SSH and Samba

One of my tasks was to set up a Campaign office in downtown Racine, to house our Development Office. Their primary role was to raise money for the new Racine Art Museum.

I set up SBC DSL, small office package for the connection to the web. Parked a Linux firewall/file-server/proxy server in front of the workstations to protect them from the baddies ;-). It was an old 233mhz machine I picked up for change, and worked like a champ. I bullet-proofed it with scripts and tutorials from Dranch and his work with TrinityOS. Great job David! I also use Tripwire, a great project.

I needed to provide some sort of method to provide these users access to our file server at our main office, where we were being supplied with SBS DSL, but this time the service came with a 5 port router, and all external IP's were NAT'd to internal addresses in the router.

I wanted to use FreeS/WAN, but I was having too much trouble punching a hole through the router, so I used SSH and Samba. I setup a common user on the remote and local box, and created a password-less key.

Then I used this script: 

#!/bin/sh
# Source function library.
. /etc/init.d/functions

# Get config.
. /etc/sysconfig/network

# Check that networking is up.
if [ ${NETWORKING} = "no" ]
then
        echo "Networking is not setup on this computer."
        exit 0
fi


# Check that DSL is up.
host="ameritech.net"
ping -c1 $host 2>&1 1>/dev/null

if [ $? -eq  0 ]; then
        echo "$host is up..."
        else
        echo "$host is not up, RAM is DOWN."
        echo "Call Ameritech and check our service."
        exit 0
fi


## Check that Wustum is up.
if ! wget -T 30 -O /dev/null -q http://www.wustum.org/web/Default.htm; then
        echo "Wustum is DOWN."
        echo "Call John and have him check our service."
        exit 0
else
        echo "Wustum is up..."
fi



# If smb is already started, stop it
#
[ -f "/var/lock/subsys/smb" ] || /etc/rc.d/init.d/smb stop


#
# If Netbios is listening, kill the proc
#
NETBIOS_PID=`lsof -i TCP | grep 'netbios-ssn (LISTEN)' | grep -v grep | awk '{print$2}'`

if [ "$NETBIOS_PID" -gt "0" ]
        then
         kill pid "$NETBIOS_PID"
fi

killall -9 ssh

#
# Forward these ports
#
REMOTE_SMB_HOST=192.168.10.10 # fill in IP address here
REMOTE_SSH_HOST=wustum.org # fill in IP address here

ssh -N -f -l smbuser -i /home/public/.ssh/id_dsa -g \
        -L 5137:$REMOTE_SMB_HOST:137 \
        -L 5138:$REMOTE_SMB_HOST:138 \
        -L 5139:$REMOTE_SMB_HOST:139 \
        $REMOTE_SSH_HOST

#
# Start it back up again
#
/etc/rc.d/init.d/smb start

echo
echo

#
# Find out what is mounted, we don't want to mount it twice
#
#APPS=`mount | grep '/home/apps' | grep -v grep | awk '{print $3}'`
OFSCAN=`mount | grep '/home/ofscan' | grep -v grep | awk '{print $3}'`
COMPANY=`mount | grep '/home/Company' | grep -v grep | awk '{print $3}'`
JSIMONSEN=`mount | grep '/home/jsimonsen' | grep -v grep | awk '{print $3}'`
SBUHLER=`mount | grep '/home/sbuhler-maki' | grep -v grep | awk '{print $3}'`

#count=0
#echo "Checking the apps folder..."
#count=$(ls -fa /home/apps | wc -l)

#if [ "$count" -gt "2" ]; then
#       echo "Apps is connected and contains files!"
#       echo
#       echo
#else
#
#       if [ "$APPS" != "/home/apps" ]
#               then
#               echo "Apps is connected but contains no files!"
#               echo
#               echo "Reconnecting the apps folder..."
#               echo
#               umount /home/apps
#       fi

#       mount -t smbfs -o dmask=2777,port=5139,username=myuser,password=mypassword //localhost/apps /home/apps


#       echo "The apps folder has been reconnected."
#       echo
#fi

count=0
echo "Checking the ofscan folder..."
count=$(ls -fa /home/ofscan | wc -l)

if [ "$count" -gt "2" ]; then
        echo "Ofscan is connected and contains files!"
        echo
else
        if [ "$OFSCAN" != "/home/ofscan" ]
                then
                echo "Ofscan is connected but contains no files."
                echo
                echo "Reconnecting the Ofscan folder..."
                echo
                umount /home/ofscan
        fi

        mount -t smbfs -o dmask=2777,port=5139,username=myuser,password=mypassword //localhost/ofscan /home/ofscan

        echo "The Ofscan folder has been reconnected."
        echo
fi

count=0
echo "Checking the company folder..."
count=$(ls -fa /home/Company | wc -l)

if [ "$count" -gt "2" ]; then
        echo "Company is connected and contains files!"
        echo
else
        if [ "$COMPANY" != "/home/Company" ]
                then
                echo "Company is connected but contains no files!"
                echo
                echo "Reconnecting the Company folder..."
                echo
                umount /home/Company
        fi

        mount -t smbfs -o dmask=2777,port=5139,username=myuser,password=mypassword //localhost/Company /home/Company

        echo "The Company folder has been reconnected."
        echo
fi

count=0
echo "Checking Sue's folder..."
count=$(ls -fa /home/sbuhler-maki | wc -l)

if [ "$count" -gt "2" ]; then
        echo "Sbuhler-Maki is connected and contains files!"
        echo
else
        if [ "$SBUHLER" != "/home/sbuhler-maki" ]
                then
                echo "Sbuhler-Maki is connected but contains no files!"
                echo
                echo "Reconnecting the sbuhler-maki folder..."
                echo
                umount /home/sbuhler-maki
        fi

        mount -t smbfs -o dmask=2777,port=5139,username=myuser,password=mypassword //localhost/SBuhlerMaki /home/sbuhler-maki

        echo "The sbuhler-maki folder has been reconnected."
        echo
fi


count=0
echo "Checking Joedy's folder..."
count=$(ls -fa /home/jsimonsen | wc -l)

if [ "$count" -gt "2" ]; then
        echo "JSimonsen is connected and contains files!"
        echo
else
        if [ "$JSIMONSEN" != "/home/jsimonsen" ]
                then
                echo "JSimonsen is connected but contains no files!"
                echo
                echo "Reconnecting the JSimonsen folder..."
                echo
                umount /home/jsimonsen
        fi

        mount -t smbfs -o dmask=2777,port=5139,username=myuser,password=mypass //localhost/JSimonsen /home/jsimonsen

        echo "The jsimonsen folder has been reconnected."
        echo
fi
exit 0

This script was also set up to be run by the folks in the office via a WebMin interface. Since the building they were in was so antiquated, and thus the wiring and power supply were "delicate", they experienced LOTS of phone wire noise and frequent power outages, breaking the connection.

Thank God that's all over...

Even with all the headaches, they still got Virus scan updates, and could work on files stored on the remote server. If we had a little more speed on the upstream end at the home office, things would have been a little more tolerable (it was only 128k up...)

Comments

Post a Comment

Popular posts from this blog

freeFTPD

Image
Image by Micah68 via Flickr I've been using FileZilla FTP server for some time now and have been happy for the performance. Recently, we needed the ability to expose the FTP service to another client, and the documents that we'd be receiving would be arriving in an un-encrypted form, unlike our other clients. I decided I could simply enable FTPS , the SSL enabled FTP protocol and open a port to 990 on my ASA 5525 Security Appliance and NAT traffic to our server. Unfortunately I quickly found out that a passive FTPS server behind my firewall won't work without some specific configuration changes as discussed in this article . With all that fussing around, I decided to check out freeFTPd, a single deamon that offers both FTP and SFTP, not to be confused with FTPS, but the secure file transfer protocol that is common to the SSH ( secure shell ) protocol. It's fairly straight forward, but is a bit quirky and the documentation is non-existent. Follow some of my ti...
Read more

DotNetNuke SEO

Image
I've been reading quite a bit lately on improving SEO for our DotNetNuke website , IHBSOnline.com and quickly realized it just isn't enough to throw up a website, add a listing in a couple of search engines and wait for the masses. First off, the DnnFriendlyUrlProvider, while writing friendlier URL's than older versions of DNN, could be better. This is why you need the iFinity FriendlyURL provider. It is free, but keep in mind it is really designed for a single domain site, and presents other issues with some other 3rd party modules. If you fall into that category, I'd suggest you purchase the full version, as it adds additional functionality you'll need and want. Image by AFP/Getty Images via Daylife I've learned that Google and possibly other search engines actually penalize you if you create duplicate content. The duplicate content issue could easily arise if you have a host that responds to both http://mydomain.com and http://www.mydomain.com. Yo...
Read more

Traveling via Amtrak

Image
My wife, son and I recently took a trip to St Louis , to visit her Mom and Dad. We always have a good time, but don't look forward to the drive, as it takes 7 hours or so one way from 'lil old SE Wisconsin . Image via Wikipedia Thankfully, she looked into an older style of travel for our most recent trip to visit G'ma and G'pa; Amtrak . The cost is not much more than it is to drive. Fuel costs driving our mini-van is usually about $120, not to mention the fuel my son expends attempting to break out of his car seat ... The cost for our train ride was $188 with tax. Our son rode for 1/2 price since he is only 3. The trip took nearly the same amount of time, and we could ALL nap on the way down. We were able to bring a small cooler with lunch, play for a couple of hours in the dining car ( coloring books , puzzles, etc.) The only complaint I will lodge is customer service is a bit lacking. Our initial inquiries indicated we had the ability to check a bag, but foun...
Read more