Icecast Streaming Media Server

[cmodyssey]

Hi,

Is it possible to make the server status page only viewable after a valid username and password has been entered (like the Administration page)?

The server status page is the one that comes up when navigating to my.domain.com:<port>/ and my.domain.com:<port>/status.xsl

Thanks in advance.

[karlH]

yes, just define a <mount> for /status.xsl with an authentication block

karl.

[cmodyssey]

Hi Karl,

Thanks for your reply. First of all I tried:

[karlH]

The second is what I meant as you want to authenticate the client listening for data. You do have an unbalanced tag in that second snippet, but that might be a copy/paste thing.

admin requests go via /admin, you wanted to auth the status.xsl page, so it is not an admin request. If the request does not match a source then the request is checked as files in webroot, which is where status.xsl is located.

karl.

[cmodyssey]

Hi Karl,

Thanks for your reply, yes I hadn't spotted the end tag and I just copy/pasted from the documentation, as I hadn't put my second config example in my config file just then.

I've been reading http://www.icecast.org/docs/icecast-2.3.1/icecast2_listenerauth.html

This is where is seems to get a bit messy, as the content that I want authentication on is a web page, not an audio stream.

With an audio stream, the content source is a source client (E.G. simplecast) that connects to the mount and the content clients are audio players (E.G. Windows Media Player)

With a web page, the content source is a text editor (that wrote the status.xsl page) and the content clients are web browsers (E.G. Internet Explorer)

Once reading the section of "Configuring Users and Passwords" and following through what it says, I could only get management visibility of /status.xsl from admin/stats.xsl by temporarily reconfiguring my simplecast to stream to the /status.xsl mount point and starting to stream to it.

Once I could manage /status.xsl, I was able to click on the "Manage Authentication" link and get to the screen to set up usernames and passwords.

Have I mis-interpreted anything or is this really how it has to be done?

My revised config for this mountpoint is below:

[karlH]

looks like you have it sorted now. The admin link for administering the htpasswd file does not show unless a source is registered (you could of setup an on-demand relay to /status.xsl to show it up). A nice mechanism for on-demand files hasn't been worked out yet.

karl.

[cmodyssey]

Hi Karl,

Thanks for confirming that I'm not doing something really silly!!

I've now entered a username and password and can see that a myauth file has been created, with a username in clear text and passwoed encrypted.

I can still access / and /status.xsl without submitting a username and password.

I have tried restarting icecast and from a different web browser, in case anything was being cached and it's still letting me view the page straight away.

Here is an extract from my error log file for when the page was viewed:

[karlH]

I copied what you posted straight into an xml here and run 2.3.2 on it and it asked for a username and password

karl.

[cmodyssey]

Hi Karl,

Thanks for your reply.

I'm on version 2.3.1, so I'll plan to upgrade to 2.3.2 soon and try it then.

[cmodyssey]

Hi Karl,

I have upgraded my test environment to icecast version 2.3.2 and it's still not prompting me for a username and password.

What can I look at/try next?

Thank you.

[karlH]

The setting does work but maybe you have it commented out.

karl.

[cmodyssey]

Hi Karl,

Thanks for your reply, yes you're right, I hadn't copy and pasted the config in the right icecast.xml file!

I'm now prompted with the username and password, which I've forgotton the password for.

I cannot login to change it now, as the page I've got protected with a username and password is the one I need to use to access the page to change the username and password!

Is there a CLI standalone application or something that can put entries into the myauth file so that access can be granted?

Thank you.

[karlH]

The admin pages are via /admin/ which is not protected by the mount auth section. The entries for htpasswd are just user:md5pass

karl.

[cmodyssey]

Hi Karl,

Thanks for the advice to go via the /admin/ pages.

I've reset my password and it's all working how I want it.

Thank you again.