Recent content by patters

  1. patters

    Dahua and ONVIF authentication

    I have one camera because I chose to get a single PTZ rather than several fixed cameras. I can therefore do without an NVR or a software NVR on a computer. I had tried this before with a loan camera and found it slowed my NAS down quite a lot so the SD card is a great solution. If someone breaks...
  2. patters

    Dahua and ONVIF authentication

    Well we agree on that much. Sadly the IP CENTCOM app makes you have one H.264 and one MJPEG stream otherwise it doesn't work properly.
  3. patters

    Dahua and ONVIF authentication

    I'm getting a bit tired of your abrasive attitude. Where in my posts did I mention the resolution of the MJPEG substream? Clue: it's not HD.
  4. patters

    Dahua and ONVIF authentication

    I want to archive my motion triggered footage to the SD card at 1080p, because detail could be important. The main stream is the only one that can encode at 1080p so I have to use the main stream for this purpose, regardless of my mobile viewing preferences. That's why these apps are so limited...
  5. patters

    Dahua and ONVIF authentication

    Just tested out DMSS and wDMSS Lite apps for Windows 10 Mobile. Neither will even show the primary video stream (1080p). They don't offer the substreams which is disappointing. Looks like wDMSS Plus has even been pulled from the store.
  6. patters

    Dahua and ONVIF authentication

    There are two official apps with DMSS in the name. They were released back in the Windows Phone 8 days. On Windows 10 Mobile, one app does not work at all, the other (might be the one you suggest) works but it loses its entire config each time it restarts so you have to configure the camera each...
  7. patters

    Dahua and ONVIF authentication

    Also that RTSP stream auth requirement changes (well, breaks really) when I enable ONVIF auth, so there is a linkage somewhere along the way. Anyhow, thanks for your tests - what we have been able to establish it seems is that my particular firmware release is borked for ONVIF auth, and is...
  8. patters

    Dahua and ONVIF authentication

    I know ONVIF is essentially the HTTP web service, but your statement that it has nothing whatsoever to do with RTSP is somewhat misleading - because as I stated in my first post, my camera wants the ONVIF credentials to view the RTSP stream. It will not work with WebUI credentials, which is why...
  9. patters

    Dahua and ONVIF authentication

    Hi nayr, I ended up staying up very late on the night I was responding to this, and ended up having to stop my testing to get some sleep. Just to be absolutely clear that my camera firmware is the issue, please can you confirm that we understand the same thing by ONVIF authentication enabled...
  10. patters

    Dahua and ONVIF authentication

    And that's with ONVIF auth enabled? If so, can you try connecting to the RTSP stream using valid ONVIF credentials using VLC using this URL: rtsp://onvifadmin:onvifpass@192.168.1.108/cam/realmonitor?channel=1&subtype=0&unicast=true&proto=Onvif Does that work? It's possible that I'm seeing...
  11. patters

    Dahua and ONVIF authentication

    Interesting information from the ONVIF 2.4.1 specification Security section (5.12): So based on the first paragraph the initial contact with the device should be allowed on the HTTPS port for true ONVIF compliance. That would clear the way for subsequent RTSP auth to use the one-time password...
  12. patters

    Dahua and ONVIF authentication

    The SSH port tunnelling is the hardest security option, since my SSH host has two factor auth. Agreed, despite HTTPS protecting the WebUI, Dahua has got quite a track record for leaving backdoor accounts in their systems. Plus they'll be using outdated versions of Linux crypto libs. I'm...
  13. patters

    Dahua and ONVIF authentication

    Did you ever experiment with that ONVIF library with the camera's ONVIF authentication enabled? If you read the stackoverflow link in my first post it mentions that the password digest has a time component to it (which it syncs from the camera's time source) so it's not reusable. The device's...
  14. patters

    Dahua and ONVIF authentication

    Moving the PTZ with an HTTPS request isn't so bad. I get prompted for credentials once, but I can then move the PTZ without credentials prompts for the remainder of that session. The RTSP is still the weak link (credentials on URL string). I have an SSH host with two factor auth which I use for...
  15. patters

    Dahua and ONVIF authentication

    My interest is in a viable secure mobile solution for my phone - a Lumia 950 running Windows 10 Mobile - while I'm away from home. The various PSS apps for Windows Phone 8.x all broke with the transition to Windows 10.
Top