- √ - HS and camera Cisco CIVS-IPC-2500

[Warichet]

it slows down the HS noticeable

Didn't think about that aspect.

Thank you for your comments

[Warichet]

if the HomeServer's Visu is accessing the page, which user is that ?

I guess it's not a user accessing the cam, but a process inside the HS ?
I've defined the cam without "Passwortschutz", but also tried with a username & password which I've defined the same way in the cam.
No go.

Any hint ?

[makki]

No, it's not a user it's a process or a thread within one. Still many (slow) Cams make this thing in whole not faster..
You can imagine this like a caching proxy for the cam-images without "Kamera direktzugriff" and as the cam as well as the client might have more free resources I'd avoid it when possible

Makki

[Warichet]

You can imagine this like a caching proxy for the cam-images without "Kamera direktzugriff" and as the cam as well as the client might have more free resources I'd avoid it when possible

I've seen the checkbox "Kamera direktzugriff" in the user properties, I understand the word, but not the implications (the help doesn't say much).
So far, with all my tests, this box was checked. Without knowing the implications, I've no clue if it's right or wrong.
I've made a test with "Kamera direktzugriff" unchecked, then it doesn't work anymore (no picture in the Visu). What is the usage of the checkbox ? ie in which case is it unchecked ?
For me, "Kamera direktzugriff" is something like:
http://x.0.1.xx/img/video.mjpeg. But that's something to use within the browser for test purposes, don't see the link with the HS, unless the HS is building the same URL.

Also, I think I've been caught (again)
In a previous post, I've said that http://x.0.1.xx/img/video.mjpeg was working fine. That's correct, but .... it implies a previous login into the camera, hence the password is cached.
When trying from the Visu, or an untouched PC or clearing the cache, it doesn't work anymore, instead the cam displays a pop-up asking for username & password.
This brings my question again: the Visu is running in which context ?
If I know that, I can create a new user in the HS which is the same as the cam admin.

Also, I've tried cheating in the "Kamera" menu, with the "IP-Adresse der Kamera" with something like <username>:<password>@<IP address> no luck, the HS doesn't like it.

I'm stuck, so close to the goal

[makki]

Ok, "Kamera-Direktzugriff" means:
a) the Visu-Client - no matter if HS-Client or HSAV - gets the Image via HTTP directly from the cam. The HS is only involved in sending the HTML with <IMG/HREF to the Visu-Client.
b) opposite (not checked) the HS pulls the image into RAM and sends it to the HS/Client via HTTP

In both cases, if the cam doesn't do Standard HTTP-Authentication it will lead to trouble.

Case b) might help out if the client doesn't have direct IP-Access to the cam
(i.e. forwarded Ports from the Inet to HS, insane, I suggest a VPN always..)

If the cam doesn't support HTTP Basic-auth clean, neither a) nor b) will really help, a look on Wireshark is always helpful there (I really don't know these Cisco-Cams at all but I know enough Cisco-datasheets to be sure to know: reading them without seeing in Wireshark what the device really does, is useless anyway )

Makki

[Warichet]

Ok, "Kamera-Direktzugriff" means:
a) the Visu-Client - no matter if HS-Client or HSAV - gets the Image via HTTP directly from the cam. The HS is only involved in sending the HTML with <IMG/HREF to the Visu-Client.
b) opposite (not checked) the HS pulls the image into RAM and sends it to the HS/Client via HTTP

Understood ! thank you.

If the cam doesn't support HTTP Basic-auth clean, neither a) nor b) will really help

There is still another option:
http://user : password@<ip>/img/video.mjpeg although very questionable about security (not the topic) this is supposed to be a standard method. Shouldn't it be supported in the HS ? Any chance to get my message to DaCom ?
Also, in the menu "Kameras", there are options about "Passwortschutz, Benutzername, Passwort"
I've tried several variations, included the username & password of the cam admin. No luck !

a look on Wireshark is always helpful there

As a last resort, yes (sniffing on a switch is not easy, I've to setup a hub etc). But even fully understanding the process doesn't guarantee to bring a solution. I fear the worst.

I know enough Cisco-datasheets to be sure to know: reading them without seeing in Wireshark what the device really does, is useless anyway )

ûûh !

[makki]

[QUOTE=Warichet;161595]
http://user : password@<ip>/img/video.mjpeg
Thats the same when you type in User/Pass in HS, this is HTTP Basic-Auth

although very questionable about security (not the topic)

Depends, this is Standard. Over HTTPS it's pretty safe, over HTTP it's crap but still standard

Sniffing: a good switch can do that (but sometimes maybe I'm too dumb, so I won't comment that further )

Makki

[Warichet]

a look on Wireshark is always helpful there (I really don't know these Cisco-Cams at all but I know enough Cisco-datasheets to be sure to know: reading them without seeing in Wireshark what the device really does, is useless anyway

I finally managed to setup Wireshark on the switch and ... surprise
what I'm seeing is not what I expected.
I thought the HS would authenticate with the cam and all subsequent requests would be honored.
Well,no, quite logically what I'm seeing is that the Visu is making the request, (not the HS) hence the pop-up for authentication is for the Visu (Linux & FF)
I guess those Username & Password fields in the Kamera setup are not used in my case (maybe only for the HS Client).
So, I thought it would be enough to create an account in the cam, the same as the local PC user: no go

[makki]

As I said: it depends!
Kamera-Direktzugriff means only the cleint talks to the Cam and vice-versa.
If the cam does HTTP Basic-Auth it's simple and straightforward. If not, now I call this "propretäre grütze"

Makki

[Warichet]

Hi,
In a desperate move to solve my password problem, I've re-read all your posts.
I think I got the idea.
So, I've un-checked the "Kamera-Direktzugriff". If I got you right, the HS will do the authentication (basic authentication), based on "Benutzername" and "Passwort" as entered in the camera menu.
Re-boot, click on the camera, image is empty (no error message).
NB: I didn't change anything else, so the image path is still the same.

I sniffed again, the cam port, I see the request for image with the correct path and the words Authentication Basic. Later a connection close. But no authentication data. Also, I see plenty of "continuation or non-http traffic", it is as if the image transfer takes place, but no track of it.

The question: is this thing supposed to work ?
I mean, is there anyone having it running with un-checked "Kamera-Direktzugriff" ?

Yet another dumb question, the "Kamera-Direktzugriff" is a user property (not a cam property), so when accessing the cam over a browser, which user is that ? guest ?
I've unchecked the box for guest: no go

Any hint ?

[makki]

The question: is this thing supposed to work ?

Probably not.. Either the Cam does HTTP Basic-Auth then both works or not - than only entering it afterwards with Direktzugriff in the Browser works.

Checking this tick only makes sense if one want to to wild things like forwarding the HS-Webif unprotected into the Inet without being able to directly access the cam, it won't help to make strange authentication-schemes of a cam better

Makki

[Warichet]

Hi,

Yet another idea, probably the last

I though XXHTTP could do the trick, that is: an icon in the Visu points to an "external" web site: the camera, but then again arises the pop-up about username & password, but at least here I've a chance to supply basic authentication.

Don't know how to deal with that, but asked here.
I first tried with username & password in the URL, no go

Any hint ?

[makki]

Again: if http://USER:PASSWORD@cam-ip works it's HTTP-basic auth according to the the RFC's, otherwise you can forget about it (at least in simple, this way)
And if yes this would work both ways so it isn't.
Tipp: turn off Flash, Java, Silverlight and all this other crap, if the popup still comes your chances rise that it's simple but Sony isn't really famous for being simple & standard

Makki

[Warichet]

Tipp: turn off Flash, Java, Silverlight and all this other crap, if the popup still comes your chances rise that it's simple

The Visu is running Ubuntu 9.10 and FF, nothing else, so I guess I'm already at the bottom line.

Thank you for the hint

[makki]

The Visu is running Ubuntu 9.10 and FF

..where Flash and Java ist default on and runs fine
-> wireshark, capture what happens, how User/PW gets to the cam..

Makki