Skip to main content
Participant
February 23, 2010
Question

FMS 3.5 and LDAP Authentication

  • February 23, 2010
  • 1 reply
  • 1479 views

Hi there,

I'm using FMS 3.5.3 Developer edition and trying some VOD solution before I can proceed to purchase FMIS 3.5. Basically, I need to have a mechanism for certain sets of flash movies to be secured by user authentication.

Now, for Apache, I can secure a directory of webpages by using .htaccess; whilst for IIS or Windows Media Service, I can use NTFS ACL at directory level.

My question is: How can I setup a VOD subdirectory that every video files inside need to be authenticated before streaming to client. The authentication authority can be either Active Directory or LDAP.

I've read the developer guide and notice that such authentication requires both client-side and server-side ActionScript. But I'm not a Flash author and I don't have Adobe Flash CSx installed. Can't this simple authentication be done at configuration level?

Thanks in advance for any hints or procedures.

Best Regards

Steve

    This topic has been closed for replies.

    1 reply

    Janaki Lakshmikanthan
    Adobe Employee
    Adobe Employee
    February 23, 2010

    Hi,

    you can very well achieve this by using c++ and avoiding clientside and server side Action script code. You can use the Authorization Plug-in which built in c++ to authenticate the user credentials. Pls refer "flashmediaserver_3.5_plugin_dev.pdf" under documentation folder of FMS installed directory for more details.

    Let me know if you need more info on this.

    Regards,

    Janaki L

    Participant
    March 11, 2010

    hi,

    I read the "flashmediaserver_3.5_plugin_dev.pdf", but I don't get how the Active Directory o rLDAP username/password can be validated in the plugin module?

    Is the username/password pair passed in the uri string to the plugin module's proper function? If so, how I can then validate them against ldap server, is these sample c++ code on how to do this?

    BR,

    DS

    Adobe Employee
    March 11, 2010

    You can pass the credentials in the URI string. To keep it secure between the client and FMS server, you can use RTMPE protocol.

    On server, in authorize() function of Auth module you can verify the credentials against an LDAP server using ldap_bind_sA() function.

    For more details check out this page on MSDN http://msdn.microsoft.com/en-us/library/aa366156%28VS.85%29.aspx