Ok here goes,
The challenge was to install openswan ipsec support on top of the openwrt custom firmware using a Linksys WRT54GL router. The usual way to do this would be using the package manager that comes with OpenWRT (opkg) but since this router has only a 4MB flash, if using the default firmare from openwrt, there’s not enough space to install openswan. The way to do it is to build a custom firmware using OpenWrt’s Image Builder.

The instructions on how to use the builder can be found here:
http://wiki.openwrt.org/doc/howto/obtain.firmware.generate

The issue i had is that it’s quiet confusing to understand which packages to use for a custom firmare. The article in the link above shows us how to get a list of the default packages coming with the official firmare:

After a few times trying i ended up with the following make command to generate a firmware that would fit in the 4mb flash card on the router. I had to drop some of the default packages (the ones with a – in front of their name in the below command) in order to keep the firmare + web gui + openswan configuration:

make image PACKAGES=”base-files busybox dnsmasq dropbear firewall hotplug2 libc libgcc nvram uci udevtrigger wireless-tools luci kmod-crypto-core kmod-crypto-aes kmod-crypto-arc4 kmod-ipt-core kmod-ipt-conntrack kmod-ipt-nat kmod-ipt-nathelper -kmod-ppp -kmod-pppoe kmod-crc-ccitt kmod-diag kmod-switch kmod-b43 kmod-b43legacy kmod-cfg80211 kmod-mac80211 libiptc liblua libnl-tiny libuci libuci-lua libxtables crda iptables iptables-mod-conntrack iptables-mod-nat iw -ppp -ppp-mod-pppoe uhttpd wpad-mini -lua openswan -nano mtd -opkg”

Note the openswan package at the end. When issuing this command the system will build the custom firmware which is under 4mb so it will fit your router’s flash. You can then upload the firmare onto the router using tftp as described here: http://wiki.openwrt.org/toh/linksys/wrt54g

Good luck

Copy & paste this in to a file test.php on your server and run it on your favourite browser.

If the current script owner is the same as the user that php runs as, than suPHP works.

<?php

echo ‘Current script owner: ‘ . get_current_user(). ‘<br>’;
echo ‘UID:’ . getmyuid() . ‘<br>’;
echo ‘GID:’ . getmygid() . ‘<br>’;
echo ‘PID:’ . getmypid() . ‘<br>’;
echo ‘<br>’;
echo “PHP runs under the user: [" . system('whoami') . "]<br>”;

?>

If you can’t find this utility install it using apt-get on debian: apt-get install hdparm

then at the console type: hdparm -I /dev/sda an it should list something like this:

/dev/sda:

ATA device, with non-removable media
Model Number:       ST31000340NS
Serial Number:      9QJ365N0
Firmware Revision:  SN05
Transport:          Serial
Standards:
Used: unknown (minor revision code 0×0029)
Supported: 8 7 6 5
Likely used: 8
Configuration:
Logical         max     current
cylinders       16383   16383
heads           16      16
sectors/track   63      63
–
CHS current addressable sectors:   16514064
LBA    user addressable sectors:  268435455
LBA48  user addressable sectors: 1953525168
device size with M = 1024*1024:      953869 MBytes
device size with M = 1000*1000:     1000204 MBytes (1000 GB)
Capabilities:
LBA, IORDY(can be disabled)
Queue depth: 32
Standby timer values: spec’d by Standard, no device specific minimum
R/W multiple sector transfer: Max = 16  Current = 16
Recommended acoustic management value: 254, current value: 0
DMA: mdma0 mdma1 mdma2 udma0 udma1 udma2 udma3 udma4 udma5 *udma6
Cycle time: min=120ns recommended=120ns
PIO: pio0 pio1 pio2 pio3 pio4
Cycle time: no flow control=120ns  IORDY flow control=120ns
Commands/features:
Enabled Supported:
*    SMART feature set
Security Mode feature set
*    Power Management feature set
*    Write cache
*    Look-ahead
*    Host Protected Area feature set
*    WRITE_BUFFER command
*    READ_BUFFER command
*    DOWNLOAD_MICROCODE
SET_MAX security extension
*    48-bit Address feature set
*    Device Configuration Overlay feature set
*    Mandatory FLUSH_CACHE
*    FLUSH_CACHE_EXT
*    SMART error logging
*    SMART self-test
*    General Purpose Logging feature set
*    64-bit World wide name
*    Write-Read-Verify feature set
*    WRITE_UNCORRECTABLE_EXT command
*    {READ,WRITE}_DMA_EXT_GPL commands
*    Segmented DOWNLOAD_MICROCODE
*    SATA-I signaling speed (1.5Gb/s)
*    Native Command Queueing (NCQ)
*    Phy event counters
*    Software settings preservation
*    SMART Command Transport (SCT) feature set
*    SCT LBA Segment Access (AC2)
*    SCT Error Recovery Control (AC3)
*    SCT Features Control (AC4)
*    SCT Data Tables (AC5)
Security:
Master password revision code = 65534
supported
not     enabled
not     locked
not     frozen
not     expired: security count
supported: enhanced erase
196min for SECURITY ERASE UNIT. 196min for ENHANCED SECURITY ERASE UNIT.
Logical Unit WWN Device Identifier: 5000c50010f8c3d0
NAA             : 5
IEEE OUI        : c50
Unique ID       : 010f8c3d0
Checksum: correct

I made the change, restardet apache and all went as it should.

i could ping the domain clients using their netbios name ( my pdc was also running as a wins server )

i could acces the clients by using their netbios name ( eg. \\netbiosname )

I just couldn’t browse the domain ( the list with computers on my domain ).

The problem was caused by samba working only on port 445. I’ve enabled samba to work on port 139 also and the error was gone.

REMEMBER! THIS WORKS WITH A LINUX SAMBA DOMAIN running with a TDBSAM Backend, If you have a WINDOWS DOMAIN or a LINUX DOMAIN with LDAP BACKEND this WON’T WORK !!!! Also this howto was only tested with WINDOWS XP. I don’t know if it’ll work in vista but i think it should.

First of all you have to login to the computer with a local administrative account ( eg. Administrator ).

Go to -> Start -> run > and type regedit.

Go to this key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName]

Under Computer Name you’ll have 2 subfolders: ActiveComputerName and ComputerName, and in the 2 subfolders you’ll see the key ComputerName with the value being your current computer name. Change both of these values to the new name you want for your machine.

Reboot. ( this is the only time you need to reboot ).

Go to your linux domain controler and search for the smbpasswd file. This file stores both the computer and user accounts. Find your old computer’s name in this file. It should look something like this :

GKOO$:1396:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:578E3D23GF5C1AA7588D3295281282EB:[W          ]:LCT-00000000:

Change it’s name to the new name you assigned previously to your windows machine. Be sure to keep the $ mark at the and of the name ( the $ sign means this account is a machine account not a user account ) and also all the other numbers following your computer name.

Next create a machine account on your linux box with the new computer name:

useradd -s /bin/false -d /dev/null gkoonew$ ( remember to always attach the $ sign to your machine account name ).

That’s it you should now be able to login to your domain with the new computer name. If you can’t watch the samba logs, they’ll tell you a lot. Also you can remove the old machine account from your linux users database to keep things more organised.

Good luck, GKoo.

In this case, on the server, in sshd_config add the following line to solve your issue:

UseDNS no

When you try to umount the regular way, if a device is busy you’ll get the following :

dev:/# umount /dev/sda1
umount2: Device or resource busy
umount: /boot: device is busy

This can be solver very easy by entering this :

dev:/# umount -l /dev/sda1

ip link show - shows the available interfaces on your machine

ip address show – shows the IP addresses attached to your interfaces.

ip route show – shows the available routes on your machine.

ip neigh show – shows the current information in your ARP cache.

ip rule – shows the routing tables active on yout machine.

ip route list table table_name – lists the rules available in a specific table

ip rule add from 10.0.0.1 table table_name – adds a new rule in the table_name table.

ip route add default via 200.100.50.25 dev eth0 table table_name – adds a default route on a specific table.

If the thing is not already installed on your machine, if you run debian simply use apt-get install mii-tool . After the tool in installed just type mii-tool in your console.

Example:

server1:~# mii-tool
eth0: negotiated 100baseTx-FD flow-control, link ok
eth1: negotiated 100baseTx-FD, link ok
eth2: negotiated 100baseTx-FD, link ok
eth3: negotiated 100baseTx-FD, link ok