Can't logon to Frontview GUI,admin password rejected, SSH OK

swe_nas · ‎2015-02-17

Hi,
I tried to follow the steps for Newznab install outlined in this topic http://www.readynas.com/forum/viewtopic.php?f=11&t=69080 but somewhere along the path I lost access to the Frontview web GUI after finally getting mysql to run after a lot of different issues (complaining about "logger" not being available etc.). It also seems like the boot now takes several minutes after PHP (or mysql) was installed and I don't know the reason for that.

The current mainproblem is: When I try to access Frontview, it will pop-up the window for user and password, when I insert "admin" and my password, it only comes into a loop and ask for it again (incorrect password it seems)
My first question: Is the password for Frontview managed by the unix command "passwd" so when I logon via SSH (which works) I can change the password for "root" and it shall be done for Frontview too? Just to make sure there is no corruption on the password file etc..

I have also noticed that my /usr/bin directory seems to have some funky access rights like "root" and "mysql" for all of the files like
-rwxr-xr-x 1 root mysql 28480 2007-02-27 08:53 passwd
But I don't know how a "normal" system should look like, could someone please enlighten me? Shouldn't it be "root root"? I don't work with Linux everyday so any help is appreciated!

I've taken some info from a few config files below too related to Apache and web config which might be helpful I hope

Httpd.conf

ServerRoot /frontview/ui/resource/html

ServerTokens ProductOnly
LockFile /var/log/frontview/apache.lock
PidFile /var/log/frontview/apache-ssl.pid

Timeout 300
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 15

StartServers 1
MinSpareServers 1
MaxSpareServers 1
MaxClients 10
MaxRequestsPerChild 250

Listen 80

#LoadModule php5_module /usr/lib/apache2/modules/libphp5.so           
#AddHandler php5-script .php                                          
#AddType text/html .php                                               
#AddType application/x-httpd-php .php                                
#AddType application/x-httpd-php-source .phps
LoadModule perl_module /usr/lib/apache2/modules/mod_perl.so
LoadModule apreq_module /usr/lib/apache2/modules/mod_apreq2.so
LoadModule addonhandler_module /frontview/lib/mod_addonhandler.so
APREQ2_ReadLimit 2147483648
Include /etc/frontview/apache/Auth.conf

ExtendedStatus On
TraceEnable Off

User admin
Group admin

ServerAdmin admin@localhost

Options Indexes
DocumentRoot /frontview/ui/resource/html

<Files ~ "^\.ht">
    Order allow,deny
    Deny from all
</Files>

<Files ~ "\.(js|jpg|jpeg|gif|html|htm|png|css)">
    Header set Pragma: public
</Files>

UseCanonicalName Off
TypesConfig /etc/mime.types
DefaultType text/plain

<IfModule mod_mime_magic.c>
    MIMEMagicFile share/magic
</IfModule>

HostnameLookups Off

ErrorLog /var/log/frontview/error.log
LogLevel warn
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %T %v" full
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %P %T" debug
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent
CustomLog /var/log/frontview/access.log combined

<IfModule mod_autoindex.c>
    IndexOptions Charset=
    IndexOptions FancyIndexing NameWidth=*
    AddIconByEncoding (CMP,/images/Icons/compressed.gif) x-compress x-gzip
    AddIconByType (TXT,/images/Icons/text.gif) text/*
    AddIconByType (IMG,/images/Icons/image2.gif) image/*
    AddIconByType (SND,/images/Icons/sound2.gif) audio/*
    AddIconByType (VID,/images/Icons/movie.gif) video/*
    AddIcon /images/Icons/binary.gif .bin .exe
    AddIcon /images/Icons/binhex.gif .hqx
    AddIcon /images/Icons/tar.gif .tar
    AddIcon /images/Icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv
    AddIcon /images/Icons/compressed.gif .Z .z .tgz .gz .zip
    AddIcon /images/Icons/a.gif .ps .ai .eps
    AddIcon /images/Icons/layout.gif .html .shtml .htm .pdf
    AddIcon /images/Icons/text.gif .txt
    AddIcon /images/Icons/c.gif .c
    AddIcon /images/Icons/p.gif .pl .py
    AddIcon /images/Icons/f.gif .for
    AddIcon /images/Icons/dvi.gif .dvi
    AddIcon /images/Icons/uuencoded.gif .uu
    AddIcon /images/Icons/script.gif .conf .sh .shar .csh .ksh .tcl
    AddIcon /images/Icons/tex.gif .tex
    AddIcon /images/Icons/bomb.gif core
    AddIcon /images/Icons/back.gif ..
    AddIcon /images/Icons/hand.right.gif README
    AddIcon /images/Icons/folder.gif ^^DIRECTORY^^
    AddIcon /images/Pix.gif ^^BLANKICON^^
    DefaultIcon /images/Icons/unknown.gif
    ReadmeName /html/AUTOINDEX.html
    HeaderName HEADER.html
    IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t
</IfModule>

<IfModule mod_mime.c>
    AddEncoding x-compress Z
    AddEncoding x-gzip gz tgz
    AddLanguage da .dk
    AddLanguage nl .nl
    AddLanguage en .en
    AddLanguage et .ee
    AddLanguage fr .fr
    AddLanguage de .de
    AddLanguage el .el
    AddLanguage it .it
    AddLanguage ja .ja
    AddCharset ISO-2022-JP .jis
    AddLanguage pl .po
    AddCharset ISO-8859-2 .iso-pl
    AddLanguage pt .pt
    AddLanguage pt-br .pt-br
    AddLanguage ltz .lu
    AddLanguage ca .ca
    AddLanguage es .es
    AddLanguage sv .se
    AddLanguage cz .cz
    <IfModule mod_negotiation.c>
        LanguagePriority en da nl et fr de el it ja pl pt pt-br ltz ca es sv
    </IfModule>
    AddType application/x-tar .tgz
    AddType image/bmp .bmp
    AddType text/x-hdml .hdml
    AddType video/x-ms-asf .asf
    AddType video/x-ms-asf .asx
    AddType video/x-msvideo .avi
    AddType video/quicktime .mov
    AddType video/x-sgi-movie .movie
    AddType video/mp4 .mp4
    AddType video/mpeg .mpe 
    AddType video/mpeg .mpeg
    AddType video/mpeg .mpg
    AddType video/x-sgi-movie .mv
    AddType video/vnd.mpegurl .mxu
    AddType video/quicktime .qt
    AddType video/x-rad-screenplay .vx
    AddType video/x-ms-wm .wm
    AddType video/x-ms-wmv .wmv
    AddType video/x-ms-wmx .wmx
    AddType video/x-ms-wvx .wvx

    AddHandler cgi-script .cgi .sh .pl
</IfModule>

#AddDefaultCharset utf-8

<IfModule mod_setenvif.c>
    BrowserMatch "Mozilla/2" nokeepalive
    BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
    BrowserMatch "RealPlayer 4\.0" force-response-1.0
    BrowserMatch "Java/1\.0" force-response-1.0
    BrowserMatch "JDK/1\.0" force-response-1.0
    BrowserMatch "^WebDAVFS/1.[012]" redirect-carefully 
    BrowserMatch "Microsoft Data Access Internet Publishing Provider" redirect-carefully
    BrowserMatch "Microsoft-WebDAV-MiniRedir/5.1.2600" redirect-carefully
    BrowserMatch "^WebDrive" redirect-carefully 
    BrowserMatch "^WebDAVFS" redirect-carefully 
    # Drop the Range header when more than 5 ranges.
    # CVE-2011-3192
    SetEnvIf Range (?:,.*?){5,5} bad-range=1
    RequestHeader unset Range env=bad-range
    # We always drop Request-Range; as this is a legacy
    # dating back to MSIE3 and Netscape 2 and 3.
    RequestHeader unset Request-Range
</IfModule>

DAVLockDB /ramfs/WebDAVLock.db
DAVMinTimeout 600

Listen 443
SSLEngine On
SSLSessionCache dbm:/ramfs/gcache.db
SSLSessionCacheTimeout 600
SSLCACertificatePath /etc/frontview/apache
SSLCertificateFile /etc/frontview/apache/apache.pem

# -------------------------------------------------------------------
# Uncomment following when more graceful error message docs are used.
# Currently IE defaults it it's browser message, overriding any error
# docs we create anyway.
# -------------------------------------------------------------------
# ErrorDocument 401 /error/401.html
# ErrorDocument 403 /error/403.html
# ErrorDocument 404 /error/404.html
# ErrorDocument 500 /error/500.html
# Alias /error /frontview/ui/error

<Location />
  Options ExecCGI
  DirectoryIndex redirect.html index.html index.htm index.php
</Location>

Alias /message_handler /frontview/lib
<Location /message_handler>
  Options ExecCGI
  DirectoryIndex message_handler.cgi 
  Include /etc/frontview/apache/Auth.conf
  AuthName "Control Panel"
  require user admin
</Location>

<Location /addon>
  SetHandler addonhandler
</Location>

Alias /shares /frontview/ui/resource/html/user.pl
<Location /shares>
  Options ExecCGI
  Include /etc/frontview/apache/Auth.conf
  AuthName "My Shares"
  require valid-user
</Location>

Alias /password_recovery /frontview/ui/resource/html/password_recovery.html

<Location /index.html>
  SetHandler server-status
  Order Deny,Allow
  Deny from all
</Location> 

Alias /images/ /frontview/ui/resource/images/
<Directory /images>
    Options MultiViews
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>

Alias /theme/ /frontview/ui/resource/theme/
<Directory /theme>
    Options MultiViews
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>

Alias /js/ /frontview/ui/resource/js/
<Directory /js>
    Options MultiViews
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>

Alias /language/ /frontview/ui/resource/language/
<Directory /language>
    Options MultiViews
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>

PerlSwitches -I /etc/frontview/addons/ui
Alias /addons/ /etc/frontview/addons/ui/
<Directory /addons>
    Options MultiViews
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>

Alias /html/ /frontview/ui/resource/html/
<Directory /html>
    Options MultiViews
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>

Alias /admin /frontview/ui/resource/html
<Location /admin>
    DirectoryIndex index.html
    Options ExecCGI
    Include /etc/frontview/apache/Auth.conf
    AuthName "Control Panel"
    require user admin
</Location>

Alias list_handler /frontview/lib
PerlSwitches -I /frontview/lib
PerlModule Frontview
PerlModule get_handler
PerlModule list_handler
<Location /get_handler>
	SetHandler perl-script
	PerlHandler get_handler
	PerlSendHeader On
	Options ExecCGI
	Order allow,deny
	Allow from all
        Include /etc/frontview/apache/Auth.conf
        AuthName "Control Panel"
        require user admin
</Location>
<Location /list_handler>
	SetHandler perl-script
	PerlHandler list_handler
	PerlSendHeader On
        Include /etc/frontview/apache/Auth.conf
        AuthName "Control Panel"
        require user admin
	Options ExecCGI
	Order allow,deny
	Allow from all
</Location>

Alias /np_handler /frontview/lib/np_handler.pl
<Location /np_handler>
	Options ExecCGI
</Location>

Alias /user_handler /frontview/lib/user_handler.pl
<Location /user_handler>
	Options ExecCGI
	Include /etc/frontview/apache/Auth.conf
	AuthName "My Shares"
	require valid-user
</Location>

Alias /dir_list /frontview/lib/dir_list.pl
<Location /dir_list>
	Include /etc/frontview/apache/Auth.conf
	AuthName "Control Panel"
	require user admin
	Options ExecCGI
</Location>


#Alias /admin /frontview/ui/admin
#<Location /admin>
#  DirectoryIndex index_admin.cgi
#  Options ExecCGI
#    AuthType Basic
#    AuthName "Control Panel"
#    require user admin
#</Location>

Include /etc/frontview/apache/Ports.conf
Include /etc/frontview/apache/Virtual.conf
Include /etc/frontview/apache/addons/*.conf
Include /etc/frontview/apache/Shares.conf

Virtual.Conf

#vers=2
<VirtualHost _default_:80>
  SSLEngine off
  RewriteEngine on
  RewriteRule ^/$ /webroot [R,L]
  RewriteRule ^/$ /webroot [R,L]
  RewriteRule ^/$ /webroot [R,L]
  RewriteRule ^/$ /webroot [R,L]
  RewriteRule ^/$ /webroot [R,L]
  RewriteRule ^/$ /webroot [R,L]
  RewriteRule ^/admin$ https://%{SERVER_NAME}/admin
  RewriteRule ^/admin/(.*)$ https://%{SERVER_NAME}/admin/$1 [R,L]
</VirtualHost>

Auth.conf

<IfModule authnz_external_module>
  AuthType Basic
  AuthBasicProvider external
  AuthExternal pwauth
</IfModule>
<IfModule !authnz_external_module>
  LoadModule authnz_external_module /usr/lib/apache2/modules/mod_authnz_external.so
  LoadModule auth_sys_group_module /usr/lib/apache2/modules/mod_auth_sys_group.so
  AddExternalAuth pwauth /usr/bin/pwauth
  SetExternalAuthMethod pwauth environment
</IfModule>

Passwd

root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/var/local/:/bin/false
bin:x:2:2:bin:/var/local/:/bin/false
sys:x:3:3:sys:/var/local/:/bin/false
sync:x:4:65534:sync:/var/local/:/bin/sync
man:x:6:12:man:/var/local/:/bin/false
lp:x:7:7:lp:/var/local/:/bin/false
mail:x:8:8:mail:/var/local/:/bin/false
proxy:x:13:13:proxy:/var/local/:/bin/false
avahi:x:20:20::/var/local/:/bin/false
messagebus:x:21:21::/var/local/:/bin/false
www-data:x:33:33:www-data:/var/local/:/bin/false
sshd:x:40:65534::/var/local/:/usr/sbin/nologin
statd:x:41:65534::/var/local/:/bin/false
ftp:x:97:97::/home/ftp:/bin/false
mysql:x:44:54:MySQL Server,,,:/var/local/:/bin/false
admin:x:98:98::/c/home/admin:/bin/sh
nobody:x:65534:65534:nobody:/var/local/:/bin/false
backup:x:1000:65534::/c/backup:/bin/false
media:x:1001:65534::/c/media:/bin/false
ReadyNAS:x:96:65534::/var/lib/timemachine:/bin/false
DISK1:x:1002:65534::/c/home/DISK1:/bin/false
PROGRAM:x:1004:65534::/c/home/PROGRAM:/bin/false
addons-config:x:1005:65534::/c/home/addons-config:/bin/false
webroot:x:1006:65534::/c/home/webroot:/bin/false
USB_FLASH_1:x:1008:65534::/c/home/USB_FLASH_1:/bin/false
USB_SD:x:1010:65534::/c/home/USB_SD:/bin/false
USB_FLASH_2:x:1011:65534::/c/home/USB_FLASH_2:/bin/false
tt:x:1012:100::/c/home/tt:/bin/false
databases:x:1013:65534::/tmp:/bin/false