[SOLVED] Logitech Harmony Hub Binding - 4.15.206 firmware broke local API connection

rkrisi · December 17, 2018, 6:58pm

From the Logitech forum:

Hi, my binary HarmonyHubControl (source available in internet) still works with old and new firmware.
Ralf

I don’t know which binary is this, but somehow implementation seems possible…

A_Z · December 17, 2018, 7:09pm

NCO · December 17, 2018, 7:10pm

So how to downgrade?
And where to find the file?

Celaeno1 · December 17, 2018, 7:26pm

HarmonyHubControl runs a XMPP Server that listens on Port 5222.

github.com

NovaGL/HarmonyHubControl/blob/master/PROTOCOL.md

# Logitech Harmony Protocol

This document describes the Logitech Harmony protocol used for communicating
with the Harmony Link device.

## Harmony Link Device

The Logitech Harmony Link connects to your home wireless network and obtains an
IP address. It runs an [XMPP](http://en.wikipedia.org/wiki/XMPP) server that
listens on port 5222.

## Authentication

### Obtaining Login Token

The first step in authenticating is sending a Logitech username and password to
a Logitech web service. The endpoint for getting an authentication token is:

    https://svcs.myharmony.com/CompositeSecurityServices/Security.svc/json/GetUserAuthToken

This file has been truncated. show original

Don’t know how HarmonyBinding is communicating??

A_Z · December 17, 2018, 7:42pm

it is not a viable option indeed

Celaeno1 · December 17, 2018, 7:44pm

@NCO
I didn’t do a restore. But I can provide this manual: it is in german!!! Hopefully someone here can confirm it?

https://www.harmony-remote-forum.de/viewtopic.php?t=13699

Please wait, until someone confirmed this!!!

A_Z · December 17, 2018, 7:47pm

that is the correct procedure.
just select the correct device (home control) for harmony hub.
you won’t lose your devices and activities on downgrade. but you won’t be able to edit them without upgrading firmware again.

NCO · December 17, 2018, 9:22pm

That should be ok.
Not really straightforward, but at least an option.

So according to the harmony forum procedure (I am German, too - ass you can hearr frrom my bloody accent ) there is no local fw file needed but it’s gonna be pulled from any Logitech server (I assume)!?

wborn · December 17, 2018, 9:27pm

Yes it will just download a previous version from their server. You can’t choose a specific version.

According to the Logitech community forum the Harmony Team is aware of the situation:

Logi_WillWong

2 hours ago

Hi folks.

Will from the Harmony Team here. Just wanted to let you know we are aware of the feedback from the community. We will be providing an update shortly.

Thanks for your patience.

A_Z · December 18, 2018, 2:27am

https://community.logitech.com/s/question/0D55A00008D2zYDSAZ/harmony-hub-fw-415206

Celaeno1 · December 18, 2018, 9:18am

@wborn

All are talking about closing port 5222, but “harmony binding” is using port 5224?

github.com

openhab/openhab2-addons/blob/master/addons/binding/org.openhab.binding.harmonyhub/src/main/java/org/openhab/binding/harmonyhub/internal/discovery/HarmonyHubDiscoveryService.java#L58


* @author Wouter Born - Add null annotations
*/
@NonNullByDefault
@Component(service = DiscoveryService.class, immediate = true, configurationPid = "discovery.harmonyhub")
public class HarmonyHubDiscoveryService extends AbstractDiscoveryService {


   private final Logger logger = LoggerFactory.getLogger(HarmonyHubDiscoveryService.class);


   // notice the port appended to the end of the string
   private static final String DISCOVERY_STRING = "_logitech-reverse-bonjour._tcp.local.\n%d";
   private static final int DISCOVERY_PORT = 5224;
   private static final int TIMEOUT = 15;
   private static final long REFRESH = 600;


   private boolean running;


   private @Nullable HarmonyServer server;


   private @Nullable ScheduledFuture<?> broadcastFuture;
   private @Nullable ScheduledFuture<?> discoveryFuture;
   private @Nullable ScheduledFuture<?> timeoutFuture;

Or am I wrong?

wborn · December 18, 2018, 9:20am

That’s the discovery part. The binding uses the harmony-java-client which connects to port 5222:

github.com

tuck182/harmony-java-client/blob/4ab8d439f5706f4c11ca28f1f14c3f060fda010f/src/main/java/net/whistlingfish/harmony/HarmonyClient.java#L74


      
          import net.whistlingfish.harmony.protocol.OAReplyFilter;
          import net.whistlingfish.harmony.protocol.OAStanza;
          
          public class HarmonyClient {
          
              private static final Logger logger = LoggerFactory.getLogger(HarmonyClient.class);
          
              public static final int DEFAULT_REPLY_TIMEOUT = 30_000;
              public static final int START_ACTIVITY_REPLY_TIMEOUT = 30_000;
          
              private static final int DEFAULT_PORT = 5222;
              private static final String DEFAULT_XMPP_USER = "guest@connect.logitech.com/gatorade.";
              private static final String DEFAULT_XMPP_PASSWORD = "gatorade.";
          
              private boolean smackConfigured;
              private HarmonyXMPPTCPConnection connection;
              private final ScheduledExecutorService scheduler = Executors.newScheduledThreadPool(1);
              private ScheduledFuture<?> heartbeat;
          
              /*
               * To prevent timeouts when different threads send a message and expect a response, create a lock that only allows a

rkrisi · December 18, 2018, 9:36am

I’m hoping they will fix this soon!
For example HEOS support is buggy for more than a 1.5 year from now…

Celaeno1 · December 18, 2018, 9:46am

Ok. Thanks!

captndelta · December 18, 2018, 10:28am

Is there a (english) link/write-up somewhere how to accomplish the downgrade? Also, what (IP, hostname) do I need to block at the gateway level to keep those updates from happening.

Thanks for your help!
-Th

Celaeno1 · December 18, 2018, 11:01am

@captndelta

Somewhere in harmony forum I read the following:

https://community.logitech.com/s/question/0D55A00008D2zYDSAZ/harmony-hub-fw-415206

Harmony Hub tried to connect to:

54.165.126.61
54.236.3.168
54.236.3.169
54.236.3.170
100.26.13.108

and/or: (from here: https://community.home-assistant.io/t/logitech-harmony-removes-local-api/85523 )

But you can block “harmony hub’s IP”, getting no access to internet in your router config.

captndelta · December 18, 2018, 11:17am

Yea, I replied there too. Any link on how to get that rogue FW update off the thing?

Thanks a ton, just punched those into my router. IF anyone see’s any other IP’s, please add.

Yep, but so far the hubs were on DHCP (afaik, no way to set a static IP). Need to get my hub’s MAC’s into my DHCP servers for static assignment, then this will work. Thank you for the reminder!

BTW, does a hub reconfiguration (add/remove devices, activities) still work after blocking access to the logitech overlord?

Cheers,
-Th

Celaeno1 · December 18, 2018, 11:54am

@captndelta

But it’s only in GERMAN !!!

captndelta · December 18, 2018, 1:03pm

Yeah, I saw, made my way thru it. Even tho I’m native in German, it wasn’t all that obvious. Two points:
(1) this write-up uses the Logitech desktop app, not the Logitech web site (as I had initially thought)
(2) the second picture is misleading. Initially, it looks like there are less items to choose from. On the Mac, I had to wiggle the mouse a few times to get the scroll bars to show up and get the proper device selection.

One device down, 11 more to go

But thank you for your help, otherwise I wouldn’t hear the end of it over christmas.
-Th

sjonez · December 18, 2018, 8:55pm

It looks like the guys over at HA have discovered another local API available that uses websockets on port 8088: https://community.home-assistant.io/t/logitech-harmony-removes-local-api/85523