Axis Communications - Network Video Support

Network Video
Technical notes
PTZ authentication

Technical Note: Set Authentication on the PTZ control

The information in this article applies to:

AXIS 2400/2401 from F/W version 2.12 and AXIS 2400+/2401+ from F/W version 3.01.

Summary

This article shows how to protect the Pan, Tilt and Zoom control by editing the /etc/group and /etc/httpd/conf/boa.conf files in the AXIS 2400/2400+/2401/2401+

More information

Use the Security link in the Administration of the AXIS 2400/2400+/2401/2401+ to set up the users who should have the PTZ rights. Check the View box (and if needed, the dial-in box).

Use ftp to get (in ascii mode) /etc/group from the AXIS 2400/2400+/2401/2401+
Open the file with a text editor
Append the following line:
ptz::504:root,<ptz user1>,<ptz user2>,...
Example:

ptz::504:root,ptzuser1,ptzuser2

Save (in ascii mode) /etc/group and store it into the AXIS 2400/2400+/2401/2401+

Use ftp to get (in ascii mode) /etc/httpd/conf/boa.conf from the AXIS 2400/2400+/2401/2401+
Open the file with a text editor
Add the following line at the end of the "AuthGroup":
AuthGroup ptz active

Replace
AuthPath /axis-cgi/com/ axview
with
AuthPath /axis-cgi/com/ ptz
and
AuthPath /usr/html/axis-cgi/com/ axview
with
AuthPath /usr/html/axis-cgi/com/ ptz
Save /etc/httpd/conf/boa.conf and store it into the AXIS 2400/2400+/2401/2401+

To add more PTZ users, use the Security link to add more view users and add them under the ptz group in the /etc/group.

Example

/etc/group

root::0:root
bin::1:root,bin,daemon
daemon::2:root,bin,daemon
sys::3:root,bin,adm
adm::4:root,adm,daemon
tty::5:
disk::6:root
lp::7:daemon,lp
mem::8:
kmem::9:
wheel::10:root
mail::12:mail
news::13:news
uucp::14:uucp
man::15:
ftp::50:
nobody::99:
users::100:
axadmin::500:root
axview::501:root,ptzuser1,ptzuser2
axdialin::502:root,ptzuser2
axuser::503:
ptz::504:root,ptzuser1,ptzuser2
axctrl::505:root

/etc/httpd/conf/boa.conf

# Boa for Elinux configuration file
#
# How to configure check README.conf

Port 80

ServerAdmin webguy@your.org.here

ErrorLog /dev/null

AccessLog /dev/null

DocumentRoot /usr/html

UserDir public_html

DirectoryIndex index.html

DefaultType text/plain

TransferMime text/x-server-parsed-html /tmp/ssidsocket
TransferMime application/x-httpd-php3 /tmp/phpdsocket
TransferMime multipart/x-mixed-replace /tmp/camdsocket
TransferMime image/jpeg /tmp/camdsocket
Transfer /axis-cgi/jpg/image.cgi /tmp/camdsocket
Transfer /axis-cgi/mjpg/video.cgi /tmp/camdsocket
Transfer /axis-cgi/com/ptz.cgi /tmp/extdevsocket
Transfer /axis-cgi/com/serial.cgi /tmp/extdevsocket
Transfer /axis-cgi/io/input.cgi /tmp/iodsocket
Transfer /axis-cgi/io/output.cgi /tmp/iodsocket
Transfer /axis-cgi/buffer/command.cgi /tmp/bufferdsocket

ScriptAlias /admin-bin/ /usr/html/admin-bin/
ScriptAlias /axis-cgi/admin/ /usr/html/axis-cgi/admin/

AuthGroup axadmin root_pass_active
AuthGroup axdialin normal
AuthGroup axview active
AuthGroup ptz active

AuthPath /view/ axview
AuthPath /view/ axview
AuthPath /jpg/ axview
AuthPath /mjpg/ axview
AuthPath /axis-cgi/jpg/ axview
AuthPath /axis-cgi/mjpg/ axview
AuthPath /axis-cgi/com/ ptz
AuthPath /axis-cgi/io/ axview
AuthPath /axis-cgi/buffer/ axview

AuthPath /usr/html/view/ axview
AuthPath /usr/html/view/ axview
AuthPath /usr/html/jpg/ axview
AuthPath /usr/html/mjpg/ axview
AuthPath /usr/html/axis-cgi/jpg/ axview
AuthPath /usr/html/axis-cgi/mjpg/ axview
AuthPath /usr/html/axis-cgi/com/ ptz
AuthPath /usr/html/axis-cgi/io/ axview
AuthPath /usr/html/axis-cgi/buffer/ axview

AuthPath /admin/ axadmin
AuthPath /axis-cgi/admin/ axadmin
AuthPath /admin-bin/ axadmin
AuthPath /this_server/ axadmin

AuthPath /usr/html/admin/ axadmin
AuthPath /usr/html/axis-cgi/admin/ axadmin
AuthPath /usr/html/admin-bin/ axadmin
AuthPath /usr/html/this_server/ axadmin

Axis does not take any responsibility for how these configuration changes may affect your system. If the modification fails or if you get other unexpected results, you may have to restore the factory default settings as described in the User’s Manual.