D-Link Forums

D-Link IP Cameras for Home => DCS-933L => Topic started by: ShaMana on June 05, 2015, 07:17:26 AM

Title: Public Video from camera without log in needed !!
Post by: ShaMana on June 05, 2015, 07:17:26 AM
Hello,

Recently i've found out that if I enter my IP adress for my home network directly, it automatically transfers the browser to the camera control panel... This technically aint the issue. The problem is that the Live Video tab is available by default and on any PC supporting java I can watch my camera without the need for any log in and passwords... This is a huge problem which seems i can't find a solution. The camera doesn't have any settings to prevent that

Here is an image of the webpage that opens by default if i just etner my IP in a browser (for obvious reasons I didn't let the image completely)

http://postimg.org/image/n08ogmvvv/

Note that the logout option visible just refreshes the website, and also if i click on any of the tabs the log in popup will appear, though completely irrelivant at that point.

Any ideas how to stop this from happening?
Title: Re: Public Video from camera without log in needed !!
Post by: FurryNutz on June 05, 2015, 08:19:53 AM
What region are you located?

What FW version is currently loaded?
What browser are you using?
Try Opera or FF?

Do you have PW set ON the camera for the admin log in?
You should get a log in window when entering the cameras direct IP address. This should appear so you can log in using the Admin account and a PW. I know this as I looked at mine yesterday. The log in window should appear. The video seen is by design and will appear, after you use the log in window.
Title: Re: Public Video from camera without log in needed !!
Post by: RYAT3 on June 05, 2015, 08:34:30 AM
Assign a password in the f/w to an account and see what that does.
(Although this issue sounds familiar).
Title: Re: Public Video from camera without log in needed !!
Post by: ShaMana on June 05, 2015, 04:11:54 PM
I'm located in the EU region. I know the forum is the US
FW Version is 1.07.01 (2015-02-04)
I've tried Chrome, Firefox, Opera and IE on several locations
I have an mydlink account of course with a pass and a camera pass on the admin account (if I try to change a tab it asks for a log in)

The log in does not appear after entering the IP BUT only after actually trying to load a different tab
Title: Re: Public Video from camera without log in needed !!
Post by: ShaMana on June 06, 2015, 09:24:52 AM
So far nothing i try to do makes any difference. Changing password account or settings.
Title: Re: Public Video from camera without log in needed !!
Post by: FurryNutz on June 06, 2015, 10:16:26 AM
The log in page should be appearing. Does this happen on a different PC if you try one out?

If so, I recommend that you phone contact your regional D-Link support office and ask for help and information regarding this. We find that phone contact has better immediate results over using email.
Let us know how it goes please.
Title: Re: Public Video from camera without log in needed !!
Post by: ShaMana on June 06, 2015, 10:34:10 AM
Did try several different sources. Sane result. I'm currently trying to contact support. They don't have phone support for my region sadly.
Title: Re: Public Video from camera without log in needed !!
Post by: FurryNutz on June 06, 2015, 11:05:00 AM
What part of the EU region are you located?
Title: Re: Public Video from camera without log in needed !!
Post by: ShaMana on June 06, 2015, 01:44:29 PM
Eastern Europe (BG) in the part that not much **** is given about providing support it seems :)

What im gonna do is change the default 80 port and block it from my router but this doesn't help with a huge gaping hole that is considered secure for D-Link...
Title: Re: Public Video from camera without log in needed !!
Post by: FurryNutz on June 06, 2015, 02:48:22 PM
Lets try this:
http://www.dlink.com/bg/bg/contact-d-link (http://www.dlink.com/bg/bg/contact-d-link)
Title: Re: Public Video from camera without log in needed !!
Post by: ShaMana on June 06, 2015, 03:03:45 PM
Didn't find that. Thank you. I'll try it first thing monday
Title: Re: Public Video from camera without log in needed !!
Post by: Kakashi::. on June 06, 2015, 06:00:50 PM
So far nothing i try to do makes any difference. Changing password account or settings.

Did you by any chance disable the user account control... if you did, could you re-enable it and check again?

(https://dl.dropboxusercontent.com/u/4287800/FTP%20images/dcs-931L_server-settings.png)

sometimes users are confused by this setting, being "enabled" by default, it may give you the impression that this will enable other users to gain access... but is the opposite, this will request a username and password before presenting any GUI to the connection request.

Give it a try and let us know.. Thanks!
Title: Re: Public Video from camera without log in needed !!
Post by: ShaMana on June 10, 2015, 03:45:34 PM
That .... actually fixed it. I feel rather odd... (stupid) but that option is completely the opposite of what one would think of it
Title: Re: Public Video from camera without log in needed !!
Post by: Kakashi::. on June 11, 2015, 01:36:07 AM
That .... actually fixed it. I feel rather odd... (stupid) but that option is completely the opposite of what one would think of it

I'm glad everything is working now... perhaps if you see it just like the normal meaning of the option based on the standard UAC features of MS?  Enabling UAC in Windows is just like configuring security access?  not sure if this helps... but that's how I see it or can make sense of it.  A different label may make this easy to understand.  Any suggestions?
Title: Re: Public Video from camera without log in needed !!
Post by: RYAT3 on June 11, 2015, 04:58:42 AM
That .... actually fixed it. I feel rather odd... (stupid) but that option is completely the opposite of what one would think of it

I'm glad everything is working now... perhaps if you see it just like the normal meaning of the option based on the standard UAC features of MS?  Enabling UAC in Windows is just like configuring security access?  not sure if this helps... but that's how I see it or can make sense of it.  A different label may make this easy to understand.  Any suggestions?

I think it makes sense to me (in usa).
Is there anything off to the right in the quick help about use access control? Maybe explain the quickly that enabled=require passwords for all accounts.
Title: Re: Public Video from camera without log in needed !!
Post by: ShaMana on June 11, 2015, 07:40:35 AM
Firstly, thanks for the assist :) to solve my debacle

Considering that the camera has actual user accounts, maybe its not only naming but also functionality of the option it self that makes it a bit obscure.

As I don't really have much time to experiment with accounts and various situation, i'm gonna give a comment based on ... assumptions.

The help text for that option states "User Access Control - Enable this option to allow other users to access your camera." and bellow the server settings there is an actual user account creation. Seeing this, one would assume a connection with the UAC setting above. But here the question is what exactly the UAC option actually does.

If the UAC option also disables the User Accounts Created, then it doesnt make sense to allow unrestercted viewing to the camera, because you may like to disable all access except the admin, for a time without deleting all acounts. In such case there is a need for an additional option in addition of modification to this one to allow guest or not access

if it doesn't affect the user accounts and they can still be used (im not sure what rights those accounts have) than maybe something like:

Guest Viewing (if thats the only thing that it does) or something like that to tell you clearly that this will allow unrestricted access to the camera (not settings)

Logicaly the Windows UAC is not the first thing to come in mind. After all windows have seperate settings to allow or deny access to any accounts (guest or otherwise) before we even get to that. And the remote view is probably the most sensitive area of that device to be left in a grey area of word phrasing :)

---------------------------------------------------------------------------------------------------------------------------------------------------------------------

I've got another question, how to forbid the camera to use the upnp port forwarding and be accessible from the external IP adress? (without blocking it or making other actions to forbit it from the router to which is connected) I did notice port change settings and upnp controls but changing them doesn't have effect. The cam still broadcasts over port 80 after it goes through the router. My goal is to make it accessible only from the internal network to which is actually connected.