Re: Leaf 7.2.1: Webconf login does not appear

Hello Graziano, Tim and List ...

I just ran some tests on the current
Bering-uClibc_7.2.1_x86_64_syslinux_vga.tar.gz Distribution and found out
it behaves according to the documentation, with some explanations ...

In order to have a raw USB key, I made sure to perform all the "
https://bering-uclibc.zetam.org/wiki/Bering-uClibc_7.x_-_User_Guide_-_Installing_the_Disk_Image#Copying_a_syslinux_Image_to_Flash_Media_via_a_USB_Interface_on_a_Linux_PC
" 's raw steps, in other words:

- Downloaded the 7.2.1 x86 64 syslinux_vga distribution
- created a fresh new partition on an 8 G. USB key {  /dev/sdb1 * 2048
524287 261120 b W95 FAT32  }
- sudo mkfs.vfat -r 1024 /dev/sdb1
- syslinux -i /dev/sdb1
- dd bs=440 count=1 if=/usr/lib/syslinux/mbr/mbr.bin of=/dev/sdb
- sudo mount /dev/sdb1 /mnt
  cd /mnt
  sudo tar -xvzf ~/Downloads/Bering-uClibc_7.2.1_x86_64_syslinux_vga.tar.gz
- copied /usr/lib/syslinux/modules/bios/*.c32 to /mnt/syslinux/

--- piouf ! et voila a clean 7.2.1 USB key

Then,
- I connected eth0 to my LAN (which runs a LEAF router) and connected a
spare MAC_PC with manual address set to 192.168.1.5 to eth1
- I installed the USB key in my old faithful x86 PC and booted ... and it
worked ... almost, I had to swap eth0 and eth1 cables ... my old PC would
need bbnameif.lrp to correct this but it's not needed here.
- both NICs ended up with correct IP addresses; static 192.168.1.254 on
eth1, and 192.168.1.146 on eth0 from my network DHCP server.

The only way to access the webconf page with this setup is with the MAC_PC:
in a Browser set the URL to : http://192.168.1.254 not https:// , and you
will be directed
to the " Webconf Password " page without any credentials being asked,* that
is true*, but you *can't get out of this page* until setting a proper
username and password.

It is possible to also access the Firewall on the DHCP assigned address
192.168.1.146, but in my case since I'm using a LEAF Firewall for my
localnet, the address 192.168.1.254 is already in use == bad !!!
So I have to disable the eth1 interface in /network/interface, and set
Shorewall policy to: net  fw ACCEPT and fw net ACCEPT ... lots of work !!!
but using a browser on a PC on my local net
with http://192.168.1.146 I get directed to the Webconf Password page, as
before, and can't leave this page without first setting a proper Username
and Password.

So the point here is to realize the Webconf Password page is easily
accessible on 192.168.1.254 but would/should never be from the net, unless
you like danger or missed the whole point :-) !

bye,
jrb.



On Thu, May 18, 2023 at 10:06 AM Graziano Brioschi <
[email protected]> wrote:

> Hi list,
>
> I think that we have found a problem with begin uClibc 7.2.1 x64.
>
> Using webconf (webconf with lighhttpd), I can login in the configuration
> web interface without authenticate myself (no username/password is asked
> by the system).
>
> Looking for .htpasswd in /var/webconf/www, I can found it and it seems
> to be correct.
>
> # ls -l /var/webconf/www/.h*
> -rw-r--r--    1 root     root            20 May 18 15:31
> /var/webconf/www/.htpasswd
> -rw-r--r--    1 root     root            20 Mar 25 18:15
> /var/webconf/www/.htpasswd.dist
>
> Can someone suggest me something to check?
>
> I can found only these two warnings in /var/log/lighttpd/error.log, but
> nothing related to .htpasswd or auth problems:
>
> 2023-05-18 15:27:16: (server.c.1588) server started (lighttpd/1.4.67)
> 2023-05-18 15:27:16: (configfile.c.1287) WARNING: unknown config-key:
> dir-listing.exclude (ignored)
> 2023-05-18 15:27:16: (configfile.c.1287) WARNING: unknown config-key:
> dir-listing.encoding (ignored)
>
> thanks
>
> Graziano
>
> --
>
> Graziano Brioschi
>
> Outland s.a.s.
> sede operativa:
> Via A. Don Rocca, 13
> 20030, Senago (MI)
> tel: 02 9948 6014
> mobile: 328 8382622
> email: [email protected]
> --> U4E <--
>
>
>
> ------------------------------------------------------------------------
> leaf-user mailing list: [email protected]
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
>

------------------------------------------------------------------------
leaf-user mailing list: [email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/