Unable to ssh as root after installing openssh

[windar]

Hello all,

I just ran an ipkg install openssh on my DS107+.
The problem is that now I cannot ssh in with user root, the password is no longer valid.
I can still log in as user admin and the web ui is still accessible but admin's privileges are too low to let me modify any system settings (disabling the sshd startup script would be an interesting idea ).
I did not install sudo (my tough luck).
I ran the official Disable_SSH patch via the web ui, this didn't change anything, there's still an sshd running...

It seems that installing the openssh package "overrides" the original sshd, the main problem is it's now prompting me with a password that I do not know

Does anyone out there have any clues ?

Thanks

[windar]

OK, telnet access to my DS107+ just about saved my life
Managed to set a root password for ssh access (sshd from optware, official ssh access is disabled).

But there's definitely something a little odd about this...

[R-T]

Confirmed here on DS-207+ with latest stable FW #598.

When connecting to SSH I get a "key fingerprint changed" warning -so far so good-, but can't auth as root:

Code: Select all

DiskStation> uname -a
Linux DiskStation 2.6.15 #598 Sat Apr 12 22:16:49 CST 2008 armv5tejl GNU/Linux
DiskStation> id
uid=1024(admin) gid=100(users)
DiskStation> su -
Password:
su: incorrect password


login via telnet worked fine, so I did as you did and used passwd to change the root password.

[fetto]

Hi!

Similar problem. I can telnet as root and su to anyone but root (unless I already are root).

Code: Select all

DiskStation> uname -a
Linux DiskStation 2.6.15 #722 Fri Sep 19 20:23:15 CST 2008 armv5tejl unknown
DiskStation> id
uid=0(root) gid=0(root)
DiskStation> dir `which su`
lrwxrwxrwx    1 root     root           19 Oct 16 18:38 /opt/bin/su -> /opt/bin/adduser-su
DiskStation> dir /opt/bin/adduser-su
lrwxrwxrwx    1 root     root            7 Oct 16 18:38 /opt/bin/adduser-su -> adduser
DiskStation> dir /opt/bin/adduser
-rwsr-sr-x    1 root     root        80628 Jun 11 09:02 /opt/bin/adduser
DiskStation> dir /etc/passwd
-rw-r--r--    1 root     root          460 Oct 17 23:58 /etc/passwd
DiskStation> dir /etc/group
-rw-r--r--    1 root     root          102 Oct 18 00:05 /etc/group
DiskStation> dir /etc/shadow
-rw-r--r--    1 root     root          358 Oct 17 23:57 /etc/shadow
DiskStation> su - fetto
fetto@DiskStation:/home/fetto$ id
uid=1026(fetto) gid=100(users)
fetto@DiskStation:/home/fetto$ su -
Password:
su: incorrect password


I've tried adding another user and changing the password for root and so on, but no good!
Thanks in advance for your help!

/Patrik

[newash]

Hi!

I have just run into this problem and in my case on the Web Admin interface truning
Network Services >> Terminal >> Enable SSH service
off and then on restored the original sshd, so I could log in back again and remove openssh.

[torbenfox]

I just had the same problem with my DS207+ - could not login as root via ssh - only as admin.
It was fixed by disabling SSH in the WEB management system, reenabling SSH and then change the admin password from the web interface (logging in as root via SSH at this stage worked, but using passwd to change the password seemed not to work?). Anyway, I'm now able to ssh as root with the new password.

[bzhou]

Best way would be to setup pubkey authentication.

[bernardn]

I had the same problem after installing openssh. For a reason, the ipkg installs forbids root login by default. To enable you have to change the setting PermitRootLogin to yes:

Code: Select all

PermitRootLogin yes


As only root can modify this file, you will have to login by telnet to do it. Telnet can be enabled in the management interface.
Bernard.

[agustin]

Great! I found the answer to my problem too! And with updated sshd via ipkg I was able to use scp which my preferred method of copying files to remote server.

[FreeMinded]

I had the same problem after installing openssh. For a reason, the ipkg installs forbids root login by default. To enable you have to change the setting PermitRootLogin to yes:

Code: Select all

PermitRootLogin yes


As only root can modify this file, you will have to login by telnet to do it. Telnet can be enabled in the management interface.
Bernard.

I tried that but either it doesn't work or I can't find the correct file to edit. Shouldn't it be in /opt/etc/openssh/sshd_config?
I uncommented PermitRootLogin yes and rebooted the box. But still no ssh access as root (admin works fine). I also tried with modifying /etc/ssh/sshd_cofig with teh same result. Anyway I asume that this would be the config for the original sshd. Any ideas what I have overlooked?

Thanks in advance
FM

[FreeMinded]

OK, some more search gave me the solution. The standard root password is "synopass" (without the quotes). In the built in sshd the root password is mapped to root. Login with synopass and change the password using the command "passwd". Then it works again as one would expect. This seems to be a nice backdoor once you permit root login.

[RED]

The standard root password is "synopass" (without the quotes).

What the heck!? You are right! What kind of foolishness is this? I guess this is where I should cook my DS at 150 degrees Celsius for 10 minutes because it could be compromised.

Login with synopass and change the password using the command "passwd". Then it works again as one would expect. This seems to be a nice backdoor once you permit root login.

I'd love to change that and bring ssh back online, but there is no passwd command.

[slowhand73]

Hello all, this is my first post here !

I'd love to change that and bring ssh back online, but there is no passwd command.

You can use :

Code: Select all

mkpasswd -5

to generate a md5 password and the replace the root password with this new one in /etc/shadow !

(mkpasswd is brought by the whois ipkg package by the way).

[Goner]

I thought the 'root' password was the same as the DSM 'admin' password ?
So if you change the admin password in DSM, you also have a new root password ...

I'd love to change that and bring ssh back online, but there is no passwd command.

synouser --help
Copyright (c) 2003-2012 Synology Inc. All rights reserved.

Usage: synouser (Version 2198)
--help
--rebuild {all|(domain Force{0|1})|(ldap Force{0|1})}
--enum {local|domain|ldap|all|domain_used}
--enumpre {local|domain|all|domain_used} prefix Caseless{0|1}
--enumsub {local|domain|all|domain_used} substr Caseless{0|1}
--get username
--getuid UID
--add [username pwd "full name" expired{0|1} mail privilege]
--modify username "full name" expired{0|1} mail
--rename old_username new_username
--setpw username newpasswd
--del username1 username2 ...
--login username pwd
--dbopen2 username

[RED]

I thought the 'root' password was the same as the DSM 'admin' password ?
So if you change the admin password in DSM, you also have a new root password ...

Nope, not for me. ssh root is always that same scary default. Maybe it's different with a clean firmware installation, but I got here after a bunch of upgrades throughout the years. Don't know if that makes different behavior due to some old links or configs or idk.

synouser --help
(..)
--setpw username newpasswd

Thanks, I'll try it out next time I have physical access to the DS.