Firmware/Security bug regarding ONVIF?

[Revo2Maxx]

I agree. Seems like something that might be bad for someone to have turned off much longer then just for testing a Connection. I personally wouldn't turn it off. However I wish I would have known about that before when I was testing out a Non Amcrest system that I now took over to my Cabin and is recording there with 941 and 3 other cameras. When i tried to get it to work I kept putting in the wrong Password and thought the system wouldn't take the 941 at first lol. Reset Camera to factory setup again and it started working. Came home to find out the Password I had was a older one then the one I have been using.

[chadbaldwin]

Yeah...that's definitely not how the UI makes that appear. And it should definitely be better explained on the UI.

I guess I don't have a good understanding of how ONVIF works. But I assumed that setting meant that if the ONVIF authentication setting is OFF, then the only way to authenticate with the camera is by using Basic Authentication (aka http://user:password@192.168.0.100....).

But if ONVIF authentication is turned on...then I would have assumed that it would allow both ONVIF and Basic authentication.

Also...It seems odd to me, that if you do want to use ONVIF authentication...they should allow more than ONLY the admin account to log in. Even if you create a second user with exactly the same permissions as the admin, it still doesn't allow you to use those credentials.

I was trying to set up my cameras to be more secure...so the admin account has a complex password and is rarely used. And then I have restricted accounts with only access to the permissions they need.

[maxwhite]

Port forwarding did it for me.