MV2120 and 5150 ssh user update

So I had to reboot my MV and found it was a bit of a pain to re-establish the ssh users. So the quick way to fix the problem after a reboot is as follows.

When you go to edit the /etc/passwd you will see something like this
joeuser:x:502:502:Linux User,,,:/:/bin/nologin

You will need to edit it so it looks more like this.
joeuser:x:502:502:Linux User,,,/:/share/1000/joeuser:/bin/sh

Not like in the original post over here. (Original joeuser:x:502:502:Linux User,,,:/share/1000/joeuser:/bin/sh) notice the extra / in User,,,/:/share

I have updated the original post as of 4/27/09 to fix the problem.

Once you have done that you will need to set the password for the user using the following command.

passwd username (username being the users password you want to set.)

Sorry for the mess up.

Use The MV2120/5150 as a proxy......well more like a Secure Gateway

Have you ever had problem of not being able to access one of your favorite websites when your on public Wifi?
Have you ever needed to access something personal on public Wifi but didnt trust passing your personal information through it?

If you said yes....well I'v got some good news for you.

If you have remote access to your MediaVault you can tunnel all your web browsing through ssh.

A few Needed Things
ssh (Should be on most Linux Distros) For windows go here
If you use the windows version of ssh you only need to install the client. If ssh should fail check your firewall.

A proxy addon for Firefox called FoxyProxy

Install
If you install ssh on a windows machine, you will only need the client.
Install FoxyProxy with Firefox

If you already ssh into you vault remotely this will be cake! I will explain how to do this with Firefox.

So lets begin!

Configure Firefox
Once FoxyProxy is installed, do the following:

Open FoxyProxy in Firefox. Tools-FoxyProxy-Options

Click on the "Proxies" tab.
Highlight the Default proxy that is listed and click the "EditSelection" button

Click on the "Manual Proxy Configuration"
In the "Host Name" field enter "localhost" with out the ""
Set the port to "8080"
Place a check box in the "SOCKS proxy?"

Click "ok"
Click on the "Global Settings" Tab
Under "Miscellaneous" click on "Use SOCKS proxy for DNS lookups"

Click "Close"

Run SSH
I will be using the default ports for the proxy and ssh in this example
(To start ssh on a windows machine open a cmd and type the command below)
(If you have problems, you may need to be in the path of ssh and then execute the command below)
"cd C:\Program Files\OpenSSH\bin"

ssh -D 8080 -p 22 root@IP or URL

Note: ip is the external IP address of your router. URL would be for services like dyndns.

What the above command does is:
ssh runs ssh
-D is to set the local port (So we are setting the local port to 8080 in this example.)
-p 22 is telling ssh what port to use on the remote machine. (22 is the default port for ssh.)

If you have port forwarding on your router, you could set it to 2200 and have the router forward all traffic on that port to the vault on 22. That would make it a little more secure....kinda. With this set up your command would look like this ssh -D 8080 -p 2200 root@ip or url

Once your logged in the ssh session minimise the ssh window.

Lets test it out!
To enable your new HP MV proxy right click on "FoxyProxy" in the tray of firefox and select "Use proxy "Default" for all URLs"
To dissable the proxy right click on "FoxyProxy" in the tray of firefox and select "Completlely disable FoxyProxy"

HP Media Vault MV2120, MV5150 IPKG

NOTE: In order to access your vault from a remote location, remote access must be set up.

So the HP Media Vaults are cool little things. They are for the most part a NAS with a few extras, however.....they are also fairly hackable.

Ive been using the HP media vault for a few months now and haven't hand any real problems (other then the ones I create). I use it for storage and streaming media on my local network. I Also have been using it as a remote storage place for myself and friends as a place to work on projects.

When on my local LAN I don't worry about running it through any type of encryption, however when I'm out and about I like to have some sort of security.

I have https enabled on the MV so when I access the MV from a remote place my web session is going through encryption. The only downer with the web interface is you are only able to download, and upload one file at a time. This is where IPKG comes along.

Taken from Wikipedia:
ipkg, or the Itsy Package Management System, is a lightweight package management system designed for embedded devices that tries to resemble Debian's dpkg.

So to install IPKG, ssh into the MV and do the following.
NOTE: When following the procedure above use hpmv2-bootstrap_1.2-5_arm.xsh and not trap_1.1-1_arm.xsh as it says to.


NOTE:To ssh into the MV you need to know the MV IP address and ssh client installed on a computer. If you are using Linux you should be all set. If you are using windows machine you can download and install SSH for Windows.
If you want to be really adventurous you can install andlinux and run a full ubuntu system native in windows. (Very COOL!!!)

So to ssh into the MV you would do the flowing:

ssh root@theIPaddress
enter the system password when asked. (Thats the password you used to set the MV up.)

Once IPKG is installed do the following:

"ipkg update"
"Ipkg install openssh"

The openssh package includes something called SCP (Secure Copy Protocol). This will be need to upload and download multiple files at a time. (notice I said files, not directories.)

Next you will need to install WinSCP on your computer. You have a choice of an installer or a portable package. (You can run the portable package from a USB thumb drive)

Once you have WinSCP set up all you need to do is start WinSCP and complete the following fields.

Click Session on the Left.
Under Host Name enter the URL you would enter if you were using a web browser with out the http, or https://, or you can use the IP address

Example:
Host Name: MyHPMediavault.com

Port: 22

User Name: root

File Protocol:SCP

Now click on "Tunnel" under "Connection" on the left.
Enter all the same information for each field you just entered above.
Ensure "Connect Through SSH Tunnel" is checked.

That's it!
When asked for a password, Enter the password that was used to setup the MediaVault
Now when you go to connect you will get an error "error looking up user group" Just click ok.
There are no groups on the vault and that is why this error appears.

A Word Of Caution: You are running root! You can brick you system and possibly loose your files if you do the wrong thing.
If this happens you can recover you system but not your files with this tool here.

All of your files will be located in /share/1000
You can now upload and download multiple files.

For lots of good info, hacks, and how to's see here.