't it just install from the local copy? What's going on?
October 27, 201411 yr Problem with the SSH plugin on V5.. Been working fine, rebooted unraid today and the ssh plugin isn't installed... I get this when I try to manually install it; success file /boot/packages/openssh-5.9p1-i486-3_slack13.37.txz: downloading from -q --no-check-certificate http://slackware.cs.utah.edu/pub/slackware/slackware-13.37/patches/packages/openssh-5.9p1-i486-3_slack13.37.txz ... bad download, deleting The file is missing on the listed remote server, but the package does exist in /boot/packages Shouldn't it just install from the local copy? What's going on? I have a similar problem, plus more. I tried to install the OpenSSH plugin on a brand new unRAID server (version 5.0.5) last week, but the openssh-5.9p1-i486-3_slack13.37.txz file could not be found. The nearest version I could find was openssh-5.9p1-i486-2_slack13.37.txz, dated 2010-10-20, just 7 days ago. Strange. Based on various web sites, it seems that openssh-5.9p1-i486-3_slack13.37.txz was created in early 2014. So I changed openssh_overbyrn.plg to reference openssh-5.9p1-i486-2_slack13.37.txz, and rebooted. No luck. The SSH server came up, but not much else. No samba shares or web interface, for example. I then turned off the OpenSSH plugin and rebooted. It works fine without the plugin, but would very much like to get this and other plugins running.
October 27, 201411 yr I did some digging; someone at slackware did something funny with the naming. In plainspeak, it should be at -4, but it was at -2, -3 was technically a patch, but they rolled back to name -2... In short, the current version of -2 is newer than -3. I did a find/replace in the plugin (3 instances) and everything is working fine.
October 28, 201411 yr I had changed only 1 of the 3 instances. Silly me. Nevertheless, when I re-enabled the plugin (without changing the other 2 instances), it worked fine this time. Not sure what the problem was the first time. I have since changed the other 2 instances. @AaronJAnderson Any idea why the plugin did not install from the local copy?
December 2, 201411 yr I forked overbyrn/unraid-v6-plugins from github to make it work with beta 12 there: https://github.com/Jencryzthers/unraid-v6-plugins I only updated the ssh.plg one, if you guys wants to use it: https://raw.github.com/jencryzthers/unraid-v6-plugins/master/ssh.plg The reason why its broken its because they merged the .page and .php file together. You gotta edit the file and merge them and add "---" between each files.
February 25, 201511 yr Author Fixed ssh and denyhosts plugins for v6b12+ Fully compatible with the unRaid plugins page. Install via unraid plugins -> install plugins tab. Enter either of the following URLs to install; SSH : https://raw.githubusercontent.com/overbyrn/unraid-v6-plugins/master/ssh.plg Denyhosts : https://raw.githubusercontent.com/overbyrn/unraid-v6-plugins/master/denyhosts.plg Check for updates and/or remove plugins from the Unraid plugins -> installed plugins page.
February 27, 201511 yr I just migrated to beta14b and I'm having trouble with the passwordless login. Since the home directories are not automatically created, there is no .ssh directory. I've tried editing making a home directory manually and editing /etc/passwd with the manually generated home directory. I then created the .ssh directory and the auhorized_keys file, but I'm still unable to connect without a password. Am I overlooking something?
February 28, 201511 yr Author I just migrated to beta14b and I'm having trouble with the passwordless login. Since the home directories are not automatically created, there is no .ssh directory. I've tried editing making a home directory manually and editing /etc/passwd with the manually generated home directory. I then created the .ssh directory and the auhorized_keys file, but I'm still unable to connect without a password. Am I overlooking something? The .ssh dir should get created. I've changed nothing from the original ssh plugin design. That being said, I'll take a look this end. Have you explicitly set permissions on the manually created .ssh directory and the authorized_keys file. SSH is extremely picky about this and will simply refuse (without reporting an error) to allow a login. chmod 700 /home/<youruser>/.ssh chmod 600 /home/<youruser>/.ssh/authorized_keys
February 28, 201511 yr Yes, the permissions are set like you mentioned. Does the group assigned to the file make a difference?
February 28, 201511 yr Fixed ssh and denyhosts plugins for v6b12+ Fully compatible with the unRaid plugins page. Install via unraid plugins -> install plugins tab. Enter either of the following URLs to install; SSH : https://raw.githubusercontent.com/overbyrn/unraid-v6-plugins/master/ssh.plg Denyhosts : https://raw.githubusercontent.com/overbyrn/unraid-v6-plugins/master/denyhosts.plg Check for updates and/or remove plugins from the Unraid plugins -> installed plugins page. I have installed Denyhosts and change the working directory to /mnt/cache/services/denyhosts but it will not start. I am running v6b14b.
February 28, 201511 yr Author Yes, the permissions are set like you mentioned. Does the group assigned to the file make a difference? I've tested on a vanilla v6b14 system and the plugin is automatically creating the .ssh directory and where there is an authorized_keys file present in the users ssh directory on the flash drive, the file is being copied to the directory. There should not be a need to manually create /home/someuser or /home/someuser/.ssh. My test also included using putty to login using public/private key. In the ssh webgui section, did you select the user(s) you wanted to enable for ssh and hit apply? The act of selecting a user in the multi-select box and hitting apply should tell the plugin to perform the directory creation for the users.
March 3, 201511 yr Yes, the permissions are set like you mentioned. Does the group assigned to the file make a difference? I've tested on a vanilla v6b14 system and the plugin is automatically creating the .ssh directory and where there is an authorized_keys file present in the users ssh directory on the flash drive, the file is being copied to the directory. There should not be a need to manually create /home/someuser or /home/someuser/.ssh. My test also included using putty to login using public/private key. In the ssh webgui section, did you select the user(s) you wanted to enable for ssh and hit apply? The act of selecting a user in the multi-select box and hitting apply should tell the plugin to perform the directory creation for the users. I was able to get this working after a clean install and a few reboots. It seems that now, everytime I reboot, I have to go into the openssh plugin settings and hit apply for the .ssh directory on the flash drive to copy over to the home directory. I don't have to make any changes to the settings - just hit apply. I'm guessing the plugin settings are being overwritten by the ssh that is now included in the os?
March 16, 201511 yr Fixed ssh and denyhosts plugins for v6b12+ Fully compatible with the unRaid plugins page. Install via unraid plugins -> install plugins tab. Enter either of the following URLs to install; SSH : https://raw.githubusercontent.com/overbyrn/unraid-v6-plugins/master/ssh.plg Denyhosts : https://raw.githubusercontent.com/overbyrn/unraid-v6-plugins/master/denyhosts.plg Check for updates and/or remove plugins from the Unraid plugins -> installed plugins page. I have installed Denyhosts and change the working directory to /mnt/cache/services/denyhosts but it will not start. I am running v6b14b. Overbyrn - never got an answer this?
March 30, 201511 yr Fixed ssh and denyhosts plugins for v6b12+ Fully compatible with the unRaid plugins page. Install via unraid plugins -> install plugins tab. Enter either of the following URLs to install; SSH : https://raw.githubusercontent.com/overbyrn/unraid-v6-plugins/master/ssh.plg Denyhosts : https://raw.githubusercontent.com/overbyrn/unraid-v6-plugins/master/denyhosts.plg Check for updates and/or remove plugins from the Unraid plugins -> installed plugins page. I have installed Denyhosts and change the working directory to /mnt/cache/services/denyhosts but it will not start. I am running v6b14b. Overbyrn - never got an answer this? No answer??? I am removing the Denyhosts plugin, since it does not work.
April 1, 201511 yr What has happened to both of these plugins??? I get 404 errors whenever I try to download the plg files from github. Have they gone away?
April 1, 201511 yr So... What has happened to this project? I get 404 errors whenever I try to download the plg files from github. Have they gone away?
April 5, 201511 yr Try this: https://raw.githubusercontent.com/overbyrn/unraid-v6-plugins/master/ssh.plg
April 5, 201511 yr Author Try this: https://raw.githubusercontent.com/overbyrn/unraid-v6-plugins/master/ssh.plg I have been working on ssh and denyhosts in the background to create working v5 and v6 plugins which I felt comfortable sharing. The link above is correct and points to what I believe is a working stable v6 version of my ssh plugin. There is also an equivalent v5 version here I plan to open a new thread which consolidates those plugins I still have and that have not (yet) been reworked by Phaze. So far SSH, Denyhosts, Dropbox, Beets and NZBGet are all complete for v5 and v6. For the moment, if you need a v5 of any of the above go here, and for v6, go here
Archived
This topic is now archived and is closed to further replies.