forum.excito.org

Hello,

I am a bit new to this all, so clarification if possible appreciated.

I set-up SSH on my Ubuntu system (openSSH). I did this because I was wanting to access the BUBBA to install software. Unfortunately I do not understand SSH that well - but I will learn (that is a separate issue).

After installing SSH I tried to log on to the BUBBA through the SSH, by using [email protected]

I then input my password which was denied.

The thing is that now when I go to the web-browser and type in xxxx.bubbaserver.com I dont connect to the BUBBA anymore, I get the following;
403 Forbidden
You don't have permission to access / on this server.
Apache/2.2.3 (Debian) mod_fastcgi/2.4.2 PHP/5.2.0-8+etch11 mod_ssl/2.2.3 OpenSSL/0.9.8c Server at 87.74.72.23 Port 80

Does anyone have any suggestions as to what might have happened and how to fix this? I want to be able to connect to the BUBBA through the Easyname system again.

Sorry, just one more bit of clarification.

I think i can maybe resolve this by editing the /etc/hosts on the BUBBA. Only thing is I dont know how to get to there!

Can someone please assist me with how to get to here - i assume using ssh.

At the command I am currently typing ssh [email protected] (which is the ip of my bubba locally). It then asks for my password, but doesnt like it.

Anyone able to get me onto the Bubba file structure through SSH?

OK my last post for the night - because things are going from bad to worse and I need some help.

I managed to login using ssh by enabling the ssh login under my user - sorted. Had a look at the hosts and host.deny and nothing looked funny.

Thing is, now I cannot access my BUBBA at all! When I try to access it locally via 192.168.0.10 I just get

403 Forbidden

You don't have permission to access / on this server.
Apache/2.2.3 (Debian) mod_fastcgi/2.4.2 PHP/5.2.0-8+etch11 mod_ssl/2.2.3 OpenSSL/0.9.8c Server at 192.168.0.10 Port 80

Can confirm that I have not changed the firewall settings, so am sure that port 80 is forwarded. Because I have logged in with SSH I am sure it has something to do with SSH. Please help, at the moment I have an inaccessible BUBBA!!

Many thanks in advance.

Hi scoobynz,

From the errormessages from the web-server, it seems as if you have some accessright problems with the files on your bubba, this does most likely not have anything to do with ssh.

Have you changed any of the files in the web-folder?

If you have, this could be the reason since all users must have read access to the files.

Can you reach "192.168.1.10/admin"?

Can you also, when logged in with ssh, issue "ls -l /home/web" and post the result?
This will list the accessrights to the web-files.

/PA, Excito

Hi Pa,

Thanks for the response.

Upon waking this morning I thought, "why not try 192.168.0.10/admin" and then get in and turn the SSH off. I got in through 192.168.0.10/admin but turning the ssh off didnt make any difference - so I agree with your prognosis that it is not the ssh setting.

Now, yesterday I tried replacing the index.html with my own index.html. this didnt work, so I put the original index.html back - maybe this has something to do with the problem? The server was working after I did this and only stopped working after accessing through ssh, so seems a bit odd. I am pretty sure I didnt change any of the BUBBA's other files from within SSH.

output from ls -l /home/web/ is
total 28
-rw-rw-r-- 1 root users 1150 2008-07-20 10:17 favicon.ico
-rw-rw-r-- 1 root users 926 2008-07-20 09:52 ie6.css
drwxrwxr-x 2 root users 4096 2008-08-07 19:10 images
-rw-rw-r-- 1 root users 2799 2008-08-13 08:53 index.html
drwxrwxr-x 3 root users 4096 2008-08-07 19:10 js
-rw-rw-r-- 1 root users 5572 2008-08-04 19:18 screen.css

Thanks again for the help.
S

Can you try to put back your "own" index.html file, access through your browser and see if you get the same error message again?
If you do, can you provide the same output again, and also tell us how you put the file there (windows share, bubba-filemanager or any other way)?

/PA

Hi - I tried to replace the file from work via filemanager. Am sure that my index will not work as the file was actualyl called index.mht (i.e. an html all bound into one "document" via MSWORD).

Any other suggestions or do you still want me to try and put the index.mht file back - even though i know it doesnt work?

Appreciate the assistance

You probably can access your file then, but you would need to address it directly, the web-server only looks for index.html, index.htm or index.php to view when you access just your host.
So 192.168.0.10/index.mht

Although I have never tested this, so I do not know if apache will accept such a file to serve as a web-page.

If you would like to be able to server an mht file as "default" page you will have to edit the file "/etc/apache2/sites-available/bubba" and add "index.mht" to the "DirectoryIndex" tag.

Note that the mht-file will not work with Firefox.

/PA

I was initially playing around with the html but do plan to make a proper html page (rather than mht). I am going to use kompozer for this – when I get some time.

This still leaves me with the current issue in that the easyfind does not work and the 403 forbidden problem. Should I try replacing the entire web folder with the original contents? Are you able to send me a copy of this folder so I know it is as it should be? Any other suggestions to get me back on track again.

Which version of the web-ui are you using?

Does the web-ui show your external IP-address next to your easyfind name?

If not, could you just uncheck the easyfind box, update, then check the box and press update again? Does it show?

And regarding your 403 error message, I think that this is correct. Since you have no index.html file the browser havs nothing to send you, and directory listing is not allowed, therefor the 403 message.

/PA

[edit] It is the web-server that has noting to send to your browser....

Hi Pa,

My Bubba is new – just got it at weekend. As far as I can see it is using 1.08-1 WEB-UI and when I try to update the software it says it is up to date.

I went to the easyfind – it had my ip address. I unchecked, updated and rechecked as requested. The ip address did not come back up – problem right?

I think we are getting confused. What I want is to be able to access to the original “index.htmlâ€

Hi there,

Well, I decided to do a reinstall to my system.

So, I downloaded and reinstalled the software and got back into the Bubba through my port address 192.168.0.10 – progress!

I then went to update the software – as per the instructions - but got this message;

Updating available sources... done
Checking for updates... done
1 package(s) to update.Upgrading...
OK
The server encountered an internal error or misconfiguration and was unable to complete your request.
Please contact the server administrator, webmaster@localhost and inform them of the time the error occurred, and anything you might have done that may have caused the error.
More information about this error may be available in the server error log.

Apache/2.2.3 (Debian) mod_fastcgi/2.4.2 PHP/5.2.0-8+etch11 mod_ssl/2.2.3 OpenSSL/0.9.8c Server at 192.168.0.10 Port 80

Note the bottom line – it is that same error message again!

This happened at 8:58 GMT.

I then updated again and got;

Updating available sources... done
Checking for updates... done
0 package(s) to update.No packages to update at this moment

All ok then?

Here is the apache2 error.log
[Tue Nov 11 21:42:40 2008] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Nov 11 21:42:40 2008] [warn] RSA server certificate CommonName (CN) `localhost.localdomain' does NOT match server name!?
[Tue Nov 11 21:42:41 2008] [notice] FastCGI: process manager initialized (pid 2610)
[Tue Nov 11 21:42:45 2008] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Nov 11 21:42:45 2008] [warn] RSA server certificate CommonName (CN) `localhost.localdomain' does NOT match server name!?
[Tue Nov 11 21:42:45 2008] [notice] Apache/2.2.3 (Debian) mod_fastcgi/2.4.2 PHP/5.2.0-8+etch11 mod_ssl/2.2.3 OpenSSL/0.9.8c configured -- resuming normal operations
[Tue Nov 11 21:48:20 2008] [notice] caught SIGTERM, shutting down
[Tue Nov 11 21:51:01 2008] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Nov 11 21:51:01 2008] [warn] RSA server certificate CommonName (CN) `localhost.localdomain' does NOT match server name!?
[Tue Nov 11 21:51:02 2008] [notice] FastCGI: process manager initialized (pid 2534)
[Tue Nov 11 21:51:04 2008] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Nov 11 21:51:04 2008] [warn] RSA server certificate CommonName (CN) `localhost.localdomain' does NOT match server name!?
[Tue Nov 11 21:51:04 2008] [notice] Apache/2.2.3 (Debian) mod_fastcgi/2.4.2 PHP/5.2.0-8+etch11 mod_ssl/2.2.3 OpenSSL/0.9.8c configured -- resuming normal operations
[Tue Nov 11 21:57:20 2008] [notice] Graceful restart requested, doing restart
[Tue Nov 11 21:57:22 2008] [notice] FastCGI: process manager initialized (pid 3303)
[Tue Nov 11 21:57:23 2008] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Nov 11 21:57:23 2008] [warn] RSA server certificate CommonName (CN) `localhost.localdomain' does NOT match server name!?
[Tue Nov 11 21:57:23 2008] [notice] Apache/2.2.3 (Debian) mod_fastcgi/2.4.2 PHP/5.2.0-8+etch11 mod_ssl/2.2.3 OpenSSL/0.9.8c configured -- resuming normal operations
[Tue Nov 11 21:57:36 2008] [error] [client 192.168.0.2] FastCGI: comm with server "/usr/share/web-admin/admin/index.php" aborted: idle timeout (120 sec), referer: http://192.168.0.10/admin/settings/software


I can confirm that reinstating the easyfind system gave me an IP address. And when I use my xxxx.bubbaserver.com I can get back into the server.

So, at the moment it looks like it is all back up and running. I dont know what happened previously????????

Unless you have any comments on any of my logs – thank-you very much for your help, much appreciated. I will keep a closer eye on things and let us know if any reoccurances.

S