FMS 4.5.1 - How to implement client authentication?

[alexmne]

Is there any way to perform client authentication in FMS 4.5.1 (username/password/session id) for live/livepgkr application? As without it anyone will be able to discover RTMP/HLS URL and access to live streams without any limitation. Thank you in advance!

[Patel_Bharat]

You can authenticate it through webservice, pass client user (username/password/session id) information to webservice. You will get more idea about it from my blog:

http://bharatria.wordpress.com/2008/02/18/calling-web-service-from-fms/

[nnmk]

Some ideas for hls/hds here:

http://forums.adobe.com/message/4231702#4231702

For rtmp - its way easier, you can implement anything of that nature in actionscript within main.asc code and in your player code, there are forum posts here about that one, you can search around...

[alexmne]

So client (JWplayer...) have to pass credentials to FMS and then server vlidate it on WebService?

@nnmk

With apache basic autentication I'll have to keep username:password on FMS in some file?

[nnmk]

yes, see here:

http://httpd.apache.org/docs/2.0/howto/auth.html

under "getting it working"

the idea is to use basicauth in hls and hds location(s) in httpd.conf

that way, the stream would be accessible via this url:

http://user:pass@name-of-the-server/..../..m3u8

but then, the username and password would be easily sniffed so you should install server certificate, set listen 443 in the same conf

and use https instead of http so that username and password are sent encrypted

I haven't found easier solution than this for hls/hds authentication but still not 100% sure if it will work inside iOS aplication - i see no reason why it should not...

for rtmp, as i already said, you could implent anything you want in asc on server side and inside your player, some coding in AS needed for this, you do not need to call webservices per se, i do not have a concrete example but i'm sure that one can be found by serching this forum or related sites like fmsguru...

for the record, adobe engineers here are way more experienced and may have better ideas or prove me wrong...

[alexmne]

It seems that streaming edition ignores main.asc… In order to use authentication I’ll have to use interactive edition?

[nnmk]

well, streaming edition does not support a lot of things, including server side actionscript...

I dont know if authentication with it is possible, my best guess is - no...