New user's registration have been closed due to high spamming and low trafic on this forum. Please contact forum admins directly if you need an account. Thanks !

Locked down my Bubba good

Got problems with Bubba? Then this forum is for you.
Locked
andrewf
Posts: 5
Joined: 03 Apr 2007, 18:55
Location: Glasgow, Scotland
Contact:

Locked down my Bubba good

Post by andrewf »

Hi,

I bought a Bubba to use as a web server. I did all the sensible things, changing all the passwords to secure ones. I also changed the /etc/apt/sources.list to Debian-only, added MySQL and php4-mysql and removed some services, specifically Samba and DAAP...

Anyhoo, my Bubba now doesn't complete booting. Apache2 and MySQL come up no problem, and my blog runs perfectly fine on it. However, the LED is still flashing (after an hour), which suggests to me that it hasn't worked its way through init.d. And---crucially---Sshd isn't running. At least, it's refusing my connection requests on that port. So I can't debug it.


I know this is completely unsupported, and the official advice is probably to restore the thing from a USB drive, but I wondered if there is some way to get a console connection into a Bubba, perhaps on one of the USB ports? The other thing I thought about was to take the hard drive out, mount it on another machine and look at the log files... Or stick one of these PHP command shells on the web space...

In any case, I would quite like to be able to do what I am doing (even if, if I try it again, I just disable the extraneous services rather than removing the packages).

Any ideas welcome. Thanks very much,

--Andrew

P.S. I can write files to the webspace (because the Bubba is mounting the webspace off my NFS server), so potentially I could stick some kind of thing in there which would gain privileges and dump out /var/log/messages... Can't seem to do it with setuid scripts in Perl, though. Any ideas?
limpo
Posts: 59
Joined: 24 Mar 2007, 06:50

Post by limpo »

Hi,

I know I have read somewhere on this forum, that the developers of excito have a linux-bootable usb-image that includes telnet support. Or you can hardware modify your bubba with an rs232 serial connection(voids waranty).

I have also excperienst that when removing a package that has bubba as/is included dependecy will break it(leads just blink forever), and a backup of all private stuff from samba and a reinstall is the only way to go.

That you cant log in via ssh indicates to me that when removing a dependency software from the bubba package, can remove the sshd_config making it impossible to connect.


/limpo
tor
Posts: 703
Joined: 06 Dec 2006, 12:24
Contact:

Post by tor »

Hi andrewf,

Sad to hear that you lost contact with your unit. This is due to the bubba package being removed.

It is responsible for turning on the led when boot is completed. The reason you cant reach bubba via ssh anymore is due to a missing ssh-config file.

You can read more on this in this thread: http://excito.org/forum/viewtopic.php?t=213

We will try to change this so removing bubba won't disable ssh. Since one can argue that Bubba should be usable without that package.

If you want to do this operation in the mean time. Make sure to make a backup of your /etc/ssh/sshd_config before removing the bubba package and then put it back after removal of the bubba package. Then your bubba should work fine but with the led blinking.

/Tor
Co-founder OpenProducts and Ex Excito Developer
pa
Posts: 308
Joined: 06 Dec 2006, 04:38
Location: Sweden
Contact:

Post by pa »

There is a way to get a console on Bubba, but it requires some work and a soldering iron.
See http://excito.org/forum/viewtopic.php?t=206

/PA
andrewf
Posts: 5
Joined: 03 Apr 2007, 18:55
Location: Glasgow, Scotland
Contact:

Post by andrewf »

Thanks for all that. I'm not quite up to opening the box and soldering things on to it.... but I may find a way somehow to replace the ssh-config file via PHP or Perl or something.

Also, it would be great if removing the bubba package didn't have this effect... Should I just watch the forums for news on this?

Ta!

--Andrew
limpo
Posts: 59
Joined: 24 Mar 2007, 06:50

Post by limpo »

Hi,

I agree with adnrewf, it would be god if one could still connect to the bubba server, even if the bubba package would be removed.


/Limpo
Locked