FORBIDDEN - You don't have permission to access on this serv

[Jocko]

Ok thank you, I was writing the how to do.

Code: Select all

Configuring System Users...
        Root password: use default password
        Set users, linux and samba accounts      [ OK ]

So the linux accounts seem to be ok :scratch
Then please to post

Code: Select all

ls -l /etc/passwd
ls -l /rw_fs/etc/passwd
cat  /etc/passwd
cat /rw_fs/etc/passwd

[Draftmancorp]

yes:

Code: Select all

login as: root
root@192.168.1.24's password:
root@Norman_Nas2:/ # ls -l /etc/passwd
-rw-r--r--  1 root root 617 2018-01-01 12:00 /etc/passwd
root@Norman_Nas2:/ # ls -l /rw_fs/etc/passwd
ls: /rw_fs/etc/passwd: No such file or directory
root@Norman_Nas2:/ # cat  /etc/passwd
root:$1$xnFvmXZq$Kh6UIpSZiD.BbwS07fWHh1:0:0::/:/bin/sh
nobody:x:99:99:Nobody:/:/bin/nologin
sys:x:999:999:System User:/:/bin/nologin
rd:x:998:998:Daemons User:/:/bin/sh
postgres:x:500:500:DB User:/:/bin/nologin
_ntp:x:501:501:NTP User:/:/bin/nologin
smmsp:x:502:502:Sendmail User:/:/bin/nologin
avahi:x:504:504:Avahi User:/:/bin/nologin
messagebus:x:505:505:Message bus User:/:/bin/nologin
plex:x:507:507:PLEX Media Server:/mnt/HD_a2/programs/plex/lib:/bin/nologin
dummy:1K3KTz3zmr7Nk:502:502:Linux User,,,:/share/1000/Disco_1/:/bin/nologin
kodi:DZC6myR7tfuqs:1000:1000:Linux User,,,:/share/1100/Disco_1:/bin/nologin
root@Norman_Nas2:/ # cat /rw_fs/etc/passwd
cat: /rw_fs/etc/passwd: No such file or directory
root@Norman_Nas2:/ #


[Jocko]

So your linux accounts db seems to be ok.

We go to deepen first on dropbear side because root account is ok. (https://plugout.net/download/file.php?id=6906)
Dropbear rejects the login attempts if there are some bad write permissions

Still from fvdw-sl console, post these new outputs :

Code: Select all

cat /sda1/etc/group
mkdir /sda5
mount /dev/sda5 /sda5
ls -ld /sda1 /sda1/etc /sda1/var /sda5/tmp /sda5/tmp/var/*/ 

(please to use exactly this commandline)

We go to enable the debug mode on the nas. So run this commandline

Code: Select all

sed -rie 's/"debug\".*$/\"debug\"\t\t\t\t\t=> true/g' /sda1/etc/inc/globals.inc

Restart the nas and try to login via dropbear. Stop the nas and get again a telnet window via fvdw-sl console.
Then

Code: Select all

mkdir /sda5
mount /dev/sda5 /sda5
cat /sda5/tmp/var/messages

post the output (be careful it will be verbose)

[Draftmancorp]

sorry, how can i login "via dropbear" what is it dropbear...?

[Draftmancorp]

Code: Select all

login as: root
root@192.168.1.24's password:
root@Norman_Nas2:/ # cat /sda1/etc/group
cat: /sda1/etc/group: No such file or directory
root@Norman_Nas2:/ # mkdir /sda5
mkdir: cannot create directory `/sda5': File exists
root@Norman_Nas2:/ # mount /dev/sda5 /sda5
root@Norman_Nas2:/ # ls -ld /sda1 /sda1/etc /sda1/var /sda5/tmp /sda5/tmp/var/*/
ls: /sda1/etc: No such file or directory
ls: /sda1/var: No such file or directory
drwxr-xr-x  2 root   root   1024 2022-01-18 11:18 /sda1
drwxrwxrwx  6 root   root   4096 2018-01-01 12:01 /sda5/tmp
drwxrwxrwx  2 root   root     40 2018-01-01 12:00 /sda5/tmp/var/cache/
drwxr-xr-x  2 nobody nobody 4096 2018-01-01 12:00 /sda5/tmp/var/db/
drwxr-xr-x  3 root   root   4096 2018-01-01 12:00 /sda5/tmp/var/lib/
drwxrwxrwx  3 root   root   4096 2018-01-01 12:00 /sda5/tmp/var/lock/
drwxr-xr-x  6 root   root   4096 2018-01-01 12:00 /sda5/tmp/var/log/
drwxrwxrwx  3 nobody nobody 4096 2018-01-01 12:01 /sda5/tmp/var/run/
drwxrwxrwx  6 root   root   4096 2018-01-01 12:00 /sda5/tmp/var/spool/
root@Norman_Nas2:/ #


after debug code command line and reboot: (don't know what is login via dropbear...)

Code: Select all

login as: root
root@192.168.1.24's password:
root@Norman_Nas2:/ # mkdir /sda5
mkdir: cannot create directory `/sda5': File exists
root@Norman_Nas2:/ # mount /dev/sda5 /sda5
mount: /sda5: /dev/sda5 already mounted on /rw_fs.
root@Norman_Nas2:/ # cat /sda5/tmp/var/messages
cat: /sda5/tmp/var/messages: No such file or directory
root@Norman_Nas2:/ #


[Jocko]

I am a bit lost...
According with your previous post, you failed to get a SSH access on dropbear server with putty client

:shocked oh man, yes yes this is a configuration problem @jocko, see here, it do not reckognize the root/giveit2me credentials, nor admin-nas/admin (all credentials that i have leave untouched).

Immagine 2022-01-17 112912.png

And this is what FileZilla say: Errore: Autenticazione non riuscita.

But now your last post shows you get one and the posted outputs is from a such access and not from fvdw-sl console with a telnet access.

Please can you confirm that ?

[Draftmancorp]

yes, when happen that "forbidden" a manual reboot (switch off and on) sems to temporary fix it. And then i can access via console or putty. (consider that douring the night i turn off the nas, i do not leave them powered on every every every days)
it makes difference using fvdw console or putty? :scratch

[Draftmancorp]

:snicker
as you will notice, I'm not well versed on the subject, maybe I misunderstood the use between putty and console (very sorry about that, my fault, I will be more careful and precise. promised.)... if neede i perform the command via fvdw console...

EDIT: if i try to open a telnet window now with the fvdw console, it say: Connection to 192.168.1.24/telnet refused
EDIT: attach 2 pics below

$matches[2]

Immagine 2022-01-18 165425.jpg

[Jocko]

it makes difference using fvdw console or putty? :scratch

Yes when you use fvfw-sl console (telnet access) the firmware is not loaded and you can examine some system files state on fw partitions on the previous last regular boot.
With putty (ssh dropbear access), you can examine the current system files state of the firmware

So I assume now you will use putty to get a ssh access. So post

Code: Select all

dmesg
ps auxf
ls -ld / /etc /var /tmp/ /tmp/var/*/
ls -l /etc/passwd /etc/group
debugon


restart the nas, get again a ssh access (puttty) and post

Code: Select all

cat /var/log/messages

[Draftmancorp]

Thank you for patience :hail

Code: Select all

login as: root
root@192.168.1.24's password:
root@Norman_Nas2:/ # dmesg
[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 4.14.133 (root@fvdwsl-5big2.local) (gcc version 4.9.3 (GCC)) #1 PREEMPT Wed Jul 17 14:46:56 CEST 2019
[    0.000000] CPU: Feroceon 88FR131 [56251311] revision 1 (ARMv5TE), cr=0005317f
[    0.000000] CPU: VIVT data cache, VIVT instruction cache
[    0.000000] Machine: LaCie 5Big Network v2
[    0.000000] Ignoring unrecognised tag 0x41000403
[    0.000000] Memory policy: Data cache writeback
[    0.000000] On node 0 totalpages: 131072
[    0.000000] free_area_init_node: node 0, pgdat c09299a0, node_mem_map dfbfa000
[    0.000000]   Normal zone: 1024 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 131072 pages, LIFO batch:31
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 130048
[    0.000000] Kernel command line: console=ttyS0,115200 root=/dev/sda7 ro reset=0 productType=BIG5_KW
[    0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Memory: 509948K/524288K available (6915K kernel code, 307K rwdata, 1724K rodata, 192K init, 388K bss, 14340K reserved, 0K cma-reserved)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0xe0800000 - 0xff800000   ( 496 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xe0000000   ( 512 MB)
[    0.000000]     modules : 0xbf000000 - 0xc0000000   (  16 MB)
[    0.000000]       .text : 0xc0008000 - 0xc06c8f94   (6916 kB)
[    0.000000]       .init : 0xc08ae000 - 0xc08de000   ( 192 kB)
[    0.000000]       .data : 0xc08de000 - 0xc092ade0   ( 308 kB)
[    0.000000]        .bss : 0xc0932760 - 0xc099393c   ( 389 kB)
[    0.000000] Preemptible hierarchical RCU implementation.
[    0.000000]  Tasks RCU enabled.
[    0.000000] NR_IRQS: 114
[    0.000000] Switching to timer-based delay loop, resolution 6ns
[    0.000008] sched_clock: 32 bits at 166MHz, resolution 6ns, wraps every 12884901885ns
[    6.129157] clocksource: orion_clocksource: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 11467562657 ns
[    6.129441] Console: colour dummy device 80x30
[    6.129477] Calibrating delay loop (skipped), value calculated using timer frequency.. 333.33 BogoMIPS (lpj=1666666)
[    6.129499] pid_max: default: 32768 minimum: 301
[    6.129649] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    6.129673] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    6.130194] CPU: Testing write buffer coherency: ok
[    6.130989] Setting up static identity map for 0x81e0 - 0x8238
[    6.131157] Hierarchical SRCU implementation.
[    6.133028] random: get_random_u32 called from bucket_table_alloc+0x14c/0x198 with crng_init=0
[    6.133426] VFP support v0.3: not present
[    6.133684] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    6.133710] futex hash table entries: 256 (order: -1, 3072 bytes)
[    6.133811] xor: measuring software checksum speed
[    6.229544]    arm4regs  :  1088.000 MB/sec
[    6.329236]    8regs     :   653.200 MB/sec
[    6.429237]    32regs    :   904.400 MB/sec
[    6.429254] xor: using function: arm4regs (1088.000 MB/sec)
[    6.429271] pinctrl core: initialized pinctrl subsystem
[    6.429851] NET: Registered protocol family 16
[    6.430331] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    6.432817] Kirkwood: MV88F6281-A0, TCLK=166666667.
[    6.432848] Feroceon L2: Enabling L2
[    6.432887] Feroceon L2: Cache support initialised.
[    6.433633] kirkwood_init: create proc tsinfo proc
[    6.433656] tsinfo: create proc tsinfo vendor successfully
[    6.433665] mv_usb_init 1
[    6.433676] mv_usb_init 2 devnum = 0
[    6.433686] init function mv_usb_init finished
[    6.433695] initial MPP regs:
[    6.433699]  01112222
[    6.433703]  00003311
[    6.433711]  33331100
[    6.433717]  33003333
[    6.433724]  00000033
[    6.433730]  00000000
[    6.433737]  00000000
[    6.433743]
[    6.433759]   final MPP regs:
[    6.433763]  01112222
[    6.433766]  00003311
[    6.433773]  33331100
[    6.433780]  33003333
[    6.433786]  00000033
[    6.433792]  00000000
[    6.433799]  00000000
[    6.433805]
[    6.434090]  orion-ehci registered
[    6.436658] orion_gpio_is_valid: invalid GPIO 7
[    6.437352] Kirkwood PCIe port 0: link down
[    6.437365] Kirkwood PCIe port 1: link up
[    6.437380] PCI: bus0 uses PCIe port 0
[    6.437753] PCI host bridge to bus 0000:00
[    6.437776] pci_bus 0000:00: root bus resource [mem 0xe0000000-0xe7ffffff]
[    6.437790] pci_bus 0000:00: root bus resource [io  0x1000-0xffff]
[    6.437803] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    6.437838] pci 0000:00:00.0: [11ab:6281] type 00 class 0x058000
[    6.437870] pci 0000:00:00.0: reg 0x10: [mem 0xf1000000-0xf10fffff 64bit pref]
[    6.437884] pci 0000:00:00.0: reg 0x18: [mem 0x00000000-0x1fffffff]
[    6.437948] pci 0000:00:00.0: supports D1 D2
[    6.438426] PCI: bus0: Fast back to back transfers disabled
[    6.438447] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 00
[    6.438455] PCI: bus1 uses PCIe port 1
[    6.438763] PCI host bridge to bus 0000:01
[    6.438782] pci_bus 0000:01: root bus resource [mem 0xe8000000-0xefffffff]
[    6.438796] pci_bus 0000:01: root bus resource [io  0x10000-0x1ffff]
[    6.438808] pci_bus 0000:01: No busn resource found for root bus, will use [bus 01-ff]
[    6.438839] PCI: bus1: Fast back to back transfers enabled
[    6.438853] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
[    6.640242] raid6: int32x1  gen()   101 MB/s
[    6.809610] raid6: int32x1  xor()    63 MB/s
[    6.979620] raid6: int32x2  gen()   133 MB/s
[    7.149382] raid6: int32x2  xor()    84 MB/s
[    7.319422] raid6: int32x4  gen()   133 MB/s
[    7.489434] raid6: int32x4  xor()    90 MB/s
[    7.659422] raid6: int32x8  gen()   121 MB/s
[    7.829301] raid6: int32x8  xor()    80 MB/s
[    7.829311] raid6: using algorithm int32x2 gen() 133 MB/s
[    7.829319] raid6: .... xor() 84 MB/s, rmw enabled
[    7.829327] raid6: using intx1 recovery algorithm
[    7.829590] vgaarb: loaded
[    7.830100] SCSI subsystem initialized
[    7.830402] libata version 3.00 loaded.
[    7.830906] usbcore: registered new interface driver usbfs
[    7.831022] usbcore: registered new interface driver hub
[    7.831145] usbcore: registered new device driver usb
[    7.831405] Linux video capture interface: v2.00
[    7.833525] clocksource: Switched to clocksource orion_clocksource
[    7.833647] VFS: Disk quotas dquot_6.6.0
[    7.833705] VFS: Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
[    7.848329] NET: Registered protocol family 2
[    7.849534] TCP established hash table entries: 4096 (order: 2, 16384 bytes)
[    7.849595] TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
[    7.849648] TCP: Hash tables configured (established 4096 bind 4096)
[    7.849725] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    7.849750] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    7.849900] NET: Registered protocol family 1
[    7.850227] RPC: Registered named UNIX socket transport module.
[    7.850240] RPC: Registered udp transport module.
[    7.850248] RPC: Registered tcp transport module.
[    7.850256] RPC: Registered tcp NFSv4.1 backchannel transport module.
[    7.850280] PCI: CLS 32 bytes, default 32
[    7.850508] NetWinder Floating Point Emulator V0.97 (double precision)
[    7.850632] gpio-usb-probe-1
[    7.850691] gpio-usb-probe-4b err=0
[    7.850706] gpio-usb gpio-usb: USB GPIO's initialized
[    7.852320] workingset: timestamp_bits=30 max_order=17 bucket_order=0
[    7.852938] Installing knfsd (copyright (C) 1996 okir@monad.swb.de).
[    7.853314] ntfs: driver 2.1.32 [Flags: R/W].
[    7.853353] jffs2: version 2.2. (NAND) (SUMMARY)  © 2001-2006 Red Hat, Inc.
[    7.853497] fuse init (API version 7.26)
[    7.853787] JFS: nTxBlock = 3983, nTxLock = 31871
[    7.855316] SGI XFS with ACLs, security attributes, realtime, no debug enabled
[    7.860846] async_tx: api initialized (async)
[    7.860922] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[    7.860935] io scheduler noop registered
[    7.860944] io scheduler deadline registered
[    7.860997] io scheduler cfq registered (default)
[    7.861007] io scheduler mq-deadline registered
[    7.861258] mv_xor mv_xor.0: Marvell shared XOR driver
[    7.919889] mv_xor mv_xor.0: Marvell XOR (Registers Mode): ( xor cpy )
[    7.921949] mv_xor mv_xor.1: Marvell shared XOR driver
[    7.979889] mv_xor mv_xor.1: Marvell XOR (Registers Mode): ( xor cpy )
[    7.986586] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    7.988624] console [ttyS0] disabled
[    8.009022] serial8250.0: ttyS0 at MMIO 0xf1012000 (irq = 33, base_baud = 10416666) is a 16550A
[    8.700231] random: fast init done
[    8.740283] console [ttyS0] enabled
[    8.756270] brd: module loaded
[    8.765992] loop: module loaded
[    8.770226] sata_mv sata_mv.0: version 1.28
[    8.770286] sata_mv sata_mv.0: cannot get optional clkdev
[    8.775756] sata_mv sata_mv.0: slots 32 ports 2
[    8.784018] scsi host0: sata_mv
[    8.787706] scsi host1: sata_mv
[    8.791248] ata1: SATA max UDMA/133 irq 21
[    8.795326] ata2: SATA max UDMA/133 irq 21
[    8.800820] m25p80 spi0.0: mx25l4005a (512 Kbytes)
[    8.806666] Creating 2 MTD partitions on "spi_flash":
[    8.811770] 0x000000000000-0x00000007d000 : "u-boot"
[    8.817598] 0x00000007e000-0x00000007f000 : "u-boot-env"
[    8.825485] tun: Universal TUN/TAP device driver, 1.6
[    8.831772] ipddp.c:v0.01 8/28/97 Bradford W. Johnson <johns393@maroon.tc.umn.edu>
[    8.839997] ipddp0: Appletalk-IP Encap. mode by Bradford W. Johnson <johns393@maroon.tc.umn.edu>
[    8.856585] libphy: orion_mdio_bus: probed
[    8.860968] mv643xx_eth: MV-643xx 10/100/1000 ethernet driver version 1.4
[    9.309275] ata1: SATA link up 3.0 Gbps (SStatus 123 SControl F300)
[    9.329387] ata1.15: Port Multiplier 1.2, 0x11ab:0x4140 r193, 4 ports, feat 0x5/0x1f
[    9.352526] ata1.00: hard resetting link
[    9.680659] mv643xx_eth_port mv643xx_eth_port.0 eth0: port 0 with MAC address 00:d0:4b:8d:9a:81
[    9.690181] ata1.01: hard resetting link
[   10.199486] ata1.02: hard resetting link
[   10.490666] mv643xx_eth_port mv643xx_eth_port.1 eth1: port 0 with MAC address 00:d0:4b:8d:39:dd
[   10.499736] PPP generic driver version 2.4.2
[   10.504343] PPP Deflate Compression module registered
[   10.509588] PPP MPPE Compression module registered
[   10.514356] NET: Registered protocol family 24
[   10.518798] pegasus: v0.9.3 (2013/04/25), Pegasus/Pegasus II USB Ethernet driver
[   10.526425] usbcore: registered new interface driver pegasus
[   10.532430] usbcore: registered new interface driver asix
[   10.538001] usbcore: registered new interface driver ax88179_178a
[   10.544319] usbcore: registered new interface driver cdc_ether
[   10.550831] usbcore: registered new interface driver net1080
[   10.556659] usbcore: registered new interface driver plusb
[   10.562295] usbcore: registered new interface driver cdc_subset
[   10.568379] usbcore: registered new interface driver zaurus
[   10.574109] usbcore: registered new interface driver ipheth
[   10.579892] usbcore: registered new interface driver cdc_ncm
[   10.586281] aoe: cannot create debugfs directory
[   10.591309] aoe: AoE v85 initialised.
[   10.719502] ata1.03: hard resetting link
[   11.279249] ata1.01: ATA-10: ST2000DM008-2FR102, 0001, max UDMA/133
[   11.285487] ata1.01: 3907029168 sectors, multi 16: LBA48 NCQ (depth 31/32)
[   11.419258] ata1.01: configured for UDMA/133
[   11.469247] ata1.02: ATA-10: ST2000DM008-2FR102, 0001, max UDMA/133
[   11.475490] ata1.02: 3907029168 sectors, multi 16: LBA48 NCQ (depth 31/32)
[   11.609257] ata1.02: configured for UDMA/133
[   11.629213] rtc-mv rtc-mv: internal RTC not ticking
[   11.634233] ata1.03: ATA-9: ST2000DM006-2DM164, CC26, max UDMA/133
[   11.640630] i2c /dev entries driver
[   11.645054] ata1.03: 3907029168 sectors, multi 0: LBA48 NCQ (depth 31/32)
[   11.652236] at24 0-0050: 512 byte 24c04 EEPROM, writable, 16 bytes/write
[   11.659580] uvcvideo: Unable to create debugfs directory
[   11.665189] usbcore: registered new interface driver uvcvideo
[   11.671221] USB Video Class driver (1.1.1)
[   11.675304] gspca_main: v2.14.0 registered
[   11.679752] usbcore: registered new interface driver Philips webcam
[   11.697054] device-mapper: ioctl: 4.37.0-ioctl (2017-09-20) initialised: dm-devel@redhat.com
[   11.705580] ata1.03: configured for UDMA/133
[   11.710433] ata1: EH complete
[   11.713650] device-mapper: multipath round-robin: version 1.2.0 loaded
[   11.720209] device-mapper: multipath queue-length: version 0.2.0 loaded
[   11.726789] device-mapper: multipath service-time: version 0.3.0 loaded
[   11.733723] scsi 0:1:0:0: Direct-Access     ATA      ST2000DM008-2FR1 0001 PQ: 0 ANSI: 5
[   11.741935] device-mapper: dm-log-userspace: version 1.3.0 loaded
[   11.748002] device-mapper: raid: Loading target version 1.13.0
[   11.754376] fvdw1 disk index before get_sd_name = 0
[   11.759385] device-name= sata_mv
[   11.762603] fvdw2 disk index after get_sd_name = 2
[   11.767370] fvdw3 prefix[0]=s  prefix[1]=d
[   11.774118] Netfilter messages via NETLINK v0.30.
[   11.778826] nfnl_acct: registering with nfnetlink.
[   11.784743] fvdw4 diskname = sdc
[   11.788282] nf_conntrack version 0.5.0 (8192 buckets, 32768 max)
[   11.794960] sd 0:1:0:0: [sdc] 3907029168 512-byte logical blocks: (2.00 TB/1.82 TiB)
[   11.803380] scsi 0:2:0:0: Direct-Access     ATA      ST2000DM008-2FR1 0001 PQ: 0 ANSI: 5
[   11.812338] ipip: IPv4 and MPLS over IPv4 tunneling driver
[   11.818135] sd 0:1:0:0: [sdc] 4096-byte physical blocks
[   11.824023] fvdw1 disk index before get_sd_name = 1
[   11.828880] device-name= sata_mv
[   11.832592] ip_tables: (C) 2000-2006 Netfilter Core Team
[   11.838148] sd 0:1:0:0: [sdc] Write Protect is off
[   11.843042] sd 0:1:0:0: [sdc] Mode Sense: 00 3a 00 00
[   11.843363] sd 0:1:0:0: [sdc] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[   11.852583] NET: Registered protocol family 10
[   11.857417] fvdw2 disk index after get_sd_name = 1
[   11.862970] Segment Routing with IPv6
[   11.866703] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   11.872142] fvdw3 prefix[0]=s  prefix[1]=d
[   11.876218] fvdw4 diskname = sdb
[   11.881358] sd 0:2:0:0: [sdb] 3907029168 512-byte logical blocks: (2.00 TB/1.82 TiB)
[   11.889805] scsi 0:3:0:0: Direct-Access     ATA      ST2000DM006-2DM1 CC26 PQ: 0 ANSI: 5
[   11.898258] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver
[   11.904561] sd 0:2:0:0: [sdb] 4096-byte physical blocks
[   11.910646] NET: Registered protocol family 17
[   11.915127] Bridge firewalling registered
[   11.919946] fvdw1 disk index before get_sd_name = 2
[   11.924860]  sdc: sdc1 sdc2 sdc3 sdc4 < sdc5 sdc6 sdc7 sdc8 >
[   11.930863] sd 0:2:0:0: [sdb] Write Protect is off
[   11.935643] sd 0:2:0:0: [sdb] Mode Sense: 00 3a 00 00
[   11.938025] sd 0:1:0:0: [sdc] Attached SCSI disk
[   11.942720] device-name= sata_mv
[   11.945935] fvdw2 disk index after get_sd_name = 0
[   11.951308] sd 0:2:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[   11.960577] NET: Registered protocol family 5
[   11.965927] console [netcon0] enabled
[   11.969628] fvdw3 prefix[0]=s  prefix[1]=d
[   11.973703] fvdw4 diskname = sda
[   11.977965] netconsole: network logging started
[   11.983509] sd 0:3:0:0: [sda] 3907029168 512-byte logical blocks: (2.00 TB/1.82 TiB)
[   11.992264] input: gpio-keys as /devices/platform/gpio-keys/input/input0
[   11.999351] sd 0:3:0:0: [sda] 4096-byte physical blocks
[   12.004955] hctosys: unable to open rtc device (rtc0)
[   12.010322] sd 0:3:0:0: [sda] Write Protect is off
[   12.015096] sd 0:3:0:0: [sda] Mode Sense: 00 3a 00 00
[   12.015458] sd 0:3:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[   12.034271]  sdb: sdb4 < sdb5 sdb6 sdb7 sdb8 >
[   12.040641] sd 0:2:0:0: [sdb] Attached SCSI disk
[   12.069897]  sda: sda1 sda2 sda3 sda4 < sda5 sda6 sda7 sda8 >
[   12.077813] sd 0:3:0:0: [sda] Attached SCSI disk
[   12.499218] ata2: SATA link up 3.0 Gbps (SStatus 123 SControl F300)
[   12.506182] ata2.15: Port Multiplier 1.2, 0x11ab:0x4140 r193, 4 ports, feat 0x5/0x1f
[   12.521282] ata2.00: hard resetting link
[   12.859991] ata2.01: hard resetting link
[   13.369480] ata2.02: hard resetting link
[   13.879479] ata2.03: hard resetting link
[   14.269252] ata2.01: ATA-10: ST2000DM008-2FR102, 0001, max UDMA/133
[   14.275491] ata2.01: 3907029168 sectors, multi 16: LBA48 NCQ (depth 31/32)
[   14.409259] ata2.01: configured for UDMA/133
[   14.459246] ata2.02: ATA-10: ST2000DM008-2FR102, 0001, max UDMA/133
[   14.465483] ata2.02: 3907029168 sectors, multi 16: LBA48 NCQ (depth 31/32)
[   14.599257] ata2.02: configured for UDMA/133
[   14.603695] ata2: EH complete
[   14.619509] scsi 1:1:0:0: Direct-Access     ATA      ST2000DM008-2FR1 0001 PQ: 0 ANSI: 5
[   14.628099] fvdw1 disk index before get_sd_name = 3
[   14.633112] device-name= sata_mv
[   14.636328] fvdw2 disk index after get_sd_name = 4
[   14.641135] fvdw3 prefix[0]=s  prefix[1]=d
[   14.645209] fvdw4 diskname = sde
[   14.649009] sd 1:1:0:0: [sde] 3907029168 512-byte logical blocks: (2.00 TB/1.82 TiB)
[   14.657378] scsi 1:2:0:0: Direct-Access     ATA      ST2000DM008-2FR1 0001 PQ: 0 ANSI: 5
[   14.665737] sd 1:1:0:0: [sde] 4096-byte physical blocks
[   14.671626] fvdw1 disk index before get_sd_name = 4
[   14.676487] device-name= sata_mv
[   14.679929] sd 1:1:0:0: [sde] Write Protect is off
[   14.684708] sd 1:1:0:0: [sde] Mode Sense: 00 3a 00 00
[   14.684817] sd 1:1:0:0: [sde] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[   14.693906] fvdw2 disk index after get_sd_name = 3
[   14.698673] fvdw3 prefix[0]=s  prefix[1]=d
[   14.703988] fvdw4 diskname = sdd
[   14.707896] sd 1:2:0:0: [sdd] 3907029168 512-byte logical blocks: (2.00 TB/1.82 TiB)
[   14.716517] sd 1:2:0:0: [sdd] 4096-byte physical blocks
[   14.721912] sd 1:2:0:0: [sdd] Write Protect is off
[   14.726798] sd 1:2:0:0: [sdd] Mode Sense: 00 3a 00 00
[   14.726911] sd 1:2:0:0: [sdd] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[   14.758375]  sdd: sdd4 < sdd5 sdd6 sdd7 sdd8 >
[   14.764742] sd 1:2:0:0: [sdd] Attached SCSI disk
[   14.773185]  sde: sde1 sde2 sde3 sde4 sde5 sde6 sde7 sde8
[   14.781002] sd 1:1:0:0: [sde] Attached SCSI disk
[   14.785663] md: Skipping autodetection of RAID arrays. (raid=autodetect will force)
[   14.795216] EXT4-fs (sda7): mounting ext3 file system using the ext4 subsystem
[   14.802989] EXT4-fs (sda7): INFO: recovery required on readonly filesystem
[   14.809989] EXT4-fs (sda7): write access will be enabled during recovery
[   15.119658] EXT4-fs (sda7): recovery complete
[   15.199280] EXT4-fs (sda7): mounted filesystem with ordered data mode. Opts: (null)
[   15.206940] VFS: Mounted root (ext3 filesystem) readonly on device 8:39.
[   15.214179] Freeing unused kernel memory: 192K
[   15.218602] This architecture does not have kernel memory protection.
[   15.562667] EXT4-fs (sda7): warning: maximal mount count reached, running e2fsck is recommended
[   15.609291] EXT4-fs (sda7): re-mounted. Opts: (null)
[   16.014128] EXT4-fs (sda1): mounting ext3 file system using the ext4 subsystem
[   18.719673] EXT4-fs (sda1): recovery complete
[   18.759287] EXT4-fs (sda1): mounted filesystem with ordered data mode. Opts: (null)
[   19.239407] EXT4-fs (sda1): re-mounted. Opts: (null)
[   20.944588] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[   20.951777] ehci-orion: EHCI orion driver
[   20.955855] orion-ehci orion-ehci.0: EHCI Host Controller
[   20.961334] orion-ehci orion-ehci.0: new USB bus registered, assigned bus number 1
[   20.969008] orion-ehci orion-ehci.0: irq 19, io mem 0xf1050000
[   20.999211] orion-ehci orion-ehci.0: USB 2.0 started, EHCI 1.00
[   21.005261] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
[   21.012038] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[   21.019265] usb usb1: Product: EHCI Host Controller
[   21.024124] usb usb1: Manufacturer: Linux 4.14.133 ehci_hcd
[   21.029686] usb usb1: SerialNumber: orion-ehci.0
[   21.034647] hub 1-0:1.0: USB hub found
[   21.038406] hub 1-0:1.0: 1 port detected
[   21.060924] usbcore: registered new interface driver usb-storage
[   21.082301] usbcore: registered new interface driver usblp
[   21.123220] Loading iSCSI transport class v2.0-870.
[   21.132703] iscsi: registered transport (tcp)
[   21.187956] random: crng init done
[   21.409268] usb 1-1: new high-speed USB device number 2 using orion-ehci
[   21.604595] EXT4-fs (sda5): mounting ext3 file system using the ext4 subsystem
[   21.612275] usb 1-1: New USB device found, idVendor=0424, idProduct=2512
[   21.619103] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   21.629335] hub 1-1:1.0: USB hub found
[   21.633142] hub 1-1:1.0: 2 ports detected
[   22.019537] EXT4-fs (sda5): warning: mounting fs with errors, running e2fsck is recommended
[   22.069441] EXT4-fs (sda5): Errors on filesystem, clearing orphan list.
[   22.069441]
[   22.077503] EXT4-fs (sda5): recovery complete
[   22.119286] EXT4-fs (sda5): mounted filesystem with ordered data mode. Opts: (null)
[   22.207067] EXT4-fs error (device sda5): ext4_mb_generate_buddy:757: group 0, block bitmap and bg descriptor inconsistent: 32199 vs 32238 free clusters
[   22.323497] Adding 514076k swap on /dev/sda3.  Priority:-2 extents:1 across:514076k
[   22.424217] JBD2: Spotted dirty metadata buffer (dev = sda5, blocknr = 0). There's a risk of filesystem corruption in case of system crash.
[   34.719369] udevd (1138): /proc/1138/oom_adj is deprecated, please use /proc/1138/oom_score_adj instead.
[   34.728910] udev: starting version 130
[   35.256661] synth uevent: /gpiochip0: failed to send uevent
[   35.256678] gpio gpiochip0: uevent: failed to send synthetic uevent
[   35.322354] synth uevent: /gpiochip1: failed to send uevent
[   35.322371] gpio gpiochip1: uevent: failed to send synthetic uevent
[   43.864313] md: md0 stopped.
[   43.898445] md/raid:md0: device sda8 operational as raid disk 0
[   43.904482] md/raid:md0: device sde8 operational as raid disk 4
[   43.910447] md/raid:md0: device sdd8 operational as raid disk 3
[   43.916338] md/raid:md0: device sdc8 operational as raid disk 2
[   43.922265] md/raid:md0: device sdb8 operational as raid disk 1
[   43.930133] md/raid:md0: raid level 5 active with 5 out of 5 devices, algorithm 2
[   44.179312] md0: detected capacity change from 0 to 7988127465472
[   57.912359] EXT4-fs (md0): recovery complete
[   58.349341] EXT4-fs (md0): mounted filesystem with ordered data mode. Opts: user_xattr,acl,nodelalloc
[   60.509823] mv643xx_eth_port mv643xx_eth_port.0 eth0: link down
[   60.515929] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[   63.505737] mv643xx_eth_port mv643xx_eth_port.0 eth0: link up, 1000 Mb/s, full duplex, flow control disabled
[   63.515576] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   77.739329] capability: warning: `proftpd' uses 32-bit capabilities (legacy support in use)
[  326.679272] EXT4-fs (sda5): error count since last fsck: 90
[  326.684826] EXT4-fs (sda5): initial error at time 1514808332: ext4_mb_generate_buddy:758
[  326.692897] EXT4-fs (sda5): last error at time 1514804400: ext4_mb_generate_buddy:757
root@Norman_Nas2:/ # ps auxf
USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root         2  0.0  0.0      0     0 ?        S    14:42   0:00 [kthreadd]
root         4  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [kworker/0]
root         6  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [mm_percpu]
root         7  0.0  0.0      0     0 ?        S    14:42   0:00  \_ [ksoftirqd]
root         8  0.0  0.0      0     0 ?        I    14:42   0:00  \_ [rcu_preem]
root         9  0.0  0.0      0     0 ?        I    14:42   0:00  \_ [rcu_sched]
root        10  0.0  0.0      0     0 ?        I    14:42   0:00  \_ [rcu_bh]
root        11  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [netns]
root       280  0.0  0.0      0     0 ?        S    14:42   0:00  \_ [oom_reape]
root       281  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [writeback]
root       283  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [crypto]
root       284  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [kintegrit]
root       286  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [kblockd]
root       292  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [ata_sff]
root       310  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [md]
root       402  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [rpciod]
root       403  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [xprtiod]
root       404  0.0  0.0      0     0 ?        S    14:42   0:00  \_ [kswapd0]
root       416  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [nfsiod]
root       417  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [cifsiod]
root       418  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [cifsoploc]
root       419  0.0  0.0      0     0 ?        S    14:42   0:00  \_ [jfsIO]
root       423  0.0  0.0      0     0 ?        S    14:42   0:00  \_ [jfsCommit]
root       424  0.0  0.0      0     0 ?        S    14:42   0:00  \_ [jfsSync]
root       425  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [xfsalloc]
root       426  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [xfs_mru_c]
root       570  0.0  0.0      0     0 ?        S    14:42   0:00  \_ [scsi_eh_0]
root       571  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [scsi_tmf_]
root       574  0.0  0.0      0     0 ?        S    14:42   0:00  \_ [scsi_eh_1]
root       575  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [scsi_tmf_]
root       578  0.0  0.0      0     0 ?        I    14:42   0:00  \_ [kworker/u]
root       579  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [smflush]
root       580  0.0  0.0      0     0 ?        S    14:42   0:00  \_ [spi0]
root       692  0.0  0.0      0     0 ?        S<   14:42   0:00  \_ [aoe_tx0]
root       693  0.0  0.0      0     0 ?        S<   14:42   0:00  \_ [aoe_ktio0]
root       718  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [raid5wq]
root       721  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [dm_bufio_]
root       722  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [kmpathd]
root       723  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [kmpath_ha]
root       750  0.0  0.0      0     0 ?        I    14:42   0:00  \_ [kworker/u]
root       758  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [ipv6_addr]
root       778  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [dsa_order]
root       870  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [kworker/0]
root       871  0.0  0.0      0     0 ?        S    14:42   0:00  \_ [jbd2/sda7]
root       872  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [ext4-rsv-]
root       891  0.0  0.0      0     0 ?        S    14:42   0:00  \_ [jbd2/sda1]
root       892  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [ext4-rsv-]
root       924  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [iscsi_eh]
root       949  0.0  0.0      0     0 ?        S    14:42   0:00  \_ [jbd2/sda5]
root       950  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [ext4-rsv-]
root      1586  0.0  0.0      0     0 ?        S    14:42   0:00  \_ [md0_raid5]
root      1815  0.0  0.0      0     0 ?        S    14:42   0:00  \_ [jbd2/md0-]
root      1816  0.0  0.0      0     0 ?        I<   14:42   0:00  \_ [ext4-rsv-]
root      1996  0.0  0.0      0     0 ?        S    14:43   0:00  \_ [lockd]
root      1997  0.0  0.0      0     0 ?        S    14:43   0:00  \_ [nfsd]
root      1998  0.0  0.0      0     0 ?        S    14:43   0:00  \_ [nfsd]
root      1999  0.0  0.0      0     0 ?        S    14:43   0:00  \_ [nfsd]
root      2000  0.0  0.0      0     0 ?        S    14:43   0:00  \_ [nfsd]
root      2001  0.0  0.0      0     0 ?        S    14:43   0:00  \_ [nfsd]
root      2002  0.0  0.0      0     0 ?        S    14:43   0:00  \_ [nfsd]
root      2003  0.0  0.0      0     0 ?        S    14:43   0:00  \_ [nfsd]
root      2004  0.0  0.0      0     0 ?        S    14:43   0:00  \_ [nfsd]
root      2700  0.0  0.0      0     0 ?        I    16:47   0:00  \_ [kworker/0]
root      2751  0.0  0.0      0     0 ?        I    17:02   0:00  \_ [kworker/0]
root      2752  0.0  0.0      0     0 ?        I    17:08   0:00  \_ [kworker/0]
root         1  0.0  0.3   3652  1676 ?        Ss   14:42   0:03 init
root       934  0.0  0.0   1548   456 ?        Ss   14:42   0:00 /usr/sbin/butto
root      1111  0.0  0.2   1808  1308 ?        Ss   14:42   0:00 /usr/sbin/fan-d
root      1131  0.0  0.2   3652  1496 ?        Ss   14:42   0:00 /sbin/syslogd -
root      1138  0.0  0.2   1856  1236 ?        S<s  14:42   0:00 /sbin/udevd --d
root      1577  0.0  0.3   2604  1640 ?        Ss   14:42   0:00 /sbin/mdadm --m
root      1863  0.0  0.2   3652  1076 ?        Ss   14:43   0:00 /sbin/udhcpc -b
root      1890  0.0  3.6  47396 18440 ?        Ss   14:43   0:00 /usr/bin/httpd
nobody    1893  0.0  1.4  47476  7168 ?        S    14:43   0:00  \_ /usr/bin/ht
root      1896  0.0  0.2   1736  1220 ?        Ss   14:43   0:05 /usr/sbin/noflu
root      1937  0.0  0.2   1688  1136 ?        Ss   14:43   0:00 /usr/bin/discov
root      1945  0.0  0.3   2176  1608 ?        Ss   14:43   0:00 /usr/bin/rpcbin
root      1963  0.0  0.2   2228  1508 ?        Ss   14:43   0:00 dropbear -p 22
root      2753  0.6  0.3   2308  1684 ?        Ss   17:09   0:00  \_ dropbear -p
root      2754  0.1  0.3   3656  1944 pts/0    Ss   17:09   0:00      \_ -sh
root      2768  0.0  0.3   4452  2012 pts/0    R+   17:09   0:00          \_ ps
root      1991  0.0  0.3   3004  2000 ?        Ss   14:43   0:00 /usr/sbin/rpc.m
root      1993  0.0  0.4   2588  2128 ?        Ss   14:43   0:00 /usr/sbin/rpc.s
root      2007  0.0  0.2   1680  1044 ?        Ss   14:43   0:00 /usr/sbin/hostd
nobody    2062  0.0  0.7   8180  3692 ?        SLs  14:43   0:00 proftpd: (accep
root      2106  0.0  1.3  26732  7084 ?        Ss   14:43   0:00 /usr/sbin/nmbd
root      2113  0.0  2.8  41048 14400 ?        Ss   14:43   0:00 /usr/sbin/smbd
root      2122  0.0  0.8  39636  4432 ?        S    14:43   0:00  \_ /usr/sbin/s
root      2123  0.0  0.7  39628  3772 ?        S    14:43   0:00  \_ /usr/sbin/s
root      2637  0.0  0.2   3940  1360 ?        Ss   14:44   0:00 /bin/ntpd -p nt
root@Norman_Nas2:/ # ls -ld / /etc /var /tmp/ /tmp/var/*/
drwxr-xr-x  27 root   root   1024 2018-01-01 12:00 /
drwxrwxr-x  20 root   sys    4096 2022-01-18 16:58 /etc
drwxrwxrwx   6 root   root   4096 2022-01-18 16:58 /tmp/
drwxrwxrwx   2 root   root     40 2018-01-01 12:00 /tmp/var/cache/
drwxr-xr-x   2 nobody nobody 4096 2018-01-01 12:00 /tmp/var/db/
drwxr-xr-x   3 root   root   4096 2018-01-01 12:00 /tmp/var/lib/
drwxrwxrwx   3 root   root   4096 2018-01-01 12:00 /tmp/var/lock/
drwxr-xr-x   6 root   root   4096 2018-01-01 12:00 /tmp/var/log/
drwxrwxrwx   3 nobody nobody 4096 2018-01-01 12:01 /tmp/var/run/
drwxrwxrwx   6 root   root   4096 2018-01-01 12:00 /tmp/var/spool/
drwxr-xr-x   4 root   root   1024 2018-01-01 12:00 /var
root@Norman_Nas2:/ # ls -l /etc/passwd /etc/group
-rw-r--r--  1 root root 259 2018-01-01 12:00 /etc/group
-rw-r--r--  1 root root 617 2018-01-01 12:00 /etc/passwd
root@Norman_Nas2:/ # debugon
root@Norman_Nas2:/ # reboot -f


after the reboot:

Code: Select all

login as: root
root@192.168.1.24's password:
root@Norman_Nas2:/ # cat /var/log/messages
Jan  1 12:00:13 kirkwood-4 syslog.info syslogd started: BusyBox v1.21.0
Jan  1 12:00:22 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/lsscsi -t
Jan  1 12:00:22 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/lsscsi -t
Jan  1 12:00:24 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdadm --examine --brief /dev/sda8
Jan  1 12:00:24 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdadm --detail /dev/md0
Jan  1 12:00:24 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdadm --examine --brief /dev/sdb8
Jan  1 12:00:24 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdadm --detail /dev/md0
Jan  1 12:00:24 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdadm --examine --brief /dev/sdc8
Jan  1 12:00:24 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdadm --detail /dev/md0
Jan  1 12:00:25 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdadm --examine --brief /dev/sdd8
Jan  1 12:00:25 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdadm --detail /dev/md0
Jan  1 12:00:25 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdadm --examine --brief /dev/sde8
Jan  1 12:00:25 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdadm --detail /dev/md0
Jan  1 12:00:25 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/fdisk -l
Jan  1 12:00:25 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a /dev/sda
Jan  1 12:00:26 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a /dev/sda
Jan  1 12:00:26 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/fdisk -l /dev/sda
Jan  1 12:00:26 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/fdisk -l /dev/sda
Jan  1 12:00:26 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/cat /sys/block/sda/sda8/size
Jan  1 12:00:27 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdadm --examine --brief /dev/sda8
Jan  1 12:00:27 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a /dev/sdb
Jan  1 12:00:27 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a /dev/sdb
Jan  1 12:00:28 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/fdisk -l /dev/sdb
Jan  1 12:00:28 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/fdisk -l /dev/sdb
Jan  1 12:00:28 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/cat /sys/block/sdb/sdb8/size
Jan  1 12:00:28 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdadm --examine --brief /dev/sdb8
Jan  1 12:00:28 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a /dev/sdc
Jan  1 12:00:29 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a /dev/sdc
Jan  1 12:00:30 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/fdisk -l /dev/sdc
Jan  1 12:00:30 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/fdisk -l /dev/sdc
Jan  1 12:00:30 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/cat /sys/block/sdc/sdc8/size
Jan  1 12:00:30 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdadm --examine --brief /dev/sdc8
Jan  1 12:00:30 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a /dev/sdd
Jan  1 12:00:30 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a /dev/sdd
Jan  1 12:00:31 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/fdisk -l /dev/sdd
Jan  1 12:00:31 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/fdisk -l /dev/sdd
Jan  1 12:00:31 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/cat /sys/block/sdd/sdd8/size
Jan  1 12:00:31 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdadm --examine --brief /dev/sdd8
Jan  1 12:00:31 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a /dev/sde
Jan  1 12:00:32 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a /dev/sde
Jan  1 12:00:32 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/fdisk -l /dev/sde
Jan  1 12:00:32 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/gdisk -l /dev/sde
Jan  1 12:00:32 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/cat /sys/block/sde/sde8/size
Jan  1 12:00:32 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdadm --examine --brief /dev/sde8
Jan  1 12:00:32 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdadm --detail /dev/md0
Jan  1 12:00:33 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/blkid -o value -s TYPE /dev/md0
Jan  1 12:00:33 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/e2label /dev/md0
Jan  1 12:00:33 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/mdadm --detail /dev/md0
Jan  1 12:00:33 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/fdisk -l /dev/sdb
Jan  1 12:00:33 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/fdisk -l /dev/sdc
Jan  1 12:00:33 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/fdisk -l /dev/sdd
Jan  1 12:00:33 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/fdisk -l /dev/sde
Jan  1 12:00:33 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/blkid -o value -s TYPE /dev/md0
Jan  1 12:00:38 kirkwood-4 local0.warn API[2018/01/01 12:00:38] api_dhcpc.php(25)[1835]: calling /etc/api/api_dhcpc.php deconfig
Jan  1 12:00:38 kirkwood-4 local0.warn API[2018/01/01 12:00:38] dhcpcfunc_daemon_state_change.finc(43)[1835]: dhcpc script got state: deconfig as input
Jan  1 12:00:38 kirkwood-4 local0.warn API[2018/01/01 12:00:38] api_dhcpc.php(57)[1835]: deconfig retcode: 0
Jan  1 12:00:41 kirkwood-4 local0.warn API[2018/01/01 12:00:41] api_dhcpc.php(25)[1838]: calling /etc/api/api_dhcpc.php bound
Jan  1 12:00:41 kirkwood-4 local0.warn API[2018/01/01 12:00:41] dhcpcfunc_daemon_state_change.finc(43)[1838]: dhcpc script got state: bound as input
Jan  1 12:00:42 kirkwood-4 local0.warn API[2018/01/01 12:00:42] api_dhcpc.php(57)[1838]: bound retcode: 0
Jan  1 12:00:45 kirkwood-4 user.info noflushd: noflushd 2.8 fvdw version 18 jun 2015 started
Jan  1 12:00:45 kirkwood-4 daemon.err nmbd[1893]: [2018/01/01 12:00:45.791563,  0] ../../lib/util/become_daemon.c:135(daemon_ready)
Jan  1 12:00:45 kirkwood-4 daemon.err nmbd[1893]:   daemon_ready: daemon 'nmbd' finished starting up and ready to serve connections
Jan  1 12:00:48 kirkwood-4 daemon.err smbd[1896]: [2018/01/01 12:00:48.306879,  0] ../../lib/util/become_daemon.c:135(daemon_ready)
Jan  1 12:00:48 kirkwood-4 daemon.err smbd[1896]:   daemon_ready: daemon 'smbd' finished starting up and ready to serve connections
Jan  1 12:00:50 kirkwood-4 auth.info passwd: Password for dummy changed by root
Jan  1 12:00:50 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/usr/htdocs ; USER=root ; COMMAND=/usr/bin/smbpasswd -a -s dummy
Jan  1 12:00:50 kirkwood-4 auth.info passwd: Password for kodi changed by root
Jan  1 12:00:50 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/usr/htdocs ; USER=root ; COMMAND=/usr/bin/smbpasswd -a -s kodi
Jan  1 12:00:51 kirkwood-4 user.notice /usr/bin/ez-ipupdate[1926]: ez-ipupdate Version 3.0.11b8, Copyright (C) 1998-2001 Angus Mackay.
Jan  1 12:00:51 kirkwood-4 user.notice /usr/bin/ez-ipupdate[1926]: /usr/bin/ez-ipupdate started for interface web-detect host eva01.ddns.net using server dynupdate.no-ip.com and service noip
Jan  1 12:00:51 kirkwood-4 user.notice /usr/bin/ez-ipupdate[1926]: cache date: 0
Jan  1 12:00:51 kirkwood-4 user.notice /usr/bin/ez-ipupdate[1926]: cache IP: (null)
Jan  1 12:00:51 kirkwood-4 user.notice /usr/bin/ez-ipupdate[1926]: malformed cache file: /var/cache/ez-ipupdate/default-cache
Jan  1 12:00:51 kirkwood-4 user.notice /usr/bin/ez-ipupdate[1926]: try to connect to ip-detection server checkip.dyndns.org:80
Jan  1 12:00:51 kirkwood-4 user.info discoverd: fvdw-sl discoverd vs 11oct19 daemon started
Jan  1 12:00:51 kirkwood-4 user.info discoverd: discoverd uses ip: 192.168.1.24 and mac address 00d04b8d9a81
Jan  1 12:00:52 kirkwood-4 local0.warn API[2018/01/01 12:00:52] nasapi.inc(36)[1940]: nasapi: lock time = 0
Jan  1 12:00:52 kirkwood-4 local0.warn API[2018/01/01 12:00:52] nasapi.inc(49)[1940]: calling 'mrvlDropbearStart'
Jan  1 12:00:52 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/chmod 777 /rw_fs/.ssh
Jan  1 12:00:52 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/chmod 700 /rw_fs/.ssh
Jan  1 12:00:52 kirkwood-4 authpriv.warn dropbear[1956]: Failed loading /etc/dropbear/dropbear_dss_host_key
Jan  1 12:00:52 kirkwood-4 authpriv.warn dropbear[1956]: Failed loading /etc/dropbear/dropbear_ecdsa_host_key
Jan  1 12:00:52 kirkwood-4 authpriv.info dropbear[1957]: Running in background
Jan  1 12:00:52 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/ps -ef
Jan  1 12:00:52 kirkwood-4 user.notice /usr/bin/ez-ipupdate[1926]: ip address found in server response: 5.11.120.71
Jan  1 12:00:52 kirkwood-4 local0.warn API[2018/01/01 12:00:52] nasapi.inc(484)[1940]: mrvlDropbearStart Return Code: 0
Jan  1 12:00:52 kirkwood-4 user.notice /usr/bin/ez-ipupdate[1926]: hostname = eva01.ddns.net
Jan  1 12:00:52 kirkwood-4 user.notice /usr/bin/ez-ipupdate[1926]: IP addres = 5.11.120.71
Jan  1 12:00:52 kirkwood-4 user.notice /usr/bin/ez-ipupdate[1926]: request = GET /nic/update?hostname=eva01.ddns.net&myip=5.11.120.71
Jan  1 12:00:52 kirkwood-4 local0.warn API[2018/01/01 12:00:52] nasapi.inc(36)[1973]: nasapi: lock time = 0
Jan  1 12:00:53 kirkwood-4 local0.warn API[2018/01/01 12:00:53] nasapi.inc(49)[1973]: calling 'mrvlNfsRestart 0'
Jan  1 12:00:53 kirkwood-4 user.notice /usr/bin/ez-ipupdate[1926]: invalid hostname: eva01.ddns.net
Jan  1 12:00:53 kirkwood-4 user.notice /usr/bin/ez-ipupdate[1926]: failure to update web-detect->5.11.120.71 (eva01.ddns.net)
Jan  1 12:00:53 kirkwood-4 user.notice /usr/bin/ez-ipupdate[1926]: shuting down updater for eva01.ddns.net due to fatal error
Jan  1 12:00:53 kirkwood-4 daemon.notice rpc.mountd[1985]: Version 1.2.9 starting
Jan  1 12:00:53 kirkwood-4 daemon.notice rpc.statd[1987]: Version 1.2.9 starting
Jan  1 12:00:53 kirkwood-4 daemon.notice sm-notify[1988]: Version 1.2.9 starting
Jan  1 12:00:53 kirkwood-4 daemon.warn rpc.statd[1987]: Failed to read /var/lib/nfs/state: Success
Jan  1 12:00:53 kirkwood-4 daemon.notice rpc.statd[1987]: Initializing NSM state
Jan  1 12:00:53 kirkwood-4 daemon.warn rpc.statd[1987]: Running as root.  chown /var/lib/nfs to choose different user
Jan  1 12:00:53 kirkwood-4 local0.warn API[2018/01/01 12:00:53] nasapi.inc(484)[1973]: mrvlNfsRestart Return Code: 0
Jan  1 12:00:53 kirkwood-4 user.info hostd: host daemon V2 started
Jan  1 12:00:53 kirkwood-4 user.info hostd: updating hosts file, next update in 7200 seconds when disk remains active
Jan  1 12:00:53 kirkwood-4 authpriv.info dropbear[2016]: Child connection from 192.168.1.208:64899
Jan  1 12:00:56 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/ls -lAQ /share/1100
Jan  1 12:00:56 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/ls -lAQ /share/1100
Jan  1 12:00:56 kirkwood-4 authpriv.notice sudo:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/test -f /tmp/var/log/proftpd/proftpd.log
Jan  1 12:00:59 kirkwood-4 authpriv.notice dropbear[2016]: Password auth succeeded for 'root' from 192.168.1.208:64899
root@Norman_Nas2:/ #