News:

We really need your input in this questionnaire

Main Menu

Android console app question

Started by DanG, February 04, 2013, 03:20:03 PM

Previous topic - Next topic

DanG

Hi,

I've installed the Android console app (1.2.5) on my mobile - looks very promising!
To make it work from outside our LAN, firewall configuration needs to be done. Connecting from the web requires security consideration.
I can see the default port 4701 is being used for the android console, is it using the same protocol as the PC console?
I see there's an encryption setting, which encryption is being used? is encryption negotiated/set before user/pass credential transmission?
Can a limit be set to the number of login attempts?

Thanks,
Dan

PS. I couldn't find a wiki page for the app - would be nice to have one.


Victor Kirhenshtein

Hi!

Yes, Android console uses same communication protocol as PC console. If you turn on encryption, actual encryption algorithm is negotiated. If possible, AES-256 will be used, next option is AES-128, and last resort option is Blowfish. Login and password transmitted to the server after encryption setup. You can enable account block after number of unsuccessful login attempts by setting IntruderLockoutThreshold configuration parameters. Time of block determined by IntruderLockoutTime parameter (in minutes).

Best regards,
Victor


DanG

Thank you Victor!

I guess I'm reassured I can safely use the app.
Can I see which negotiated encryption was chosen on the app?

Regards,
Dan

Victor Kirhenshtein

You can see that on the server. Open debug console and type "show sessions" command. It will show encryption protocol for each user session.

Best regards,
Victor

DanG

Hi Victor,

Thanks, The android session show AES-256 while the Windows session uses AES-128.

I've been using the Android client for a while now and found it to work fine (most of the time at least). I met the following issues:
- No error message with wrong password
- missing refresh button at dashboards and other screens. I guess screeb auto-update, but sometimes they don't.
- graph containing a lot of data do no appear, as there's no progress indication I can't say if it takes (too) long or just doesn't.
- missing the ability to scale graphs (text too small to read)

I have another question: which user rights are needed to run the Android client?

Keep up the good work,
Thanks,
Dan

Victor Kirhenshtein

Hi!

As Android client is mostly read-only, you only need read access to the objects. Also you may need "acknowledge alarms" and "terminate alarms" rights if you need to manage alarms from mobile client. And running some types of object tools may require "Control" access right on appropriate nodes. You don't need any system-wide rights for mobile device users.

And other questions probably will go to Marco, as he is main author and maintainer of Android client.

Best regards,
Victor

Marco Incalcaterra

#6
Quote from: DanG on February 12, 2013, 01:33:34 PM
- No error message with wrong password
You should get a "Connection failed: Access denied" message, in red color, under the "Home" title. You should get also the same error message in the status bar and as "toast" if those notifications are enabled.

Quote from: DanG on February 12, 2013, 01:33:34 PM
- missing refresh button at dashboards and other screens. I guess screeb auto-update, but sometimes they don't.
Dashboard should autorefresh, graphs not yet.

Quote from: DanG on February 12, 2013, 01:33:34 PM
- graph containing a lot of data do no appear, as there's no progress indication I can't say if it takes (too) long or just doesn't.
Issue added to bugtracker:
https://www.radensolutions.com/chiliproject/issues/239

Quote from: DanG on February 12, 2013, 01:33:34 PM
- missing the ability to scale graphs (text too small to read)
Space on smartphone is limited, I'll try to elaborate a solution. Issue added to bugtracker:
https://www.radensolutions.com/chiliproject/issues/240

Best regards,
Marco

DanG

Hi Marco,

Thanks for replying!

I do indeed get the connection failed message - my bad. I guess I expected it to be more prominent while setting things up (maybe a popup error?). BTW, as I was testing things to reply I discovered that if I change the server name (I use an IP address) the new value is not being used. I need to "disconnect & exit" and restart the app to make the new value take effect (changing the name or password does work immediately).

Looking forward to the next version ;-)
Dan

Marco Incalcaterra

Quote from: DanG on February 14, 2013, 10:38:35 PM
Hi Marco,

Thanks for replying!

I do indeed get the connection failed message - my bad. I guess I expected it to be more prominent while setting things up (maybe a popup error?). BTW, as I was testing things to reply I discovered that if I change the server name (I use an IP address) the new value is not being used. I need to "disconnect & exit" and restart the app to make the new value take effect (changing the name or password does work immediately).

Looking forward to the next version ;-)
Dan

Issue #239 solved, regarding the notification of the connection error you have also info in the status bar if you enable it.

Regarding the changing of server address, I guess that the behaviour is due because there is no force disconnect of current session after changing the parameters. I've added the issue to the bugratcker:

https://www.radensolutions.com/chiliproject/issues/241

Best regards,
Marco