[icecast-dev] icecast2 ogg vorbis client request headers

[oddsock]

I think the plan is to add a URL based authentication, which would allow 
you to make a call to an arbitrary script (PHP, CGI, etc) which could do 
whatever you'd like (look up users in a mySQL db, look up in a local file, 
whatever)...this, I think, provides the most flexibility, and also pushes 
off alot of the authentication logic off of icecast where it doesn't really 
belong...

a simple conversation protocol will be developed, but you can expect 
something like the following :

1. client connects to mount point
2. icecast makes a URL call passing in mountpoint, username, password
3. icecast checks the return of the URL call and either allows the client 
to proceed, or disconnects immediately.
4. client disconnects, icecast would also probably make a URL call which 
would communicate the disconnect..

also keep in mind, this isn't implemented yet, and is still on the drawing 
board...but this is on the icecast todo list.. :)

oddsock
At 02:37 AM 4/2/2004, you wrote:
>Ahh very nice, so how could i add like a MySQL module
>where usernames and passwords are stored in a MySQL db?
>can that be created by a third party or does it have to be created
>internaly?
>
>
>Dave St John
>Mediacast1 Administration
>
>Need Support ?
>http://mediacast1.com/helpdesk
>----- Original Message -----
>From: "Michael Smith" <msmith at xiph.org>
>To: <icecast-dev at xiph.org>
>Sent: Thursday, April 01, 2004 11:51 PM
>Subject: Re: [icecast-dev] icecast2 ogg vorbis client request headers
>
>
> > On Friday 02 April 2004 16:00, Dave St John wrote:
> > > hmmm. never heard of svn
> > > so we can no longer use cvs?
> >
> > Xiph.Org has started using 'Subversion' (commonly abbreviated 'SVN')
>instead
> > of CVS - so all new development is happening in the subversion repository.
> >
> > >
> > > >Let me know if you want more details.
> > >
> > > Absolutely, spill the beans im all ears :)
> >
> > Well, we now have client authentication. Off by default, of course.
> >
> > The design allows plugging in new authentication modules (though not
> > dynamically loading them) relatively easily. Currently only one method is
> > implemented - "htpasswd".
> >
> > With this authentication method, there's one configuration parameter:
> > "filename" - pointing at an htpasswd file. This is similar to apache's
> > htpasswd files (though more limited, I think).
> >
> > Each line in the file consists of a username, and an md5 hash of the
>password.
> > We don't currently have a tool to create these automatically. Writing one
> > would be fairly simple.
> >
> > To configure it, open your main icecast config file, and add a <mount>
>section
> > as normal for the mountpoint you want this on. Then add an authentication
> > node inside it, so it'll look something like this:
> >
> > <mount>
> >   <mount-name>/authenticated-mountpoint.ogg</mount-name>
> >   <authentication type="htpasswd">
> >     <option name="filename" value="/path/to/your/password/file"/>
> >   </authentication>
> > </mount>
> >
> > All pretty straightforward apart from the lack of a tool to create the
> > password file. Using fairly standard unix tools, you can use this to get
>the
> > md5sum you'll need (using a test password of 'foobar':
> >    echo -n "foobar" | md5sum
> >
> > This will print out something like
> >   3858f62230ac3c915f300c664312c63f  -
> >
> > You can then add it to your password file as follows (in this example, the
> > user is called "testuser"). Open up the password file, and add a new line,
> > containing:
> > testuser:3858f62230ac3c915f300c664312c63f
> >
> > So, there you go.
> >
> > Proper tools for creating this file will be added eventually.
> >
> > Mike
> >
> >
> > --- >8 ----
> > List archives:  http://www.xiph.org/archives/
> > icecast project homepage: http://www.icecast.org/
> > To unsubscribe from this list, send a message to
>'icecast-dev-request at xiph.org'
> > containing only the word 'unsubscribe' in the body.  No subject is needed.
> > Unsubscribe messages sent to the list will be ignored/filtered.
> >
>
>
>--- >8 ----
>List archives:  http://www.xiph.org/archives/
>icecast project homepage: http://www.icecast.org/
>To unsubscribe from this list, send a message to 
>'icecast-dev-request at xiph.org'
>containing only the word 'unsubscribe' in the body.  No subject is needed.
>Unsubscribe messages sent to the list will be ignored/filtered.

<p>--- >8 ----
List archives:  http://www.xiph.org/archives/
icecast project homepage: http://www.icecast.org/
To unsubscribe from this list, send a message to 'icecast-dev-request at xiph.org'
containing only the word 'unsubscribe' in the body.  No subject is needed.
Unsubscribe messages sent to the list will be ignored/filtered.