Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[ltwally]

We have a new DCS-5220 that we're playing with, seeing what we can do with it, and have a number of questions as well as one possible bug to report.  I was somewhat surprised when tier 3 support said this was the best place to cover them all - including the bug.

We are using firmware version 1.02, which is what the camera came with.

First, the bug:
In the webgui, under Configuration > Tools > System > "Turn off the LED indicator"  this is completely ignored by the camera.  The red power LED is always on, and the green status LED flashes as long as it has a network connection.  This is clearly a bug.

Next, our list of questions:

• What is the root password?
• Is there a URL we can pole for a static image?  (ie. http://camera_ip/static.jpg  which would trigger a snapshot every time the URL is requested)
• Are there any shell commands for motor control?  If so, what are they?
• Is there a shell command to retrieve logged in users?  If so, what is it?
• Is there a shell command for controlling the LED activity?  If so, what is it?

And, a feature request:
It would be really nice if the status LED lit green when there was someone logged on to the webgui.  Perhaps this is the intended activity, and it not doing so should be filed away as part of the above bug...

Thanks in advance for any assistance

[ltwally]

Anyone?

[ECF]

Please see this link:

http://www.support.dlink.com/faq/view.asp?prod_id=2906&question=camera+url

As for the LED bug you explain. I will get back to you on this as soon as I find my DCS-5220 and can test it out.

[ltwally]

I'm afraid that link answered none of my questions.


I did manage to find two shell commands presumably for LED control, named "ledctrl" and "ledswitch".  However, they require root.  Someone at DLINK has to know the root password. 

Thanks

[D-Link Multimedia]

I'm afraid that link answered none of my questions.


I did manage to find two shell commands presumably for LED control, named "ledctrl" and "ledswitch".  However, they require root.  Someone at DLINK has to know the root password. 

Thanks

We do not provide 'root' access to our cameras. That my friend would be a serious security flaw. No commands are available via console other than FTP.

[ltwally]

How exactly is a customer knowing the root password to a device that they purchased a security risk?

If I have to, I can run it through a brute-force cracker.  But it would be nice customer support were I not have to do so.

[ECF]

Well I tested the LED function and its working properly and I remember I used to use this camera and this function at home for some time and It always work now that I think about it.

[D-Link Multimedia]

How exactly is a customer knowing the root password to a device that they purchased a security risk?

If I have to, I can run it through a brute-force cracker.  But it would be nice customer support were I not have to do so.

Do you work with Linux often? Do you normally give out root account? Now lets say that root account was to span across 1000's of computers and those computers are remotely accessible.

We do not support that type of functionality. If you want more out of your camera you can contact our US HQ with your company information and we can provide you with the SDK that goes with this camera.

[ltwally]

Do you work with Linux often? Do you normally give out root account? Now lets say that root account was to span across 1000's of computers and those computers are remotely accessible.

When we sell a client a linux server, workstation or device:  absolutely.  It's their device, and they have every right to know the passwords to it.  If they proceed to use that knowledge to nuke the device:  fine... they can pay us to fix it. 

As an additional thought, I might add that perhaps instead of worrying about keeping root's password top-secret, it might be more secure to simply lock down telnet & ftp by default.  That way, it doesn't really matter who knows the default root password.

We do not support that type of functionality. If you want more out of your camera you can contact our US HQ with your company information and we can provide you with the SDK that goes with this camera.

That might be something we'll investigate in the future.  But it is unfortunate that DLINK makes a person jump through that many hoops just to gain full access to something we paid for.

[ltwally]

Well I tested the LED function and its working properly and I remember I used to use this camera and this function at home for some time and It always work now that I think about it.

Interesting.  After I first noticed the problem, I hit the "reset to factory" button.  (It didn't help.)

I suppose I can reflash the device and see if that heals it.  Otherwise, I suppose there's always RMA.

[lostgweilo]

Hello!
Just sharing my findings here... it may help someone looking for information.
I am not sure how you hope to use the commands to turn the led on or off... since I was not able to run a shell on a device.
I tried ssh and telnet and nothing worked.
However FTP works.
And here is the amusing part: you can cd /etc and then GET passwd
you can also get /etc/group
and you can also PUT them back! (if you are logged in as admin at least)
So I guess that should solve your root password problem because you should be able to reset the password to null or just copy paste the encrypted password field for a user you created and you know the clear text for.
I noticed that after adding a few users and trying to grant them camera control rights, the /etc/group file got kind of corrupted and nobody was able to control the camera anymore.
(I suspect the thing was designed years ago and never tested with anything else but versions 1 of Internet Explorer and version 0.9 of Firefox, so it gets confused when adding users with recent browsers? Not sure)
In any case you can:
1. download the file (e.g. get /etc/passwd or get /etc/group)
2. edit it locally using your favorite editor. (that means EMACS)
3. put the file back using the cd /etc then put passwd  or put group  commands.

BTW I agree with you I find it amazing that people think they have to keep the root password secret from the owner, what a joke.

[Xetra]

That worked on mine :
To get root on dlink  5220 :

putty with your user password
vi /etc/passwd
and delete the root password (remove xxxxx from  root:xxxxxxx:0:0)
save

putty as root
passwd to set a new password

I was able to reboot the camera during my holydays (web server KO)
I will check if possible to customize the default web page (for iphone)