Using ownCloud on NAS4Free + Active Directory Authentication

[daoyama]

NAS4Free 9.1.0.1.424 and later includes extra PHP modules.
So you can use ownCloud on embedded without installing packages.

1. create the directory on your data disk. (e.g. /mnt/data)
2. fetch and extract ownCloud source. (e.g. owncloud-4.5.3.tar.bz2)
3. change permission to www.
4. create upload directory if you need.
5. setup Web Server from NAS4Free WebGUI.

In my case, I use /mnt/ufs-data for the area.

Code: Select all

# cd /mnt/ufs-data
# fetch http://mirrors.owncloud.org/releases/owncloud-4.5.3.tar.bz2
# mkdir owncloud
# cd owncloud
# tar zxvf /mnt/ufs-data/owncloud-4.5.1.tar.bz2
# cd ..
# chown -R www:www owncloud
# mkdir upload
# chown -R www:www upload

After this step, you can see like this:

Code: Select all

nas4free:/mnt/ufs-data/owncloud# ls -al
drwxr-xr-x   5 www   www     512 Nov  3 10:35 owncloud
drwxr-xr-x   2 www   www     512 Nov  3 12:26 upload

After setup webserver, try to access "http://YOUR IP ADDRESS:PORT/owncloud/".
In my case, http://172.18.0.154:8080/owncloud/ is URL.

Setup Webserver:
To prevent unwanted access to your data directly, you may need deny rule like this:

Code: Select all

$HTTP["url"] =~ "^/owncloud/data/" {
     url.access-deny = ("")
}
$HTTP["url"] =~ "^/owncloud($|/)" {
     dir-listing.activate = "disable"
}

webserver01a.png

If you want to use AD users, follow next setting. Otherwise, you don't need.

Enable LDAP user and group backend:

owncloud00.png

Fill in your AD information:

Example filter for all enabled user:

Code: Select all

User Login Filter:
(&(sAMAccountName=%uid)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.804:=2)))
User List Filter:
(&(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.804:=2)))
Group Filter:
(objectClass=group)

Example filter for all enabled user (except Administrator):

Code: Select all

User Login Filter:
(&(sAMAccountName=%uid)(objectClass=person)(!(sAMAccountName=Administrator))(!(userAccountControl:1.2.840.113556.1.4.804:=2)))
User List Filter:
(&(objectClass=person)(!(sAMAccountName=Administrator))(!(userAccountControl:1.2.840.113556.1.4.804:=2)))
Group Filter:
(objectClass=group)

owncloud01a.png

owncloud02a.png

Work with AD?:

owncloud03.png

Known problem:
Wen first login as AD user, you fail to login by an error.
Workaround is reload the page or re-login. You can login next time without any problems.


This is my test VM's some info:

Code: Select all

nas4free:~# df -h
Filesystem                     Size    Used   Avail Capacity  Mounted on
/dev/md0                       198M    193M    4.9M    98%    /
devfs                          1.0k    1.0k      0B   100%    /dev
procfs                         4.0k    4.0k      0B   100%    /proc
/dev/ufsid/503f8c35b2f1ffdc    7.7G    2.2G      5G    31%    /mnt/ufs-data
/dev/ufsid/5072ddcc21b6345c    5.9G    8.0k    5.4G     0%    /mnt/fn8
vol1                            17G     44k     17G     0%    /vol1
vol1/test                       17G     43k     17G     0%    /vol1/test
/dev/md1                        61M    1.4M     58M     2%    /var
/dev/da0s1a                    110M     91M     18M    83%    /cf
nas4free:~# zpool status
  pool: vol1
 state: ONLINE
  scan: none requested
config:

        NAME                                            STATE     READ WRITE CKSUM
        vol1                                            ONLINE       0     0     0
          raidz1-0                                      ONLINE       0     0     0
            gptid/6da10042-1150-11e2-8703-000c2968a3d9  ONLINE       0     0     0
            gptid/6dfbbfe8-1150-11e2-8703-000c2968a3d9  ONLINE       0     0     0
            gptid/6e7a6a67-1150-11e2-8703-000c2968a3d9  ONLINE       0     0     0
            gptid/6ece415b-1150-11e2-8703-000c2968a3d9  ONLINE       0     0     0

errors: No known data errors
nas4free:~# camcontrol devlist
<NECVMWar VMware IDE CDR10 1.00>   at scbus1 target 0 lun 0 (pass0,cd0)
<VMware Virtual disk 1.0>          at scbus2 target 0 lun 0 (pass1,da0)
<VMware Virtual disk 1.0>          at scbus2 target 1 lun 0 (pass2,da1)
<VMware Virtual disk 1.0>          at scbus2 target 2 lun 0 (pass3,da2)
<VMware Virtual disk 1.0>          at scbus2 target 3 lun 0 (pass4,da3)
<VMware Virtual disk 1.0>          at scbus2 target 4 lun 0 (pass5,da4)
<VMware Virtual disk 1.0>          at scbus2 target 5 lun 0 (pass6,da5)
<VMware Virtual disk 1.0>          at scbus2 target 6 lun 0 (pass7,da6)
<VMware Virtual disk 1.0>          at scbus2 target 8 lun 0 (pass8,da7)
<VMware Virtual disk 1.0>          at scbus2 target 15 lun 0 (pass9,da8)
<FreeBSD iSCSI DISK 0001>          at scbus4 target 0 lun 0 (da9,pass10)
nas4free:~#

VMN4F01.png

Try it yourself.
Daisuke Aoyama

[pierouelle]

Got it going but i had this error in putty # chown -R www:www owncloud, it says operation not mermitted, i simply copy and shft enter in putty that line chown -R www:www owncloud, but i got it going by give rights via file manager, i am learning thanks sir Dayoyama, will continue to dig in

[daoyama]

Hi,

Got it going but i had this error in putty # chown -R www:www owncloud, it says operation not mermitted, i simply copy and shft enter in putty that line chown -R www:www owncloud, but i got it going by give rights via file manager, i am learning thanks sir Dayoyama, will continue to dig in

Did you run it as root?
Easy way is using console setup 6) Shell.

Diasuke Aoyama

[pierouelle]

Did you run it as root?
Easy way is using console setup 6) Shell.

Diasuke Aoyama

It was my mistake cause i did a session with putty as a user
So I did run it as root in putty and evrything is fine, thank you very much sir.

[yozh]

Hope you can help.

I set this up and the initial setup comes up. I make a username and password and then it goes to login screen, I put that same username I just made and it keeps going back to the login screen.... What am I doing wrong ? I do have authentication on, on the webserver.

[guljo]

Hi to All,

I have installed owncloud version 4.5.4 but I have problem with 'max upload size' which default size is 161 MB.DO YOU HAVE ANY SUGGESTION HOW TO CHANGE THIS?
Thanks

[pierouelle]

If it is for max upload file in Owncloud you are talking about, you should try owncloud forum, it has nothing to do with N4F.

[guljo]

thanks for the suggestion, but you think that I did not already check? NO info on owncloud forum, since I installed the owncloud over nas4free I think that there is same settings on the webserver part If any one have info please share it.

thanks for the help

[fizzgig656]

Hope you can help.

I set this up and the initial setup comes up. I make a username and password and then it goes to login screen, I put that same username I just made and it keeps going back to the login screen.... What am I doing wrong ? I do have authentication on, on the webserver.

having same issues, dunno why!

[darrcauk]

Hi daoyama,

My NAS Details:
Version 9.1.0.1 - Sandstorm (revision 573), Platform OS FreeBSD 9.1-RELEASE (reldate 901000),
Platform x64-embedded on AMD Athlon(tm) 64 Processor 3500+, System WinFast 6150M2MA Bios: 686W1D28 03/17/2008; CPU frequency 2.2GHz, Memory 4GB

My setup are as follows: ZFS with various Data Sets, for my web server i have wwwroot on the data drive (/mnt/raid1/wwwroot)

wwwroot is my main directory where i have extracted the owncloud files (therefore no owncloud directory under wwwroot)

Here is what I did:
1. cd /mnt/raid1/wwwroot
2. fetch http://mirrors.owncloud.org/releases/ow ... .3.tar.bz2
3. tar zxvf /mnt/raid1/wwwroot/owncloud-4.5.3.tar.bz2
4. chown -R www:www /mnt/raid1/wwwroot
5. chown -R www:www /mnt/raid1/wwwroot/upload

From my understanding at this point i should be able to load the web page ? I have tested the web server before i tries setting up owncloud with just an index.html and it works fine.)

The error on the page when i connect to owncloud:

Warning: require_once(/mnt/raid1/www/owncloud/lib/base.php): failed to open stream: No such file or directory in /mnt/raid1/wwwroot/index.php on line 26 Fatal error: require_once(): Failed opening required '/mnt/raid1/www/owncloud/lib/base.php' (include_path='.:/etc/inc:/usr/local/www') in /mnt/raid1/wwwroot/index.php on line 26

Any ideas what is wrong?

Thanks
D

[raulfg3]

only two point, latest release is 4.5.5 : http://owncloud.org/releases/
and second chown is not necesary, because is a child of first and you do a -R (Recursive).

Please post a jpg of how you configure your Webserver GUI

[darrcauk]

Hi Raulfg3

I have re-tried it from scratch, it was version 4.5.5, sorry, copied and pasted it from the forum without changing the version number.

It has all of a sudden come to life but now i have a different problem. See attached jpg, this happens in IE and firefox.

Regards

DC

[raulfg3]

this is a normal behaviour that happen first time, you need to wait until owncloud index all the content, next time you can load normally.

[darrcauk]

24 hours later and still the same page.

What exactly is it supposed to index as i have not given it any locations to look for files ?

DC

[raulfg3]

is supossed that index all your avi, jpg etc.. that you have share in owncloud, and can not use 24h, mine only 2 hours to index 33.000 files or so.

Perhaps is other problem, but I do not know what problem is it.

Try to provide some logs ( from N4F and from owncloud) perhaps some important info is write here.

[darrcauk]

Hi Raulfg3

That's the thing, I have just created my login and when it went through to the next page, that was what i saw. Every time i log in i get the same thing. I have not had a proper page where i could share anything from yet.

All that i can think is that somewhere there must be a permissions problem or somehow not all the required files (that usually get installed by the additional packages) are included or working properly.

I have removed it for the time being due to being fed up with struggling, I'll try it again sometime when i have the time.

Thanks
DC

[darrcauk]

Hi daoyama, Raulfs3,

Great news, i got it working, using the lastest 4.5.6 version and created the owncloud folders under wwwroot instead of just extracting everything to wwwroot.

My next question would be then where do i put this in to secure my data directory ?

$HTTP["url"] =~ "^/owncloud/data/" {
url.access-deny = ("")
}
$HTTP["url"] =~ "^/owncloud($|/)" {
dir-listing.activate = "disable"
}

Regards
DC

[darrcauk]

Ignore that

1d10t error, didn't notice i can scroll that image

Thanks guys

[GTvert90]

This may be stupid but where do I start entering these commands? Under advanced command under the n4f web gui?

[raulfg3]

in Services|Webserver Auxiliary Parameters window

[calicci]

Hi to All,

I have installed owncloud version 4.5.4 but I have problem with 'max upload size' which default size is 161 MB.DO YOU HAVE ANY SUGGESTION HOW TO CHANGE THIS?
Thanks

I came across the following mention of configuring the maximum upload size.

I enlarged the part you might be interested in below. I actually think this will be of interest to anyone installing this software.

Follow the link to arrive at the relevant page of ownCloud's documentation. Good luck!

http://doc.owncloud.org/server/5.0/admi ... ermissions

Enable .htaccess and mod_rewrite if Running Apache¶

If you are running the apache webserver, it is recommended that you enable .htaccess files as ownCloud uses them to enhance security and allows you to use webfinger. To enable .htaccess files you need to ensure that AllowOverride is set to All in the Directory /var/www/ section of your virtual host file. This is usually in /etc/apache2/sites-enabled/000-default. You should also run a2enmod rewrite and a2enmod headers. Then restart apache: service apache2 restart (for Ubuntu systems). In order for the maximum upload size to be configurable, the .htaccess file in the ownCloud folder needs to be made writable by the server.

[calicci]

Alcon,
I have successfully installed the 5.0 version of ownCloud today but with some difficulty.
I should preface this by saying that I did my install using SSH via terminal from MacOSX.

I suffered from the inability to

Code: Select all

su chown

on the folders outlined by Daoyama in his fantastic install guide at the top of this post.
I went far and wide looking for a resolution to this problem.

Ultimately after beating my head against the wall and really coming up with no solution to my inability to access root privileges through my SSH session (despite being a member of the "wheel" group) it finally occurred to me to input the chown commands I needed using the "Advanced | Execute Command" feature in the webgui.

This turned out to be my saving grace. I verified the change of ownership by refreshing the view in my SSH session and sure enough it worked!

I didn't see any mention of others suffering from this type of hangup in this thread but hopefully, if anyone else encounters it in the future they can learn from my efforts and take advantage of this great feature in the webgui.

Additionally, if anyone knows why I couldn't execute root level permission in my SSH session I am all ears (or eyes since I'll likely be reading your response).

Happy Cloud!

"SOLVED"
Regarding my inability to access root level privileges, it turned out that I had forgotten my root password.

I was under the assumption that because I had no problems accessing the webgui with a particular password that I should be able to escalate privileges with the same password.

Apparently I had changed it along the way, don't ask me how since when you first set up NAS4Free the password you pick as your webgui password is your root password as well.

Needless to say, I ended up going through the password reset procedure to solve my little problem and it worked fine.

The only hangup was that my NAS4Free box is headless, lives in a closet and weighs 75lbs so I had to shut it down, extract it from it's hiding place and hook it up to a monitor/the tv and do my business.

After that though, the password reset was surprisingly simple. Way to go developers! Kudos on that!

[calicci]

Alcon,
I'm having a heck of a time getting the bugs out of this thing. I have overcome a few obstacles along the way so far as documented in my above couple of posts but now I have a new one.

"Security Warning

Your data directory and files are probably accessible from the internet because the .htaccess file does not work.
For information how to properly configure your server, please see the documentation."

Before even creating an admin account on my install of ownCloud I am being presented with the above warning. I followed the link to their documentation page and the information it references is regarding Apache web server so I wouldn't assume that will be of any use to me as NAS4Free utilizes the Lighttpd web server. Maybe some of the functionality is similar but I certainly don't know enough to begin to figure that out so I'm back and posting in hopes that someone else has seen this error and discovered a resolution for it.

Thanks for any help you may be able to provide.
Happy Cloud!

"EDIT"
So it turns out that this issue is covered by the two "security" recommendations listed above which prevent unauthorized access to your db once configured. You cannot skip that step. I did initially because of the variables in the code snippets but now I will have to figure it out and move forward. I'll let you know!

[calicci]

@Aoyama,

"SOLVED"
Regarding the following:

Setup Webserver:
To prevent unwanted access to your data directly, you may need deny rule like this:

Despite the fact that Raul successfully guided another user to the proper location to enter this data much further down the thread, I respectfully recommend amending the instruction to include "Copy and paste the following code into the Auxiliary Parameters Dialog Box" so knuckleheads like me won't spend so much time agonizing over such things.

But then maybe that's part of the fun!

I also respectfully recommend you change the wording "you may need" to "you do/must/should/can't avoid" having a deny rule, because owncloud is not secure until you do this.

Whether it is truly secure after that or not is another discussion but it does satisfy ownclouds internal security cops enough to stop showing the red warnings and that is part of a successful installation.

I know this forum is largely a self help community driven answer board and you guys are busy moderating many things but I think that the popularity of this feature warrants that small edit for clarity.

Thanks for everything you guys do!

[quattroman]

Edit:

Removed original comment as I was probably wrong.

Just was wondering how secure OwnCloud is. I can put a webcrawler and ripper to my OwnCloud site and I get only 1 directory and index.html file returned as visible. But if put the full URL path into my web browser, for example http://www. the image (or whatever file) will be displayed. Is OwnCloud secure on Nas4free?

[raulfg3]

Yes If You install ownclod using fsbruva script to install inside a jail: viewtopic.php?f=79&t=1565

[françois ROLAND]

Maybe a stupid question ...

Is it possible to install owncloud on system hard disk

Why ?

I have several hard disk on my NAS (mnt:data1, mnt/data2, mnt/data3, ...)

my wish : get an acces to all hard disk. So, I wonld not get a path like mnt/datax/owncloud/.. but something like owncloud/mnt/...

Possible?
Many thanks for your help

[raulfg3]

Try this: viewtopic.php?f=79&t=1565

And use fstab in thebrig edit jail to mount /mnt/yourdisk inside the jail

[kokni]

Hello all,

I have a nas4free 9.1.0.1 + owncloud v6a nicely working but with frequent database lockups. This is a known sqlite problem which doesn't handle well many users. For the time being I have lighttpd restarting every 12/24hrs as a partial workaround to unlock the db but I was wondering:

is there an easy way to install mysql/mariadb in nas4free?

I haven't been able to find something related in the forum unless I opt for a jail installation - which I'd rather not. Any suggestions?