Temat: Konfiguracja LAMP

Po nitce do klebka doszedlem do poradnika http://eko.one.pl/?p=openwrt-php
W sekcji Konfiguracja serwera www pisze:
"Zostaje tylko uruchomienie serwera httpd. Najpierw należy utworzyć plik konfiguracyjny, żeby pliki php mogły być poprawnie interpretowane:"(...) i:

# uci add httpd httpd

Jest tylko problem:

# uci add httpd httpd
uci: Entry not found

ale jest zdaje sie httpd_gargoyle. No i teraz mam pytanko: Czy nie powinienem czasem uzywac zaiast folderu /www1 folderu www i podkatalogu? Przeciez httpd_gargoyle uzywa tego wlasnie folderu i chyba tam powinienem ulokowac podkatalog ze swoja stronka? A jak wtedy bedzie wygladala wspolpraca z apache?

MiniPC 6xRJ45 2Gb, N100, 16GB DDR5, 1TB NVMe (Gargoyle)
Linksys WRT3200ACM (Gargoyle)
Tp-link 1043NDv2 (Gargoyle)

2

Odp: Konfiguracja LAMP

Ten httpd to demon pochodzący ze starego kamikaze. Teraz tego nie ma, bo nam panuje uhttpd, a jego plik konfiguracyjny to /etc/config/uhttpd. Więc w/w fragment poradnika ma się nijak to Twojej potrzebny, bo zapewne nie masz httpd po prostu. I nie musisz tego robić jeżeli używasz apache - do niczego to nie jest potrzebne. Do apache masz rozdział ciut niżej w tym poradniku.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

3

Odp: Konfiguracja LAMP

Ok, dzieki, faktycznie dziala skrypt. Czy jest jeszcze gdzies poradnik, jak zrobic ssl na apache?

MiniPC 6xRJ45 2Gb, N100, 16GB DDR5, 1TB NVMe (Gargoyle)
Linksys WRT3200ACM (Gargoyle)
Tp-link 1043NDv2 (Gargoyle)

4

Odp: Konfiguracja LAMP

Na sieci? Co jak co, ale konfiguracja apache jest dobrze opisana na stronie projektu smile

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

5

Odp: Konfiguracja LAMP

Trafilem na toakie cos: http://drzewo-wiedzy.pl/?page=artykul&id=44
tylko co mam zainstalowac do openwrt jako zastepnik mod_ssl?

MiniPC 6xRJ45 2Gb, N100, 16GB DDR5, 1TB NVMe (Gargoyle)
Linksys WRT3200ACM (Gargoyle)
Tp-link 1043NDv2 (Gargoyle)

6

Odp: Konfiguracja LAMP

Szczerze mówiąc to nie wiem czy rozszerzenie jest kompilowane w przypadku pakietu dla openwrt. Jeżeli nie to chyba czeka Cię własnoręczna kompilacja, chociaż możesz też stunnala użyć: http://eko.one.pl/?p=openwrt-stunnel

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

7

Odp: Konfiguracja LAMP

Cezary napisał/a:

Ten httpd to demon pochodzący ze starego kamikaze. Teraz tego nie ma, bo nam panuje uhttpd, a jego plik konfiguracyjny to /etc/config/uhttpd.(...)

Ale uhttpd tez nie ma domyslnie zainstalowanego? Polecenie

opkg list-installed uhttpd*

milczy. BTW: Jest na Twojej stronce konfiguracja uhttpd pod ssl?

MiniPC 6xRJ45 2Gb, N100, 16GB DDR5, 1TB NVMe (Gargoyle)
Linksys WRT3200ACM (Gargoyle)
Tp-link 1043NDv2 (Gargoyle)

8

Odp: Konfiguracja LAMP

Jak masz gargoyle to nie masz tez uhttpd. Masz zmodyfikowany httpd za to.

Do ssl po uhttpd potrzebujesz doinstalować uhttpd-mod-tls i odpowiednio to włączyć w /etc/config/uhttpd.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

9

Odp: Konfiguracja LAMP

Hmm... Mam tylko

/etc/config/httpd_gargoyle

Nie widze nic podobnego do

/etc/config/uhttpd
MiniPC 6xRJ45 2Gb, N100, 16GB DDR5, 1TB NVMe (Gargoyle)
Linksys WRT3200ACM (Gargoyle)
Tp-link 1043NDv2 (Gargoyle)

10

Odp: Konfiguracja LAMP

Weź przeczytaj jeszcze raz cały wątek bo się gubisz.

Gargoyle - na własne httpd_gargoyle
LuCI/backfire - ma uhttpd, które możesz sobie także doinstalować
LuCI/kamikaze - miało httpd z pakiety busybox.

Jak chcesz /etc/config/uhttpd to musisz po prostu zainstalować uhttpd.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

11 (edytowany przez badziewiak 2010-12-27 16:23:18)

Odp: Konfiguracja LAMP

Racja, pogubilem sie. Zeby wiec rozwiac moje watpliwosci: W gargoyle dziala ssl bez kombinowania. Czy wystarczy, ze wrzuce skrypt do /www/folder/index.php i nie potrzebuje zadnego apache, lighttpd i innych?

MiniPC 6xRJ45 2Gb, N100, 16GB DDR5, 1TB NVMe (Gargoyle)
Linksys WRT3200ACM (Gargoyle)
Tp-link 1043NDv2 (Gargoyle)

12

Odp: Konfiguracja LAMP

httpd od gargoyle nie wspiera php smile. Chyba że sobie jakoś to dokonfugurujesz (nie wiem, nie sprawdzałem czy zadziała)

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

13

Odp: Konfiguracja LAMP

No to chyba sie calkiem pogubilem:

root@Gargoyle:~# opkg install uhttpd
Package uhttpd (19) installed in root is up to date.

A przeciez mialo go nie byc. Wiec jak, jest w koncu uzywany czy nie?

MiniPC 6xRJ45 2Gb, N100, 16GB DDR5, 1TB NVMe (Gargoyle)
Linksys WRT3200ACM (Gargoyle)
Tp-link 1043NDv2 (Gargoyle)

14

Odp: Konfiguracja LAMP

opkg list_installed i zobaczysz czy go masz czy nie.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

15 (edytowany przez badziewiak 2010-12-27 21:00:46)

Odp: Konfiguracja LAMP

Zainstalowalem uhttpd i zasadniczo dziala, ale ssl juz nie. Wygenerowalem certyfikat uzywajac tego: http://www.akadia.com/services/ssh_test … icate.html
a wczesniej doinstalowalem moduly uhttpd-mod-lua i uhttpd-mod-tls. Pliki crt i key umiescilem w /etc/config/ssl.crt oraz /etc/config/ssl.key. Konfiguracja uhttpd:

# Server configuration
config uhttpd main

        # HTTP listen addresses, multiple allowed
#        list listen_http        192.168.1.1:80
#       list listen_http        [::]:80

        # HTTPS listen addresses, multiple allowed
        list listen_https       192.168.1.1:443
#       list listen_https       [::]:443

        # Server document root
        option home             /www2

        # Reject requests from RFC1918 IP addresses
        # directed to the servers public IP(s).
        # This is a DNS rebinding countermeasure.
        option rfc1918_filter 1

        # Certificate and private key for HTTPS.
        # If no listen_https addresses are given,
        # the key options are ignored.
        option cert             /etc/config/ssl.crt
        option key              /etc/config/ssl.key

        # CGI url prefix, will be searched in docroot.
        # Default is /cgi-bin
        option cgi_prefix       /cgi-bin

        # List of extension->interpreter mappings.
        # Files with an associated interpreter can
        # be called outside of the CGI prefix and do
        # not need to be executable.
#       list interpreter        ".php=/usr/bin/php-cgi"
#       list interpreter        ".cgi=/usr/bin/perl"

        # Lua url prefix and handler script.
        # Lua support is disabled if no prefix given.
#       option lua_prefix       /luci
#       option lua_handler      /usr/lib/lua/luci/sgi/uhttpd.lua

        # CGI/Lua timeout, if the called script does not
        # write data within the given amount of seconds,
        # the server will terminate the associated
        # request process.
        option network_timeout  30

        # Basic auth realm, defaults to local hostname
#       option realm    OpenWrt

        # Configuration file in busybox httpd format
#       option config   /etc/httpd.conf


# Certificate defaults for px5g key generator
config cert px5g

        # Validity time
        option days             730

        # RSA key size
        option bits             1024

        # Location
        option country          PL
        option state            Any
        option location         aaa

        # Common name
        option commonname       bbb

Macie jakies pomysly?

MiniPC 6xRJ45 2Gb, N100, 16GB DDR5, 1TB NVMe (Gargoyle)
Linksys WRT3200ACM (Gargoyle)
Tp-link 1043NDv2 (Gargoyle)

16

Odp: Konfiguracja LAMP

px5g zainstaluj jak już.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

17

Odp: Konfiguracja LAMP

No... zainstalowalem, dalem

# /etc/init.d/uhttpd restart

i nie dziala... Cos jeszcze powinienem skonfigurowac?

MiniPC 6xRJ45 2Gb, N100, 16GB DDR5, 1TB NVMe (Gargoyle)
Linksys WRT3200ACM (Gargoyle)
Tp-link 1043NDv2 (Gargoyle)

18

Odp: Konfiguracja LAMP

Ale co nie działa? nie nasłuchuje na 443?

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

19

Odp: Konfiguracja LAMP

Cezary napisał/a:

Ale co nie działa? nie nasłuchuje na 443?

Tak, mam w gargulcu przestawione porty na 82 i 444, wiec sa wolne.

MiniPC 6xRJ45 2Gb, N100, 16GB DDR5, 1TB NVMe (Gargoyle)
Linksys WRT3200ACM (Gargoyle)
Tp-link 1043NDv2 (Gargoyle)

20

Odp: Konfiguracja LAMP

No to logread i zobacz o co się buntuje.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

21

Odp: Konfiguracja LAMP

Szczerze mowiac to nie wiem o co tu chodzi, wiec zamieszczam caly log:

# logread
Jan  1 01:01:22 Gargoyle user.info kernel: ar71xx-ehci ar71xx-ehci: Atheros AR91xx built-in EHCI controller
Jan  1 01:01:22 Gargoyle user.info kernel: ar71xx-ehci ar71xx-ehci: new USB bus registered, assigned bus number 1
Jan  1 01:01:22 Gargoyle user.info kernel: ar71xx-ehci ar71xx-ehci: irq 3, io mem 0x1b000000
Jan  1 01:01:22 Gargoyle user.info kernel: ar71xx-ehci ar71xx-ehci: USB 2.0 started, EHCI 1.00
Jan  1 01:01:22 Gargoyle user.info kernel: usb usb1: configuration #1 chosen from 1 choice
Jan  1 01:01:22 Gargoyle user.info kernel: hub 1-0:1.0: USB hub found
Jan  1 01:01:22 Gargoyle user.info kernel: hub 1-0:1.0: 1 port detected
Jan  1 01:01:22 Gargoyle user.info kernel: Initializing USB Mass Storage driver...
Jan  1 01:01:22 Gargoyle user.info kernel: usbcore: registered new interface driver usb-storage
Jan  1 01:01:22 Gargoyle user.info kernel: USB Mass Storage support registered.
Jan  1 01:01:22 Gargoyle user.info kernel: usb 1-1: new high speed USB device using ar71xx-ehci and address 2
Jan  1 01:01:22 Gargoyle user.info kernel: usb 1-1: configuration #1 chosen from 1 choice
Jan  1 01:01:22 Gargoyle user.info kernel: scsi0 : SCSI emulation for USB Mass Storage devices
Jan  1 01:01:22 Gargoyle user.debug kernel: usb-storage: device found at 2
Jan  1 01:01:22 Gargoyle user.debug kernel: usb-storage: waiting for device to settle before scanning
Jan  1 01:01:22 Gargoyle user.notice kernel: scsi 0:0:0:0: Direct-Access     SanDisk  Cruzer           8.02 PQ: 0 ANSI: 0 CCS
Jan  1 01:01:22 Gargoyle user.debug kernel: usb-storage: device scan complete
Jan  1 01:01:22 Gargoyle user.notice kernel: sd 0:0:0:0: [sda] 64077823 512-byte logical blocks: (32.8 GB/30.5 GiB)
Jan  1 01:01:22 Gargoyle user.notice kernel: sd 0:0:0:0: [sda] Write Protect is off
Jan  1 01:01:22 Gargoyle user.debug kernel: sd 0:0:0:0: [sda] Mode Sense: 45 00 00 08
Jan  1 01:01:22 Gargoyle user.err kernel: sd 0:0:0:0: [sda] Assuming drive cache: write through
Jan  1 01:01:22 Gargoyle user.err kernel: sd 0:0:0:0: [sda] Assuming drive cache: write through
Jan  1 01:01:22 Gargoyle user.info kernel:  sda: sda1 sda2
Jan  1 01:01:22 Gargoyle user.err kernel: sd 0:0:0:0: [sda] Assuming drive cache: write through
Jan  1 01:01:22 Gargoyle user.notice kernel: sd 0:0:0:0: [sda] Attached SCSI removable disk
Jan  1 01:01:22 Gargoyle user.info kernel: kjournald starting.  Commit interval 5 seconds
Jan  1 01:01:22 Gargoyle user.info kernel: EXT3 FS on sda1, internal journal
Jan  1 01:01:22 Gargoyle user.info kernel: EXT3-fs: recovery complete.
Jan  1 01:01:22 Gargoyle user.info kernel: EXT3-fs: mounted filesystem with writeback data mode.
Jan  1 01:01:22 Gargoyle user.info kernel: mini_fo: using base directory: /
Jan  1 01:01:22 Gargoyle user.info kernel: mini_fo: using storage directory: /overlay
Jan  1 01:01:22 Gargoyle user.info kernel: eth0: link down
Jan  1 01:01:23 Gargoyle user.debug kernel: ar71xx: pll_reg 0xb8050014: 0x1a000000
Jan  1 01:01:23 Gargoyle user.info kernel: eth0: link up (1000Mbps/Full duplex)
Jan  1 01:01:23 Gargoyle user.info kernel: device eth0.1 entered promiscuous mode
Jan  1 01:01:23 Gargoyle user.info kernel: device eth0 entered promiscuous mode
Jan  1 01:01:23 Gargoyle user.info kernel: br-lan: port 1(eth0.1) entering forwarding state
Jan  1 01:01:24 Gargoyle user.info sysinit: Error 1 looking up hostname 0.pl.pool.ntp.org
Jan  1 01:01:24 Gargoyle user.info sysinit: Error 1 looking up hostname 1.pl.pool.ntp.org
Jan  1 01:01:24 Gargoyle user.info sysinit: Error 1 looking up hostname 2.pl.pool.ntp.org
Jan  1 01:01:24 Gargoyle user.info kernel: Compat-wireless backport release: compat-wireless-2010-10-14-7-gab01eca
Jan  1 01:01:24 Gargoyle user.info kernel: Backport based on wireless-testing.git master-2010-10-19
Jan  1 01:01:25 Gargoyle user.info kernel: cfg80211: Calling CRDA to update world regulatory domain
Jan  1 01:01:27 Gargoyle user.info kernel: cfg80211: World regulatory domain updated:
Jan  1 01:01:27 Gargoyle user.info kernel:     (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
Jan  1 01:01:27 Gargoyle user.info kernel:     (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
Jan  1 01:01:27 Gargoyle user.info kernel:     (2457000 KHz - 2482000 KHz @ 20000 KHz), (300 mBi, 2000 mBm)
Jan  1 01:01:27 Gargoyle user.info kernel:     (2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm)
Jan  1 01:01:27 Gargoyle user.info kernel:     (5170000 KHz - 5250000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
Jan  1 01:01:27 Gargoyle user.info kernel:     (5735000 KHz - 5835000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
Jan  1 01:01:30 Gargoyle user.debug kernel: ath: EEPROM regdomain: 0x0
Jan  1 01:01:30 Gargoyle user.debug kernel: ath: EEPROM indicates default country code should be used
Jan  1 01:01:30 Gargoyle user.debug kernel: ath: doing EEPROM country->regdmn map search
Jan  1 01:01:30 Gargoyle user.debug kernel: ath: country maps to regdmn code: 0x3a
Jan  1 01:01:30 Gargoyle user.debug kernel: ath: Country alpha2 being used: US
Jan  1 01:01:30 Gargoyle user.debug kernel: ath: Regpair used: 0x3a
Jan  1 01:01:30 Gargoyle user.debug kernel: ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
Jan  1 01:01:30 Gargoyle user.info kernel: ieee80211 phy0: Atheros AR9100 MAC/BB Rev:0 AR2133 RF Rev:a2 mem=0xb80c0000, irq=2
Jan  1 01:01:30 Gargoyle user.info kernel: cfg80211: Calling CRDA for country: US
Jan  1 01:01:32 Gargoyle user.info kernel: RPC: Registered udp transport module.
Jan  1 01:01:32 Gargoyle user.info kernel: RPC: Registered tcp transport module.
Jan  1 01:01:32 Gargoyle user.info kernel: RPC: Registered tcp NFSv4.1 backchannel transport module.
Jan  1 01:01:35 Gargoyle user.info kernel: PPP generic driver version 2.4.2
Jan  1 01:01:36 Gargoyle user.info kernel: cfg80211: Regulatory domain changed to country: US
Jan  1 01:01:36 Gargoyle user.info kernel:     (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
Jan  1 01:01:36 Gargoyle user.info kernel:     (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2700 mBm)
Jan  1 01:01:36 Gargoyle user.info kernel:     (5170000 KHz - 5250000 KHz @ 40000 KHz), (300 mBi, 1700 mBm)
Jan  1 01:01:36 Gargoyle user.info kernel:     (5250000 KHz - 5330000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
Jan  1 01:01:36 Gargoyle user.info kernel:     (5490000 KHz - 5600000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
Jan  1 01:01:36 Gargoyle user.info kernel:     (5650000 KHz - 5710000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
Jan  1 01:01:36 Gargoyle user.info kernel:     (5735000 KHz - 5835000 KHz @ 40000 KHz), (300 mBi, 3000 mBm)
Jan  1 01:01:36 Gargoyle user.info kernel: Installing knfsd (copyright (C) 1996 okir@monad.swb.de).
Jan  1 01:01:37 Gargoyle user.info kernel: ip_tables: (C) 2000-2006 Netfilter Core Team
Jan  1 01:01:37 Gargoyle user.info kernel: NET: Registered protocol family 24
Jan  1 01:01:37 Gargoyle user.warn kernel: nf_conntrack version 0.5.0 (460 buckets, 1840 max)
Jan  1 01:01:37 Gargoyle user.warn kernel: CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use
Jan  1 01:01:37 Gargoyle user.warn kernel: nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or
Jan  1 01:01:37 Gargoyle user.warn kernel: sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
Jan  1 01:01:38 Gargoyle user.info kernel: xt_time: kernel timezone is -0000
Jan  1 01:01:39 Gargoyle user.info kernel:      Hooked IMQ after mangle on PREROUTING
Jan  1 01:01:39 Gargoyle user.info kernel:      Hooked IMQ after nat on POSTROUTING
Jan  1 01:01:39 Gargoyle user.info kernel: IMQ driver loaded successfully.
Jan  1 01:01:39 Gargoyle user.info kernel: Ebtables v2.0 registered
Jan  1 01:01:40 Gargoyle user.info kernel: usbcore: registered new interface driver ums-alauda
Jan  1 01:01:40 Gargoyle user.info kernel: usbcore: registered new interface driver ums-cypress
Jan  1 01:01:40 Gargoyle user.info kernel: usbcore: registered new interface driver ums-datafab
Jan  1 01:01:40 Gargoyle user.info kernel: usbcore: registered new interface driver ums-freecom
Jan  1 01:01:40 Gargoyle user.info kernel: usbcore: registered new interface driver ums-isd200
Jan  1 01:01:40 Gargoyle user.info kernel: usbcore: registered new interface driver ums-jumpshot
Jan  1 01:01:40 Gargoyle user.info kernel: usbcore: registered new interface driver ums-karma
Jan  1 01:01:40 Gargoyle user.info kernel: usbcore: registered new interface driver ums-sddr09
Jan  1 01:01:40 Gargoyle user.info kernel: usbcore: registered new interface driver ums-sddr55
Jan  1 01:01:41 Gargoyle user.info kernel: usbcore: registered new interface driver ums-usbat
Jan  1 01:01:41 Gargoyle user.info kernel: fuse init (API version 7.13)
Jan  1 01:01:43 Gargoyle user.info kernel: Adding 224900k swap on /dev/sda2.  Priority:-1 extents:1 across:224900k
Jan  1 01:01:47 Gargoyle user.info kernel: device wlan0 entered promiscuous mode
Jan  1 01:01:47 Gargoyle user.info kernel: br-lan: port 2(wlan0) entering forwarding state
Jan  1 01:01:49 Gargoyle user.notice root: starting ntpclient
Dec 27 19:54:12 Gargoyle user.info kernel: device wlan0 left promiscuous mode
Dec 27 19:54:12 Gargoyle user.info kernel: br-lan: port 2(wlan0) entering disabled state
Dec 27 19:54:12 Gargoyle user.info kernel: device wlan0 entered promiscuous mode
Dec 27 19:54:12 Gargoyle user.info kernel: br-lan: port 2(wlan0) entering forwarding state
Dec 27 16:00:01 Gargoyle user.notice root: starting ntpclient
Dec 27 19:54:13 Gargoyle user.info sysinit: Loading defaults
Dec 27 19:54:14 Gargoyle user.info sysinit: Loading synflood protection
Dec 27 19:54:14 Gargoyle user.info sysinit: Adding custom chains
Dec 27 19:54:15 Gargoyle user.info sysinit: Loading zones
Dec 27 19:54:15 Gargoyle user.info sysinit: Loading forwarding
Dec 27 19:54:15 Gargoyle user.info sysinit: Loading redirects
Dec 27 19:54:15 Gargoyle user.info sysinit: Loading rules
Dec 27 19:54:16 Gargoyle user.info sysinit: Loading includes
Dec 27 19:54:16 Gargoyle user.notice rdate: Failed to sync with ac-ntp1.net.cmu.edu
Dec 27 19:54:16 Gargoyle user.info sysinit: iptables -t filter -A input_wan -p tcp --dport 444 -m connmark --mark 0x0080/0x0080 -j ACCEPT
Dec 27 19:54:16 Gargoyle user.notice rdate: Failed to sync with ptbtime3.ptb.de
Dec 27 19:54:16 Gargoyle user.notice rdate: Failed to sync with ptbtime3.ptb.de
Dec 27 19:54:17 Gargoyle user.info sysinit: l7 used = ""
Dec 27 19:54:17 Gargoyle user.info sysinit: Loading zone defaults
Dec 27 19:54:18 Gargoyle user.notice root: adding lan (br-lan) to firewall zone lan
Dec 27 19:54:18 Gargoyle user.notice root: adding wan (eth0.2) to firewall zone wan
Dec 27 19:54:18 Gargoyle cron.err crond[1866]: crond (busybox 1.15.3) started, log level 5
Dec 27 19:54:19 Gargoyle authpriv.info dropbear[1874]: Running in background
Dec 27 19:54:19 Gargoyle daemon.crit httpd_gargoyle[1902]: socket :: - Address family not supported by protocol
Dec 27 19:54:19 Gargoyle daemon.err httpd_gargoyle[1902]: unknown sockaddr family on listen socket - 0
Dec 27 19:54:19 Gargoyle daemon.warn httpd_gargoyle[1906]: started as root without requesting chroot(), warning only
Dec 27 19:54:19 Gargoyle daemon.notice httpd_gargoyle[1906]: httpd_gargoyle/1.0 14mar2008 starting on Gargoyle, port 82
Dec 27 19:54:21 Gargoyle cron.err crond[2303]: crond (busybox 1.15.3) started, log level 5
Dec 27 19:54:22 Gargoyle user.info sysinit: Changing password for rodzina
Dec 27 19:54:22 Gargoyle user.info sysinit: New password:
Dec 27 19:54:22 Gargoyle user.info sysinit: Bad password: too short
Dec 27 19:54:23 Gargoyle user.info sysinit: Retype password:
Dec 27 19:54:24 Gargoyle auth.info passwd: Password for rodzina changed by root
Dec 27 19:54:24 Gargoyle user.info sysinit: Password for rodzina changed by root
Dec 27 19:54:25 Gargoyle user.notice dnsmasq: DNS rebinding protection is active, will discard upstream RFC1918 responses!
Dec 27 19:54:25 Gargoyle user.notice dnsmasq: Allowing 127.0.0.0/8 responses
Dec 27 19:54:29 Gargoyle daemon.info dnsmasq[2354]: started, version 2.55 cachesize 150
Dec 27 19:54:29 Gargoyle daemon.info dnsmasq[2354]: compile time options: IPv6 GNU-getopt no-DBus no-I18N DHCP TFTP
Dec 27 19:54:29 Gargoyle daemon.info dnsmasq-dhcp[2354]: DHCP, IP range 192.168.1.100 -- 192.168.1.250, lease time 12h
Dec 27 19:54:29 Gargoyle daemon.info dnsmasq[2354]: using local addresses only for domain lan
Dec 27 19:54:29 Gargoyle daemon.info dnsmasq[2354]: reading /tmp/resolv.conf.auto
Dec 27 19:54:29 Gargoyle daemon.info dnsmasq[2354]: using nameserver 84.205.160.1#53
Dec 27 19:54:29 Gargoyle daemon.info dnsmasq[2354]: using nameserver 84.205.161.138#53
Dec 27 19:54:29 Gargoyle daemon.warn dnsmasq[2354]: ignoring nameserver 192.168.1.1 - local interface
Dec 27 19:54:29 Gargoyle daemon.info dnsmasq[2354]: using local addresses only for domain lan
Dec 27 19:54:29 Gargoyle daemon.info dnsmasq[2354]: read /etc/hosts - 2 addresses
Dec 27 19:54:29 Gargoyle daemon.info dnsmasq-dhcp[2354]: read /etc/ethers - 0 addresses
Dec 27 19:54:29 Gargoyle daemon.warn exportfs[2370]: could not open /var/lib/nfs/.etab.lock for locking: errno 2 (No such file or directory)
Dec 27 19:54:29 Gargoyle user.info sysinit: exportfs: could not open /var/lib/nfs/.etab.lock for locking: errno 2 (No such file or directory)
Dec 27 19:54:29 Gargoyle daemon.err exportfs[2370]: can't lock /var/lib/nfs/etab for writing
Dec 27 19:54:29 Gargoyle user.info sysinit: exportfs: can't lock /var/lib/nfs/etab for writing
Dec 27 19:54:32 Gargoyle user.info sysinit: ERROR: No valid dynamic DNS service configurations defined
Dec 27 19:54:32 Gargoyle user.info sysinit: (Did you specify correct configuration file path?)
Dec 27 19:54:32 Gargoyle user.info sysinit: setting up led WLAN
Dec 27 19:54:32 Gargoyle user.debug kernel: ar71xx-wdt: enabling watchdog timer
Dec 27 19:54:52 Gargoyle daemon.info hostapd: wlan0: STA 00:16:cf:68:69:c4 IEEE 802.11: authenticated
Dec 27 19:55:34 Gargoyle daemon.info hostapd: wlan0: STA 00:16:cf:68:69:c4 IEEE 802.11: authenticated
Dec 27 19:55:34 Gargoyle daemon.info hostapd: wlan0: STA 00:16:cf:68:69:c4 IEEE 802.11: associated (aid 1)
Dec 27 19:55:34 Gargoyle daemon.info hostapd: wlan0: STA 00:16:cf:68:69:c4 WPA: received EAPOL-Key 2/4 Pairwise with unexpected replay counter
Dec 27 19:55:37 Gargoyle daemon.info hostapd: wlan0: STA 00:16:cf:68:69:c4 IEEE 802.11: deauthenticated due to local deauth request
Dec 27 19:55:38 Gargoyle daemon.info hostapd: wlan0: STA 00:16:cf:68:69:c4 IEEE 802.11: authenticated
Dec 27 19:55:38 Gargoyle daemon.info hostapd: wlan0: STA 00:16:cf:68:69:c4 IEEE 802.11: associated (aid 1)
Dec 27 19:55:39 Gargoyle daemon.info hostapd: wlan0: STA 00:16:cf:68:69:c4 WPA: pairwise key handshake completed (RSN)
Dec 27 19:56:28 Gargoyle authpriv.info dropbear[2534]: Child connection from 192.168.1.102:4496
Dec 27 19:56:32 Gargoyle authpriv.notice dropbear[2534]: password auth succeeded for 'root' from 192.168.1.102:4496
Dec 27 19:56:41 Gargoyle authpriv.info dropbear[2541]: Child connection from 192.168.1.102:4497
Dec 27 19:56:43 Gargoyle authpriv.notice dropbear[2541]: password auth succeeded for 'root' from 192.168.1.102:4497
Dec 27 20:00:01 Gargoyle cron.err crond[2303]: USER root pid 2566 cmd /usr/bin/set_kernel_timezone >/dev/null 2>&1
Dec 27 20:00:01 Gargoyle cron.err crond[2303]: USER root pid 2567 cmd date -u  +"%Y.%m.%d-%H:%M:%S" >/usr/data/time_backup
Dec 27 20:00:01 Gargoyle cron.err crond[2303]: USER root pid 2568 cmd /tmp/do_bw_backup.sh
Dec 27 20:00:45 Gargoyle authpriv.info dropbear[2541]: exit after auth (root): Exited normally
Dec 27 20:01:01 Gargoyle cron.err crond[2303]: USER root pid 2604 cmd /usr/bin/set_kernel_timezone >/dev/null 2>&1
Dec 27 20:04:12 Gargoyle daemon.info hostapd: wlan0: STA 00:16:cf:68:69:c4 WPA: group key handshake completed (RSN)
Dec 27 20:11:01 Gargoyle cron.err crond[2303]: USER root pid 2644 cmd /usr/bin/set_kernel_timezone >/dev/null 2>&1
Dec 27 20:14:12 Gargoyle daemon.info hostapd: wlan0: STA 00:16:cf:68:69:c4 WPA: group key handshake completed (RSN)
Dec 27 20:21:01 Gargoyle cron.err crond[2303]: USER root pid 2654 cmd /usr/bin/set_kernel_timezone >/dev/null 2>&1

Z tego co widze to ignoruje lokalny IP i probuje przystawic sie do WAN (dobrze zrozumialem?), ale i tak nie wiem co przestawic.

MiniPC 6xRJ45 2Gb, N100, 16GB DDR5, 1TB NVMe (Gargoyle)
Linksys WRT3200ACM (Gargoyle)
Tp-link 1043NDv2 (Gargoyle)

22

Odp: Konfiguracja LAMP

Kompletnie nic tu nie ma. Uruchomiony masz w ogóle? /etc/init.d/uhttpd restart

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

23

Odp: Konfiguracja LAMP

htop pokazuje:

/usr/sbin/uhttpd -f -h  /www2 -r Gargoyle  -x /cgi-bin -t 60 -T 30 -R -p 192.168.1.1:80

Plik konfiguracyjny byl ustawiony na http 80 (po http poszlo). Po zmianie na https, nie widac tego procesu w htop, pomimo restartowania. Jakby nie wstawal, chociaz nie wywala bledow. Fragment logread:

Dec 27 20:34:12 Gargoyle daemon.info hostapd: wlan0: STA 00:16:cf:68:69:c4 WPA: group key handshake completed (RSN)
Dec 27 20:41:01 Gargoyle cron.err crond[2303]: USER root pid 2683 cmd /usr/bin/set_kernel_timezone >/dev/null 2>&1
Dec 27 20:44:12 Gargoyle daemon.info hostapd: wlan0: STA 00:16:cf:68:69:c4 WPA: group key handshake completed (RSN)
Dec 27 20:51:01 Gargoyle cron.err crond[2303]: USER root pid 2691 cmd /usr/bin/set_kernel_timezone >/dev/null 2>&1
Dec 27 20:54:12 Gargoyle daemon.info hostapd: wlan0: STA 00:16:cf:68:69:c4 WPA: group key handshake completed (RSN)
Dec 27 21:00:01 Gargoyle cron.err crond[2303]: USER root pid 2700 cmd /usr/bin/set_kernel_timezone >/dev/null 2>&1
Dec 27 21:01:01 Gargoyle cron.err crond[2303]: USER root pid 2702 cmd /usr/bin/set_kernel_timezone >/dev/null 2>&1
Dec 27 21:04:12 Gargoyle daemon.info hostapd: wlan0: STA 00:16:cf:68:69:c4 WPA: group key handshake completed (RSN)

Zmieniony plik konfiguracyjny uhttpd:

# Server configuration
config uhttpd main

        # HTTP listen addresses, multiple allowed
#       list listen_http        192.168.1.1:80
#       list listen_http        [::]:80

        # HTTPS listen addresses, multiple allowed
        list listen_https       192.168.1.1:443
#       list listen_https       [::]:443

        # Server document root
        option home             /www2

        # Reject requests from RFC1918 IP addresses
        # directed to the servers public IP(s).
        # This is a DNS rebinding countermeasure.
        option rfc1918_filter 1

        # Certificate and private key for HTTPS.
        # If no listen_https addresses are given,
        # the key options are ignored.
        option cert             /etc/config/ssl.crt
        option key              /etc/config/ssl.key

        # CGI url prefix, will be searched in docroot.
        # Default is /cgi-bin
        option cgi_prefix       /cgi-bin

        # List of extension->interpreter mappings.
        # Files with an associated interpreter can
        # be called outside of the CGI prefix and do
        # not need to be executable.
#       list interpreter        ".php=/usr/bin/php-cgi"
#       list interpreter        ".cgi=/usr/bin/perl"

        # Lua url prefix and handler script.
        # Lua support is disabled if no prefix given.
#       option lua_prefix       /luci
#       option lua_handler      /usr/lib/lua/luci/sgi/uhttpd.lua

        # CGI/Lua timeout, if the called script does not
        # write data within the given amount of seconds,
        # the server will terminate the request with
        # 504 Gateway Timeout response.
        option script_timeout   60

        # Network timeout, if the current connection is
        # blocked for the specified amount of seconds,
        # the server will terminate the associated
        # request process.
        option network_timeout  30

        # Basic auth realm, defaults to local hostname
#       option realm    OpenWrt

        # Configuration file in busybox httpd format
#       option config   /etc/httpd.conf


# Certificate defaults for px5g key generator
config cert px5g

        # Validity time
        option days             730

        # RSA key size
        option bits             1024

        # Location
        option country          PL
        option state            Any
        option location         aaa

        # Common name
        option commonname       bbb
MiniPC 6xRJ45 2Gb, N100, 16GB DDR5, 1TB NVMe (Gargoyle)
Linksys WRT3200ACM (Gargoyle)
Tp-link 1043NDv2 (Gargoyle)

24

Odp: Konfiguracja LAMP

Mam jeszcze pytanie: Czy w sekcji # Certificate defaults for px5g key generator dane w Location musza odpowiadac tym, ktore sa podawane w trakcie generowania certyfikatu?

MiniPC 6xRJ45 2Gb, N100, 16GB DDR5, 1TB NVMe (Gargoyle)
Linksys WRT3200ACM (Gargoyle)
Tp-link 1043NDv2 (Gargoyle)

25

Odp: Konfiguracja LAMP

Tak jakby nie widział /etc/config/ssl.crt i /etc/config/ssl.key. Sprawdza czy pliki istnieją, jeżeli tak to dokleja odpowiednie opcje do uhttpd. U Ciebie tego nie zrobił.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.