Some more tips and tricks

[kauczu]

I used @al37919 method, and it works like a charm!

Thanks!

[wirespot]

It's very nice, I didn't know you could do that.

You can still use different config files if you want to run one of the servers only occasionally. Especially on the outside interface, you may not wish to have it available all the time (even if it has SSL and password, the most secure way is for it not to run at all.)

[al37919]

It is enough just not to open port 443 in the firewall

[wirespot]

Yeah, but where security is concerned it's really bad practice to rely on the firewall for something that the service itself can do (not be available when you don't want it to). You can't hack what is not there. With a firewall, it's there, just cloaked. Are you 100% confident in your iptables skills, for example, to absolutely guarantee you haven't missed a way to allow access to your server? Firewalls are more of a last resort in security, there's no substitute for the applications themselves doing the right thing. Rant over.

[bogd_A]

Another great use for the router is ripping music from Internet radios.
...

Hi,

I'm getting the following msg:

streamripper: can't load library 'libfaad.so.0'

when starting streamripper download

Can you help me?

Thank you,

[wirespot]

Yes, you need to install a few other packages along with streamripper (audio codecs): libmad, faad2, libogg, libvorbis. Do "ipkg install" for each of them.

I wonder why they weren't marked as required by the streamripper package. It's obvious that streamripper won't work without them -- the binary appears to be linked with all four and needs them in order to run.

[shinji257]

For anyone wondering I got a list of the extensions that were installed by the stock php setup.

bcmath.so
bz2.so
calendar.so
curl.so
dba.so
dom.so
exif.so
ftp.so
gd.so
openssl.so
pdo.so
pdo_sqlite.so
shmop.so
sockets.so
sqlite.so
sysvmsg.so
sysvsem.so
sysvshm.so
xml.so
xmlreader.so
xsl.so
zlib.so

Note that pdo_sqlite.so is for the newer SQLite 3 and sqlite.so is for SQLite 2. You can load both but you really only need pdo.so and pdo_sqlite.so enabled for sqlite support to work.

[SeverusSneep]

I tried to setup SSL + User/Pass

It all works fine untill I need to have htdigest, downloaded the package apache by ipkg download apache, found the htdigest, but when I want to use it, i obtain:

[admin@kolibrieroutert tmp]$ htdigest -c /opt/etc/lighttpd/.passwd facturen robert
-sh: htdigest: not found

with command ls

[admin@kolibrieroutert tmp]$ ls
apache_2.2.8-1_mipsel.ipk htdigest

what do I do wrong

[shinji257]

I tried to setup SSL + User/Pass

It all works fine untill I need to have htdigest, downloaded the package apache by ipkg download apache, found the htdigest, but when I want to use it, i obtain:

[admin@kolibrieroutert tmp]$ htdigest -c /opt/etc/lighttpd/.passwd facturen robert
-sh: htdigest: not found

with command ls

[admin@kolibrieroutert tmp]$ ls
apache_2.2.8-1_mipsel.ipk htdigest

what do I do wrong

Since htdigest is in the current folder you can replace htdigest with ./htdigest

So... based on the following command up there it should be...

./htdigest -c /opt/etc/lighttpd/.passwd facturen robert

[SeverusSneep]

[admin@kolibrieroutert tmp]$ ./htdigest -c /opt/etc/lighttpd/.passwd facturen Robert
./htdigest: can't load library 'libuuid.so.1'
[admin@kolibrieroutert tmp]$

Now I am feeling soooo stupid!

I have installed the package apr-utils and found on ubuntu forums to install a certain e2fsprogs package to install...did both, still got this message

[wpte]

hey I want to metion a bug on the wonder shaper.

if you are using the command in putty, you should use eth1 instead of vlan1.

also, it somehow doesnt allow download speeds bigger than 8mbit

/sbin/wshaper start eth1 8000 900

when uploading I have now a ping of 40 instead of 300, that is good for gaming
however, I have an internet package with 24mbit!
so when I set it to 8mbit in wshaper I get only 500kb/s maximum...
without the shaper I get more than 2mb/s
when I change the value higher than 8mbit I get lower speeds, sometimes even 100kb/s
do you know any work-around?

[wirespot]

@SeverusSneep: I'm not sure what's going on there on your router. For me, installing apr-util took care of it, now htdigest works as expected.

@wpte: It's possible that the CPU on the Asus can't handle that many packets. I can't help you much there, I've never used lines of over 4 Mbits so I can't say what the problem might be.

[SeverusSneep]

@SeverusSneep: I'm not sure what's going on there on your router. For me, installing apr-util took care of it, now htdigest works as expected.

@wpte: It's possible that the CPU on the Asus can't handle that many packets. I can't help you much there, I've never used lines of over 4 Mbits so I can't say what the problem might be.

Solved the problem with apr-util. Apparently one or two packages could not be found, so installed them manually. Got the htdigest working.

But...(yes, I know! Don't shoot me)

I added user Robert (my colleague) to the list with trusted users (.passwd file), I got him in the correct realm (facturen) and inserted the correct information.

#### auth module
## read authentication.txt for more info
auth.backend               = "htdigest"
auth.backend.plain.userfile = "/opt/etc/lighttpd/.passwd"
auth.backend.plain.groupfile = "lighttpd.group"

auth.backend.ldap.hostname = "localhost"
auth.backend.ldap.base-dn  = "dc=my-domain,dc=com"
auth.backend.ldap.filter   = "(uid=$)"

auth.require               = ( "/" =>
                               (
                                 "method"  => "digest",
                                 "realm"   => "Facturen",
                                 "require" => "valid-user"
                               ),
                             )

When I xs the interface at https://192.168.1.33:8081/folder I see an user/pass field, when I fill in the (with htdigest) inserted combinations of user/pass (Robert/deleeuw) this combination won't be accepted.

My commands with htdigest

[admin@Kolibrieroutert tmp]$ ./htdigest /opt/etc/lighttpd/.passwd Facturen Robert
Changing password for user Robert in realm Facturen
New password:
Re-type new password:
[admin@Kolibrieroutert tmp]$

When I open the .passwd file I see:

Robert:Facturen:2732a9acf2e70597dddcb6aa3e5dbe41

So the generation of the user/pass went correct...but it still won't work...everything else works like a charm!!!

My special thanks to you all for your help

[wirespot]

No problem, you've fallen for a rather classic mistake. If you're setting up authentication backend as "htdigest" (auth.backend) then you have to use config directives with "htdigest" in them. You used "plain". So the correct line is:

auth.backend.htdigest.userfile = "/opt/etc/lighttpd/.passwd"

The way you did it, lighttpd couldn't find a passwd file for the htdigest backend so obviously it wouldn't allow access.

In the future, set up an error log file (server.errorlog = "/opt/var/log/lighttpd/error.log") and make sure /opt/var/log/lighttpd exists and is owned by the user and group the server runs as (see server.username and server.groupname). And when you have problems you just peek into that file and it will tell you what went wrong. If you had it ready now you would have most likely seen something like "can't find the htdigest passwd file" in there.

[wpte]

hey I want to metion a bug on the wonder shaper.

if you are using the command in putty, you should use eth1 instead of vlan1.

also, it somehow doesnt allow download speeds bigger than 8mbit


when uploading I have now a ping of 40 instead of 300, that is good for gaming
however, I have an internet package with 24mbit!
so when I set it to 8mbit in wshaper I get only 500kb/s maximum...
without the shaper I get more than 2mb/s
when I change the value higher than 8mbit I get lower speeds, sometimes even 100kb/s
do you know any work-around?

I tried out a newer version of wshaper 1.1a
this version differs from the original one on the router
however, there is a problem, it keeps saying me to read the readme first... while I did

anyway... the cpu doesnt seem to respond to wondershaper, it's not even a process