Posts by scrollup

    I noticed
    that OMV store the passwords in /etc/shadow and uses md5 hash

    • $1$ is MD5
    • $2a$ is Blowfish
    • $2y$ is Blowfish
    • $5$ is SHA-256
    • $6$ is SHA-512

    is there a way to modify OMV to use a stronger hash for password?
    The other way it works - changing the password in the shell using SHA-512 works fine in the gui
    I am a bit concerned about the security after reading this article:
    https://security.stackexchange…password-hashing-function

    I wanted to keep omv and nextcloud completely separated, but on the same server and not virtualized


    So here i want to share my installation of omv3.x + php5 together with apache2 + php7 and nextcloud12.
    omv use ngnix and nextcloud use apache2


    it is a minimalistic installation
    1) first you need a working omv 3.x
    2) use omv-firstaid to change port from 80 to 8080 (or else) and 443 to 8443 (or else)
    3) omv works with php5, nextcloud with php7
    if using debian 8 you need to add a repositiory -> below howto prepare the installation of php7 on debian 8
    then istall:
    apt install apache2 libapache2-mod-php7.0 php7.0-cli php7.0-mcrypt php7.0-intl php7.0-mysql php7.0-curl php7.0-gd php7.0-soap php7.0-xml php7.0-zip php7.0-mbstring
    4) check if apache2 is on http://example.com and omv is on http://example.com:8080
    5) modify /etc/apache/site_enabled/000-default.conf
    <VirtualHost *:80>
    DocumentRoot /var/www/html
    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined
    <Proxy *>

    Order allow,deny
    Allow from all
    </Proxy>
    ProxyPass /omv http://localhost:8080
    ProxyPassReverse /omv http://localhost:8080
    ProxyPass /extjs6 http://localhost:8080/extjs6

    ProxyPassReverse /extjs6 http://localhost:8080/extjs6
    </VirtualHost>


    a2enmod proxy && a2enmod proxy_http
    6) restart apache2 now you shoud see "apache itworks" under "http://example.com/" and under "http://example.com/omv/" the webgui of omv
    The omv logo is missing due to access of /images/, i use /images/ myself. i suppose, that there are other folders used by omv, but hopefully omv use relative path.


    ok now we should have a working apache and a proxied ngnix.
    >>> This is the point where you shoud take a cup of coffe or tea <<<


    7) we need mysql working in omv.
    enable mysql in omv extras
    reset the root password
    create a nextcloud user and a nextcloud database.
    (i had some problems with granting permissions)


    8) download now nextcloud from nextcloud https://download.nextcloud.com…ases/nextcloud-12.0.3.zip
    to /var/www/
    unzip it
    if you want nextcloud to be on "/"
    rename html to html_whatever and rename nextcloud to html
    or if you want it in a subfolder: move nextcloud into /var/www/html
    (don't copy the content of nextcloud - there are some hidden files you will miss , alway copy the complete folder)
    chown www-data.www-data /var/www/html -R
    start nextcloud installation on http://example.com/ (or subfolder)


    ok now nextcloud and omv work side to side
    >>> This is the point where you can eat some cake and take a cup of coffe or tea <<<


    10) in nextcloud you should activate "unix user backend".
    now you share the same users in nextcloud and omv. i use omv always as master.


    remove write permission after installation, except the data folder -> /var/www/html/config.php !!!
    if you want to secure it with ssl, you can use the same certificate for omv and nextcloud, just point to the same pem.


    i spend some time troubleshooting the missing mb_String in my odroid hc1 omv
    and don't forget to backup, backup, backup...


    howto prepare the installation of php7 on debian 8.
    echo 'deb http://packages.dotdeb.org jessie all' > /etc/apt/sources.list.d/dotdeb.list
    curl http://www.dotdeb.org/dotdeb.gpg | apt-key add -
    apt update


    or on my odroid HC1 arm
    add in /etc/apt/sources.list:
    deb https://repozytorium.mati75.eu/raspbian jessie-backports main contrib non-free
    then
    gpg --keyserver pgpkeys.mit.edu --recv-key CCD91D6111A06851
    gpg --armor --export CCD91D6111A06851 | sudo apt-key add -


    apt update


    i hope it helps.
    any comments are welcome.

    i tried to understand the difference between OMV 2.x and 3.x.
    The problem is, that i was no able to find some sort of working example skeleton for OMV 3.0 explaining the datamodel.
    The only thing i noticed, was that my browser was continously polling §(why not websocket?) with rpc.php requests all the time, making it difficult to catch the JSON Objects with interesting data.


    If there is a tutorial to create a sample plugin from scratch for OMV 3.0
    including deb packaging, dataModel with buttons, checkbox and executing shellscripts (php/bash) and so on

    I will be able to help.
    But just digging in not working and not documented code is painful and discouraging.

    omv version 3.0.21, fresh installation
    one installation from iso,
    one on a fresh Debian8 with added deb http://packages.openmediavault.org/public erasmus main


    trying to install:

    • luksencryption 2.1.2
    • letsencrypt 2.3
    • links 3.0


    end always with
    ==> /var/log/daemon.log <==
    Jun 7 08:27:08 corinth monit[909]: 'omv-engined' process is not running
    Jun 7 08:27:08 corinth monit[909]: 'omv-engined' trying to restart
    Jun 7 08:27:08 corinth monit[909]: 'omv-engined' start: /bin/systemctl
    Jun 7 08:27:08 corinth systemd[1]: openmediavault-engined.service: Supervising process 4193 which is not our child. We'll most likely not notice when it exits.
    Jun 7 08:27:08 corinth systemd[1]: openmediavault-engined.service: main process exited, code=exited, status=255/n/a
    Jun 7 08:27:08 corinth systemd[1]: Unit openmediavault-engined.service entered failed state.

    after removing with - apt-get remove x - everything works again


    Most other plugins can be installed without problem, other want 3.0.13 and decline the installation.

    I know its Beta, but i'm Beta too.
    But i want to help - and maybe i can contribute a bit, as have expirience in linux and php

    is there a way to get further information during the install process?
    just some hint how to enable debug or what log file to inspect.


    or should i be patient until release date ?


    Thanks