Video retrieval exception - insufficient permissions Highlighted

Latest reply: Nov 6, 2019 18:47:22 298 1 10 0

Video retrieval exception - insufficient permissions


This case describes one of the possible causes of the video retrieval exception, that is, the recording retrieval fails because the permission does not match after the device upgrade.


Problem Description:


Upgrade VCN 3020 from V1R2C50SPC222 to V1R3C10. After the upgrade is complete, most cameras can retrieve recordings of only one day but cannot retrieve historical recordings.



Problem Analysis:


1. Problem locating

1) The MU module (media management module) logs are analyzed. Because the idle recording blocks are insufficient, the MU performs recording block recycling. After the recording block is reclaimed, the MU detects that the available recording space is still insufficient. The MU module recycling operation is triggered cyclically. As a result, historical recording index files are repeatedly deleted. (The MU module does not reclaim the recording blocks of the latest day. Therefore, the MU cyclically recycles historical recordings.)

 VCN 2

2) Analyze the reason why space is still insufficient after the MU recording is reclaimed. Analyzed the logs of the Safevideo module. It was found that the SafeVideo failed to reclaim the recording block. As a result, the recording block was not recycled successfully. Therefore, the MU recording space was insufficient. 

VCN 3

2) Check the reason why the recording module fails to be reclaimed. When reclaiming a recording module, the user who performs the recycling operation has insufficient permission. As a result, the recycling operation cannot be performed. As shown in the following figure, the permission of the recording file is root, and the ivsmu user cannot reclaim the file.

VCN 4

 

3) Compared with the V1R2C50 and V1R3C10, the V1R3C10 performs security hardening on user rights. The MU module of the V1R2C50 version runs as the root user. The block file created by the MU module belongs to the root user, and the file permission is 700. The MU module of the V1R3C10 version runs as the ivsmu user. Therefore, the permission of the root user is still required for reclaiming historical blocks. However, in V1R3C10, the permission of the ivsmu user is changed.

4) Because the index file of historical recordings is deleted, only one day of recording files can be retrieved on the client. The actual historical recording data is not deleted. You can restore the historical recording data by using the restoration method.


Impact: The permission after the upgrade is inconsistent with that before the upgrade. Only one day of recording files can be retrieved on the client.


The following figure shows the problem flowchart:

VCN 5

 

2.Resolution of issues

Change the startup permission of mu to root to resolve the problem.

Use the tool to re-create indexes to restore the indexes of historical recordings. After the restoration, most recordings can be retrieved and played back, and some recordings are still interrupted.

1) Reconstruct the recording index by scanning the data block. During the reconstruction, all data disks are scanned.

2) After the disk scanning is complete, recreate the database index of the recording block.



Root Cause:


1. Two versions have different policies for permission control. After the upgrade, the recording block operation rights are inconsistent. After the upgrade, the recording block permission is not modified. As a result, the normal recording index file is deleted. As a result, only one day of historical recordings can be queried after the upgrade, most historical recordings cannot be retrieved.


Corrective Action:


1) Raise the startup permission of the mu module to the root permission to avoid permission inconsistency. When reclaiming recording blocks, ensure that recordings can be recycled properly.

2) Optimize the data restoration tool to ensure that the restored data is properly marked. Otherwise, recordings cannot be retrieved due to abnormal recycling of the mu.


  • x
  • convention:

wissal
MVE Created Nov 6, 2019 18:47:22 Helpful(0) Helpful(0)

Nice, it's very useful.
  • x
  • convention:

I%20would%20like%20to%20share%20with%20you%20my%20experience%2C%20I'm%20telecommunications%20engineer%2C%20currently%20senior%20project%20manager%20at%20an%20operator%2C%20partner%20of%20Huawei%2C%20in%20the%20radio%20access%20network%20department%2C%20for%2020%20years%20I%20managed%20several%20types%20of%20projects%2C%20for%20the%20different%20nodes%20of%20the%20network.%3Cbr%2F%3EAt%20the%20same%20time%2C%20I%20give%20courses%20in%20universities%20as%20a%20temporary%2C%20to%20bring%20the%20operational%20side%20of%20telecommunication%20technologies%20to%20students%2C%20for%20network%20supervision%20systems%2C%20mobile%20radio%20networks%20and%20access%20networks%20etc.

Comment

Reply
You need to log in to reply to the post Login | Register

Notice Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Login and enjoy all the member benefits

Login and enjoy all the member benefits

Login