hdaconnect: Issues https://bugs.amahi.org/ https://bugs.amahi.org/favicon.ico 2018-02-08T19:00:18Z Amahi Home Server Tracker Redmine Bug #2302 (New): HDAConnect password authentication only looks at first 8 characters https://bugs.amahi.org/issues/2302 2018-02-08T19:00:18Z beaker2382 <p>Hello,</p> <p>I am using HDA Connect GUI v 3.2 for windows. While logging into my HDA from work I entered a wrong character at the end of my 10 character password, but I was granted access. I tried again (and agian and again and again, etc) and I found that as long as the first 8 characters of my password were correct, I would be allowed in. I could have trailing characters way over my 10 character password and still get in. If anything in the first 8 characters is wrong, I am disallowed access, as expected.</p> <p>The point is, this application only verifies the accuracy of the first 8 characters of the password. The rest is assumed accurate.</p> <p>This seems like a GROSS oversight on the security of my internet facing device here.... Can this get patched? Quickly!</p> <p>Thanks,<br />JP</p> Bug #2289 (New): suggested additions to the OpenVPN app https://bugs.amahi.org/issues/2289 2017-10-30T09:07:14Z cpg <p>@td512 suggested we add this:</p> <pre><code>push "redirect-gateway def1 bypass-dhcp"</code></pre> <p>to</p> <pre><code>server.conf</code></pre> <p>I <strong>think</strong> the reason for adding this is to send <strong>all</strong> the traffic of the client through the VPN tunnel.</p> Feature #2243 (New): Multiple users and custom certificates with OpenVPN https://bugs.amahi.org/issues/2243 2017-05-17T04:50:37Z chayes874 <p>This is to help those who might want to create OpenVPN custom certificates for supporting multiple users. I set up my system in 2016 under Amahi 8 using OpenVPN, but I had to piece together the information to make it work. I am currently supporting a team of 8 people who collaborate through a phpBB forum hosted on my Amahi server. Everyone connects using their own OpenVPN certificate and key which allows simultaneous access for multiple users.</p> <p>The two main pages that helped me get it working were:<br /><a class="external" href="https://wiki.amahi.org/index.php/OpenVPN_custom_certificates">https://wiki.amahi.org/index.php/OpenVPN_custom_certificates</a><br /><a class="external" href="https://community.openvpn.net/openvpn/wiki/EasyRSA3-OpenVPN-Howto">https://community.openvpn.net/openvpn/wiki/EasyRSA3-OpenVPN-Howto</a></p> I could duplicate the whole procedure again and document it in detail, but that won't be anytime soon. As best I can recall, these were the steps: <ul> <li>Define users and passwords via Amahi dashboard</li> <li>Install OpenVPN from Amahi app store</li> <li>Copy /usr/share/doc/openvpn/easy-rsa to /etc/openvpn</li> <li>Follow the instructions on the EasyRSA3-OpenVPN-Howto page <ul> <li>I only init-pki once</li> <li>Build the ca</li> <li>Build the server .crt and .key</li> <li>Build multiple client .crt and .key</li> <li>I believe you only need to "gen-req" and then "sign" </li> </ul> </li> <li>I created the ca.crt, server.crt, server.key and all client.crt/client.key on the Amahi server. Everything was created at /etc/openvpn/easy-rsa/easyrsa3/pki</li> <li>Copy out created ca.crt, server.crt, server.key and dh.pem to /etc/openvpn/amahi</li> <li>Modify etc/openvpn/amahi.conf to point to these files in the /etc/openvpn/amahi directory</li> <li>Create .crt and .key for each user according to instructions on OpenVPN wiki page</li> <li>In the pki directory, .crt files will be in the issued directory, .key files will be in the private directory</li> <li>chmod 777 on .crt and .key files</li> <li>Create ovpn config file that: <ul> <li>points to your Dynamic DNS (remote username.yourhda.com 1194)</li> <li>points to ca.crt, client.crt, client.key</li> </ul> </li> <li>Package up ca.crt, client.crt, client.key and ovpn config file</li> <li>Deliver these files to the end user</li> <li>End-user installs an OpenVPN client and uses the files to connect</li> </ul> <p>I recall there being an issue with Tunnelblick not loading the ovpn config file correctly. Like it didn't understand the file (created on Windows), but copying the text to a new text file created on the local Mac resolved the issue. This happened to two users. Other than that, it worked as expected. I also created documentation showing them how to load VPN clients under Windows, iOS and OS X, where to place the files they received and how to connect using the client.</p> <p>Once everyone is connected via their chosen OpenVPN client, they can connect to the phpBB forum that the Amahi server is hosting.</p> <p>I made plenty of mistakes generating the crts and keys, but eventually I made it work and in the end it really wasn't too difficult.</p> Bug #2214 (Assigned): Need to update installer for Windows https://bugs.amahi.org/issues/2214 2017-02-28T23:28:10Z cpg <p>Users of windows could use a new installer for easier operation.</p> <p>td512 may have widows skillz/toolz to do this?</p> <p>What users are reporting is that after they install HDAConnect, they have to do this to get the new certs:</p> <pre> I use HDAConnect on the client side, so all I needed after reinstalling on the Server side was to copy the new certificates to C:\Program Files (x86)\HDAConnect\config, and then modify the HomeHDA.ovpn file to use the new certificate names. </pre> Bug #661 (New): VPN connecting, but can't route because Win XP is on D: https://bugs.amahi.org/issues/661 2010-10-26T07:43:30Z cpg <p>HDAConnect is working just fine... except that it can't run route.exe because OpenVPN is looking for it on the C: drive, and I have XP on the D: drive. (Multi-boot machine...forgive me.)</p> <p>Can anyone tell me where to adjust for this?</p> <pre> Tue Sep 28 07:06:00 2010 C:\WINDOWS\system32\route.exe ADD xxx.xxx.xxx.xxx MASK xxx.xxx.xxx.xxx Tue Sep 28 07:06:00 2010 openvpn_execve: CreateProcess C:\WINDOWS\system32\route.exe failed: %1 is not a valid Win32 application. (errno=193) Tue Sep 28 07:06:00 2010 ERROR: Windows route add command failed: external program did not execute -- returned error code -1 Tue Sep 28 07:06:00 2010 Initialization Sequence Completed </pre> Feature #491 (New): Support Yubikey. https://bugs.amahi.org/issues/491 2010-03-26T04:54:21Z anzenketh <p>Support of the Yubikey would be really nice.</p> <p><a class="external" href="http://www.yubico.com/developers/intro/">http://www.yubico.com/developers/intro/</a></p> Feature #312 (New): HDA-Connect for Windows Mobile https://bugs.amahi.org/issues/312 2009-09-30T07:27:43Z Omn1nfinite <p>HDA-Connect is a utility which makes it easy to connect to your Amahi HDA and access shares,etc from an outside network. It is available for the Windows OS and works quite well. Since Windows Mobile supports VPN connections, a similiar app for the WM platform would be both practial and wonderful for smart phone users with fast 3G connections.</p> Feature #45 (New): autoremember username password and hda name https://bugs.amahi.org/issues/45 2009-02-23T16:37:18Z jfrenc14 <p>Auto remember password, username, and hda name</p>