APP: UPD new release of sshd v2_2

[bragon]

Dear all,

please find a new release of the sshd daemon. Now there is an popup window to indicate the launch and shutdown of the application. Apart from this eye candy feature, the new release performs a mount -bind of a /ezxlocal/rwetc directory in place of /etc in order to allow modification of its content.

RELEASE NOTES FOR SSHD 2.0

1. INTRODUCTION
---------------

This is the sshd package embedding an ssh server for ezx phones based on a patched version of dropbear.
The motivation for this package is to provide a more secure login process on the phone than telnet with an empty root password. By the way, note that telnet is now disabled on the latest production firmwares for the new generation ezx phones.
Compared to the vanilla dropbear version the provided dropbear binary has been patched to:
1) allow only public key authentication
2) disable empty password check to allow root login even with an empty password in /etc/passwd
If you wish to analyze the resulting source code, please have a look at mkezx: http://www.mkezx.org these patches have been contributed to this great generic build framework

2. PRINCIPLE
------------

This package replicates the content of the read only directory /etc in /ezxlocal/rwetc and modifies the home directory of ezx and root users to be set to a writeable location: /ezxlocal/home/ezx and /ezxlocal/home/root respectively.
Directory /ezxlocal/rwetc is mounted in place of /etc through the use of "mount -t bind" command.
That way /etc becomes writeable (you can even change root and ezx password).
The host keys are installed in /etc/dropbear and uses keys are also generated.

3.1. PACKAGE INSTALLATION ON A1200/ROKRE6
-----------------------------------------

In order to install this package you need to perform the following steps on the handset
using a telnet session:
1) first install yan0.rar archive available here on http://www.motorolafans.com forums that enables the installation of unsigned .pkg packages.
Don't forget the make the right association by touching the package icon you wish to install until a menu appears and select "open with" mpkg striking the "always use the program..." box.
2) install the provided package through the use of mpkg program
3) switch your phone off an on in order to see the sshd icon in the application manager

3.2. PACKAGE INSTALLATION ON OTHER HANDSETS
-------------------------------------------

In order to install this package you need to install the provided package through the use of the native installer. Installation is performed by by touching the package icon you wish to install until a menu appear and select "Install"

4. PREPARATION BEFORE USAGE
---------------------------

The creation of the root and ezx home directories and replication and modification of the /etc directory are performed automatically at the fist launch of the scrcipt.
Since the authentication for ssh is based on public key thus in order to allow login you need to:
- distribute the ssh key of the host user you want to allow to connect to the phone on the handset by simply appending the public portion of the key to the handset user authorized keys file: e.g. /ezxlocal/home/ezx/.ssh/authorized_keys. This can simply be done using the samba server smb package through a mount of the relevant directories.

5. USAGE
--------

The application icon is used as an on and off switch launching the ssh daemon (dropbear) in background.
If this package does not work please refer to dropbear succinct documentation and also check the permission of the ssh users configuration files on the handset (they should be read only for the user!).

Author: bragon

Enjoy

UPDATE: new version v2.2 that covers:
- make the script generic (reuse smbd sshd)
- removal of stalled pid files in /var/run
- safetynet to create pid file in case the daemon does not handle it right

[Alpha43]

Thanks for the release. Should be exciting with what we can do with this.

~Alpha~

[bragon]

please note new pkg release at start of the topic

[eakrin]

how can i use a public key in SSH Secureshell 3.2.9 (windows xp). I does not have a /ezxlocal/home/ezx/.ssh/authorized_keys. I have only id_rsa.db file.

and when I insert it into Server authentication It said unable to generate fingerprint.

which ssh client on PC that you use and how to config it. does the host name is 192.168.16.2.

I used only sshclient with password. didn't use ssh with public key before.