[Icecast] Send admin kill request to server

[Philipp Schafft]

Good afternoon,

On Mon, 2023-02-13 at 19:29 +0100, HGAlt wrote:
> Hi Philipp,
> 
> I have tested it. But I still get the message back “Authentication
> Required".
> As I mentioned before, send this request from the same server, where
> Icecast is running.
> But the audio is provided from another server.
> Could be that a problem?

No, not really. This strongly sounds like the credentials are in fact
not provided. both access.log and error.log might have details. Also
you could have a look at the actual traffic flow.

At this point I don't think there is much to add without knowing your
config and the code you use to access the API. I still strongly guess
that you just don't provide the credentials in a way they are actually
used. Which is most likely a problem with your code, not the API or
Icecast.

With best regards,



> -----Ursprüngliche Nachricht-----
> Von: Icecast [mailto:icecast-bounces at xiph.org] Im Auftrag von Philipp
> Schafft
> Gesendet: Montag, 13. Februar 2023 15:12
> An: Icecast streaming server user discussions
> Betreff: Re: [Icecast] Send admin kill request to server
> 
> Good morning,
> 
> On Mon, 2023-02-13 at 14:53 +0100, HGAlt wrote:
> > Hi,
> > 
> > I have a strange problem, which I don’t understand!
> > I create a URL like:
> > 
> > https://…:8000/admin/killclient.xsl?user=admin&pass=password&mount=/mo
> > unt.mpeg&id=123456
> 
> This doesn't look like a valid API endpoint and parameters.
> 
> endpoints under /admin that end with ".xsl" are for users only, not
> for machine made requests. Remove the ".xsl" to do an API call.
> 
> Also there is no "user" or "pass" parameter.
> 
> > If I send this URL via a browser to the Icecast server, it works
> > fine!
> > But if I send the same URL via JQUERY AJAX, it failed, because
> > “Authentication Required”. But the user and the password is
> > included.
> 
> Likely the browser sends the required credentials via HTTP auth as
> required. It may do so without telling you when it has them cached.
> 
> 
> > The browser and the PHP JQuery is running on the same physical
> > Windows
> > server.
> > 
> > Was somebody else already run into the same problem?
> 
> I just confirmed here with current devel build, the following works
> fine for me:
> 
> wget -SO /dev/null --user=admin --password=hackme --post-
> data='mount=/example1.ogg&id=44' 
> http://localhost:8000/admin/killclient
> 

-- 
Philipp Schafft (CEO/Geschäftsführer) 
Telephon:  +49.3535 490 17 92
Website:   https://www.loewenfelsen.net/
Follow us: https://www.linkedin.com/company/loewenfelsen/

Löwenfelsen UG (haftungsbeschränkt)     Registration number:
Bickinger Straße 21                     HRB 12308 CB
04916 Herzberg (Elster)                 VATIN/USt-ID:
Germany                                 DE305133015
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: This is a digitally signed message part
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20230213/27537c29/attachment.sig>