Skip to main content
Participating Frequently
March 20, 2012
Question

FMS 4.5.1 - How to implement client authentication?

  • March 20, 2012
  • 3 replies
  • 3068 views

Is there any way to perform client authentication in FMS 4.5.1 (username/password/session id) for live/livepgkr application? As without it anyone will be able to discover RTMP/HLS URL and access to live streams without any limitation. Thank you in advance!

This topic has been closed for replies.

3 replies

alexmneAuthor
Participating Frequently
March 20, 2012

So client (JWplayer...) have to pass credentials to FMS and then server vlidate it on WebService?

@nnmk

With apache basic autentication I'll have to keep username:password on FMS in some file?

Known Participant
March 20, 2012

yes, see here:

http://httpd.apache.org/docs/2.0/howto/auth.html

under "getting it working"

the idea is to use basicauth in hls and hds location(s) in httpd.conf

that way, the stream would be accessible via this url:

http://user:pass@name-of-the-server/..../..m3u8

but then, the username and password would be easily sniffed so you should install server certificate, set listen 443 in the same conf

and use https instead of http so that username and password are sent encrypted

I haven't found easier solution than this for hls/hds authentication but still not 100% sure if it will work inside iOS aplication - i see no reason why it should not...

for rtmp, as i already said, you could implent anything you want in asc on server side and inside your player, some coding in AS needed for this, you do not need to call webservices per se, i do not have a concrete example but i'm sure that one can be found by serching this forum or related sites like fmsguru...

for the record, adobe engineers here are way more experienced and may have better ideas or prove me wrong...

alexmneAuthor
Participating Frequently
March 22, 2012

It seems that streaming edition ignores main.asc… In order to use authentication I’ll have to use interactive edition?

Known Participant
March 20, 2012

Some ideas for hls/hds here:

http://forums.adobe.com/message/4231702#4231702

For rtmp - its way easier, you can implement anything of that nature in actionscript within main.asc code and in your player code, there are forum posts here about that one, you can search around...

Patel Bharat
Inspiring
March 20, 2012

You can authenticate it through webservice, pass client user (username/password/session id) information to webservice. You will get more idea about it from my blog:

http://bharatria.wordpress.com/2008/02/18/calling-web-service-from-fms/