NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

mrichmon's avatar
mrichmon
Aspirant
Oct 10, 2011

Sudden SSH problems

I have had my ReadyNAS Pioneer Pro running for a couple of years with the EnableSSH add-on. Sometime in the past week I have lost the ability to ssh to the ReadyNAS. When attempting to SSH as root I get a "permission denied" error after entering the password.

I have reinstall the Enable SSH add-on a couple of times via the web interface but none of these installs have allowed ssh connectivity. I have also used the boot menu to force a re-install of the OS from flash. The only potential cause I can think of is a bad sector count on the first drive that increased by 30 blocks last weekend and another 3 blocks today.

After forcing the re-install my admin password to the web interface was reset to the default password. I was unable to SSH to the ReadyNAS so I again installed the Enable SSH add-on without any improvement.

My ReadyNAS is configured with 3x 1.5TB Seagate drives, 2x 2GB Seagate, and 1x 3TB WD Green Power drive in a dual-redundant X-RAID configuration.

Can anyone suggest any other steps I can take to get shell access working again and restore confidence in my NAS? I do not have the physical disk space available elsewhere to offload all of my files and perform a factory reset.

Thanks,
Michael Richmond

4 Replies

Replies have been turned off for this discussion
  • mdgm-ntgr's avatar
    mdgm-ntgr
    NETGEAR Employee Retired
    Try the default admin password to login via SSH.

    Download your Config backup and take a look at /etc/shadow and /etc/passwd files
  • download all logs from frontview, then do a boot menu OS REINSTALL..

    do NOT do a FACTORY DEFAULT

    the OS reinstall will reset your network config and admin password, you should then be able to add the enable ssh addon and get back into ssh.

    If that does not work, you may have to open an online ticket and see if support can remote in.

    Else, I would backup all data and do a boot menu factory default, then restore data.

    It sounds like you had a weak password and an open ssh port on your router and got hacked.
  • The ReadyNAS was not connected to an internet connected network so hacking is unlikely. (Network was a dumb switch connected to the NAS and to two Macs without internet connectivity.)

    Repeated reinstalls of the OS from flash has not resolved the issue. However, I have noticed that the end of the /etc/sshd_config appears to be truncated in the zip file obtained when backing up the settings. I have also noticed that the shutdown and reboot operations via the web interface appear to work (in that the shutdown dialog is displayed and an entry is placed in the web log), but the NAS never shuts down.

    I have pulled all the drives and factory reset the NAS with a fresh drive. After this factory reset the NAS was behaving correctly and would allow ssh access. So it would appear that the hardware is happy.

    I have put the original drives back in the NAS, performed an OS reinstall and am working to copy the data off via NFS. Once I have the data backed up I plan to reset the NAS to factory defaults, build my volume with dual redundancy from the beginning, and then restore my data.
  • mdgm-ntgr's avatar
    mdgm-ntgr
    NETGEAR Employee Retired
    If you do a factory reset, update to latest firmware first (be sure to verify update is successful) so you can get a clean install of the latest firmware. If you can't update firmware, do factory reset with one disk installed, update the firmware (verify update is successful), then factory reset with all disks in place

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More