Skip to main content
Known Participant
December 6, 2011
Question

How to force authenication to stream live content FMS Interactive Server on Linux

  • December 6, 2011
  • 1 reply
  • 2501 views

We purchased Flash Media Streaming Server Interactive edition in order to have the security featuers of not allowing unauthorized connections streaming live content to the server.

Is there a document with procedures that details how to make this happen, the allowedHTMLdomains.txt does not work when you place in IP ranges that you do not want connecting.

I need some help just to figure out a way to keep someoen from connecting to the server and not streaming live content.

Has anyone configured this in Linux because the documentation is mainly for Windows.

Any help/advice would be great since this seems to be a common problem for anyone who runs Linux.

    This topic has been closed for replies.

    1 reply

    aruserAuthor
    Known Participant
    December 6, 2011

    From what I have read you would place this in the main.asc however it did not work.

    Is there some guide for Linux explaining how to enable security to require a password in order to connect to the server and stream live media?

    This would solve a huge security hole.

    aruserAuthor
    Known Participant
    December 6, 2011

    Is this the main.asc file that would need to be modified to keep unauthorizied live streaming?

    [root@vid livepkgr]# pwd

    /opt/adobe/fms/applications/livepkgr

    main.asc

    The documentation does not specify where the file is and what file will control this access?

    In this directory there is no main.asc

    [root@vid live]# pwd

    /opt/adobe/fms/applications/live

    So is the one for livepkgr the one where you connect to stream live?

    Adobe Employee
    December 7, 2011

    Hi,

    There are mutiple ways you could prevent the users from subscribing or publishing on the live stream.

    For example, one is metioned here

    http://help.adobe.com/en_US/FlashMediaServer/3.5_Deving/WS5b3ccc516d4fbf351e63e3d11a0773d37a-7feb.html

    Here, one can send the username or password with the Netconnection.connect and main.asc can either verify it locally or can call the remote third party service (you may check about WebService class, SOAPFault class, SOAPCall class, and Log class.)

    As a first step, Let's go by modifying the application.onConnect to return true or false if password and username is authenticated locally.. then move to intergating the third party web service logic to authenticate the user name and password. By the time third party reponses, you can held the client object in the pending connections as described in the link above.

    Other way to restirct uses are implementing auth or access adaptors.. They are C++ implementation of some interfaces exposed by the FMS. FMS do send the connect/ play etc event to the adaptor for authentication. For more info check http://www.adobe.com/devnet/flashmediaserver/articles/authorization-access-plugins.html or FMS live docs

    On other note, for live event(on RTMP) default application is application/live .. you may either create your own application for example.. application/myliveapplication or modify the code of the application/live main.asc

    Livepkgr application is for HTTP live streaming..