HikVision HWD-7108MH-G2 - cant enable SSH?

[sp0ok3r]

When trying to enable SSH by web control, it shows a error: "Device is busy" (NET_DVR_BUSY 24).

Opinions?

 

[StewartM]

What happens if you reboot the DVR, same message?

 

[StewartM]

If you don't come right, you can use RClient or cURL to enable it. Let me know if you need help doing so.

 

[sp0ok3r]

I checked this: enable ssh curl
But when I try to send the curl command: curl -T telnet_on.xml http://xx:xxxxx@xxxxx:80/ISAPI/System/Network/telnetd
It shows this error: curl: (3) URL using bad/illegal format or missing URL or if I try to put '' in the link curl: (6) Could not resolve host: 'http

 

[StewartM]

Try this:
curl -T ssh_on.xml http://admin:xxxxxx@192.168.1.xx:80/ISAPI/System/Network/ssh
Body of ssh_on.xml file:
<?xml version="1.0" encoding="UTF-8"?>
<SSH version="2.0" xmlns="http://www.isapi.org/ver20/XMLSchema">
<enabled>true</enabled>
</SSH>

I've had some headaches with curl before. If you don't come right, load the Restlet Client for Chrome and I'll give you the commands.

 

[sp0ok3r]

same error again: curl: (3) URL using bad/illegal format or missing URL

 

[StewartM]

Amend the following and run the URL in Chrome.

http://admin:xxxxx@192.168.1.xx/ISAPI/System/Network/ssh

Let me know what is returned. You should get something like this:
<SSHversion="1.0"xmlns="http://www.hikvision.com/ver20/XMLSchema">
<enabled>false</enabled>
</SSH>

 

[sp0ok3r]

yes, it returned the same.

 

[StewartM]

Load the Restlet Client for Chrome I linked to above.
Skip the sign in when prompted.
Method must be PUT
URL: http://admin:xxxx@192.168.1.xx/ISAPI/System/Network/ssh
Body:
<SSH version="2.0" xmlns="http://www.isapi.org/ver20/XMLSchema">
<enabled>true</enabled>
</SSH>

 

[sp0ok3r]

Returned:

<ResponseStatusversion="1.0"xmlns="urnsialliance-org">
<requestURL>/ISAPI/System/Network/ssh</requestURL>
<statusCode>2</statusCode>
<statusString>Device Busy</statusString>
<subStatusCode>deviceBusy</subStatusCode>
</ResponseStatus>

what now?

 

[StewartM]

Good question...
Sometimes the setting will stick but needs a reboot.
Firmware up-to-date?
Check under Integration Protocol, do you have a admin level account?

 

[sp0ok3r]

restarted ✓
up-to-date ✓
admin level ✓

 

[sp0ok3r]

Now given this error

<userCheck>
<script />
<statusValue>401</statusValue>
<statusString>Unauthorized</statusString>
</userCheck>

didn't change anything

???

 

[StewartM]

Strange. The 401 error might be related to the previous session and it expiring on reboot. The only other way I can think of is trying via the Hikvision SDK. You could download the SDK and compile the Remote Configuration project in Visual Studio (a chore if you don't have VS installed) or I could compile the project and post the application. Still no guarantee it will work...

 

[sp0ok3r]

same error:

 

[StewartM]

Please post the results of:

http://192.168.1.xx/ISAPI/System/Network/capabilities

 

[sp0ok3r]

<NetworkCap xmlns="http://www.hikvision.com/ver20/XMLSchema" version="1.0">
<script />
<isSupportWireless>false</isSupportWireless>
<isSupportWAN>false</isSupportWAN>
<isSupportPPPoE>true</isSupportPPPoE>
<isSupportBond>false</isSupportBond>
<isSupport802_1x>false</isSupport802_1x>
<isSupportNtp>true</isSupportNtp>
<isSupportFtp>false</isSupportFtp>
<isSupportUpnp>true</isSupportUpnp>
<isSupportPNP>false</isSupportPNP>
<isSupportDdns>true</isSupportDdns>
<isSupportHttps>true</isSupportHttps>
<SnmpCap><isSupport>false</isSupport>
</SnmpCap><isSupportExtNetCfg>true</isSupportExtNetCfg>
<isSupportNetPreviewStrategy>true</isSupportNetPreviewStrategy>
<isSupportEZVIZ>true</isSupportEZVIZ>
<GB28181Cap>
<isSupportGB28181Service>false</isSupportGB28181Service>
</GB28181Cap>
<VerificationCodeModification>
<verificationCodeType opt="normal,empty">normal</verificationCodeType><isSupportDeclarationURL>true</isSupportDeclarationURL>
<isSupportPrivacyPolicyURL>true</isSupportPrivacyPolicyURL>
<verificationCodeModify>true</verificationCodeModify>
<Hyperlinks>
<isSupportVerificationCodeCheck>true</isSupportVerificationCodeCheck>
</VerificationCodeModification>
<isSupportIntegrate>true</isSupportIntegrate>
<isSupportGenetec>true</isSupportGenetec>
</NetworkCap>

 

[StewartM]

Back to curl...
Check you have WEB Authentication set to digest/basic. Then run the command again.

Any difference?

 

[sp0ok3r]

I already have that enabled before all this.

 

[StewartM]

Long shot, check you don't have IP filtering enabled.
/ISAPI/System/Network/ipFilter