[Icecast] URL authentication failing

[Milton Huang]

In case anyone is interested, I eventually figured out that despite the
error.log message, the `option name` should be `auth_header`. I guess the
warning is for an update that hasn't been applied yet.

On Tue, Nov 30, 2021 at 10:08 PM Milton Huang <mph at emotrics.com> wrote:

> I'm using a compiled version of Icecast (2.4.99.2) for TLS and having
> problems tracking down where URL authentication is failing.  My icecast.xml
> mount is:
>
>         <mount-name>/teststream.mp3</mount-name>
>         <authentication>
>             <role type="url" match-method="get,post,head,options"
> allow-web="*" deny-admin="*" may-alter="send_error,redirect">
>                 <option name="client_add"       value="
> https://posthere.io/79f1-4499"/>
>                 <option name="client_remove"    value="
> https://posthere.io/79f1-4499"/>
>                 <option name="action_add"       value="listener_add"/>
>                 <option name="action_remove"    value="listener_remove"/>
>                 <option name="headers"
>  value="x-pragma,x-token,auth"/>
>                 <option name="header_prefix"    value=""/>
>                 <option name="header_auth"      value="HTTP/1.1 200 OK"/>
>                 <option name="header_timelimit" value=""/>
>             </role>
>             <role type="anonymous" match-method="get,post,head,options"
> deny-all="*" />
>         </authentication>
>
> (I tried it first with "auth_header" like in the online doc, but changed
> it to "header_auth" based on the messages in error.log) When I try to
> access the stream, Icecast sends the correct POST to posthere.io to check
> authentication. But in the error logs it says:
>
> [2021-12-01  02:50:56] INFO auth/queue_auth_client auth on /teststream.mp3
> has 1 pending
> [2021-12-01  02:50:56] INFO auth_url/url_add_client client auth (
> https://posthere.io/79f1-4499-9c2e) failed with ""
> [2021-12-01  02:50:56] WARN reportxml/reportxml_database_build_report No
> matching definition for "253444798-0643-4577-9139"
>
> So it looks like auth failed. But why is it failing with ""? Does that
> mean it didn't get the "HTTP/1.1 200 OK" response that posthere sent back?
> Any suggestions on figuring this out?
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20211229/4dacbab2/attachment.htm>