Skip to main content
June 28, 2011
Question

FMS access to protected folder

  • June 28, 2011
  • 1 reply
  • 856 views

Hi all,

I have developed a flash player swf which uses FMS as streaming server.

The swf is loaded in a web page, it has the VideoPlayer component with the source set to the FMS:

"rtmp://---URL---/vod/MP4:/VideoFolder/master_video"

It works perfectly when the folder VideoFolder is not restricted. I have then many folders (a digital library with restrictions) with different permission set, using ActiveDirectory: basically, when the web page is loaded, and the flash player try to access to some images inside the folder, the login/password is prompted automatically by the browser, and the user has to insert login and password for his domain.

If I don't use the streaming server, but normal progressive download, setting video.source = "VideoFolder/master_video.mp4" it works perfectly, it asks me login and password and then the video is played.

Now, is there a way to use the streaming server with this authentication system?

The best would be that the flash player prompt username and password, and these are used by FMS to access to the folder of the video. Without this, currently, FMS cannot access to this protected folder.

Thank you,

Nicola

    This topic has been closed for replies.

    1 reply

    Nikhil_Kalyan
    Participating Frequently
    June 28, 2011

    Hi,

    Thanks for your interest in streaming and FMS.

    There are different ways to add authentication through Flash Player  - FMS ecosystem. I can suggest what's on top of my head now

    1. You can send the user name and password pair along with the connection URL (the RTMP url ) and on the server side , you can create logic to make the decision to authorize or not. A good sophisticated way of sending the pair would be good to start with.

    2. FMS supports plug-ins called authorization adapter, where every incoming connection can be authorized or rejected. The username and password can be sent again through the URL, and now this plugin would dedicated work for your authorization, viz to talk to an active directory (LDAP) or database etc.

    June 29, 2011

    Hi,

    thank you for your kind answer.

    Probably, my description wasn't so good: I know this possibility to extend FMS with plugins, and authentication stuff, I read the documentation related to this, but my issue is a bit different.

    Working situation:

    - restricted folder with permission set on the windows folder to the user DOMAIN\JohnDoe (for example): only him can access and watch the file.

    - no streaming, video progressive download

    - the webpage with myflashplayer.swf is loaded, it tries to access to the folder: automatically, the webpage prompts username and password. After inserting as username DOMAIN\JohnDoe and psw, the player has the rights to access the folder, as authenticated user, and it can play the video and display the images contained in the folder.

    Not working situation:

    - same - restricted folder with permission set on the windows folder to the user DOMAIN\JohnDoe (for example): only him can access and watch the file.

    - streaming: the video is provided by the streaming server with FMS

    - the webpage with myflashplayer.swf is loaded, it tries to access to the folder to display the images (not the video, because it is requested to the streaming server): automatically, the webpage prompts username and password. After inserting as username DOMAIN\JohnDoe and psw, the player has the rights to access the folder, as authenticated user, and it display images.

    - the video is requested to FMS: FMS tries to access to the folder, to get the video file, but the folder is restricted only to DOMAIN\JohnDoe.

    What I would like is that FMS can impersonate the user to access the folder, as the request by myflashplayer.swf does.

    So it is not a matter to authenticate the user throw LDAP or ActiveDirectory, because even if I authenticate it, how can I then let FMS to access to the folder?

    I have no idea if this is possible...

    Thank you