Jump to content


Photo

Authentication for streaming and change port


  • Please log in to reply
34 replies to this topic

#1 imperia

  • Senior Member
  • 112 posts

+2
Neutral

Posted 20 April 2015 - 00:51

Hello,

 

I have "Authentication for streaming" set to YES. But WebIf does ask for password when I launch m3u thru vlc.

 

Also how can I change the streaming port to something else than 8001.

 

Thanks

 

 



Re: Authentication for streaming and change port #2 littlesat

  • PLi® Core member
  • 46,791 posts

+487
Excellent

Posted 20 April 2015 - 07:03

Why do you need to change that port number?

WaveFrontier 28.2E | 23.5E | 19.2E | 16E | 13E | 10/9E | 7E | 5E | 1W | 4/5W | 15W


Re: Authentication for streaming and change port #3 imperia

  • Senior Member
  • 112 posts

+2
Neutral

Posted 20 April 2015 - 09:17

I wanted to make it little bit more harder for those who scan for 8001 ports on internet to find STBs.

Password authentication is enough for me, but its not working somehow.



Re: Authentication for streaming and change port #4 Pr2

  • PLi® Contributor
  • 3,197 posts

+140
Excellent

Posted 20 April 2015 - 09:44

Hi,

 

You don't need to change it on the box, change it on your port forwarding on your external routeur.  Your-External-Port -> your-box:8001

 

Pr2


NO SUPPORT by PM, it is a forum make your question public so everybody can benefit from the question/answer.
If you think that my answer helps you, you can press the up arrow in bottom right of the answer.

Wanna help with OpenPLi Translation? Please read our Wiki Information for translators

Sat: Hotbird 13.0E, Astra 19.2E, Eutelsat5A 5.0W
VU+ Solo 4K: 2*DVB-S2 + 2*DVB-C/T/T2 (used in DVB-C)
Edision OS Mio 4K: 1*DVB-S2X + 1*DVB-C/T/T2
Octagon SF4008 / Amiko Viper Combo / Zgemma H7C

Re: Authentication for streaming and change port #5 WanWizard

  • Forum Moderator
    PLi® Core member
  • 45,178 posts

+729
Excellent

Posted 20 April 2015 - 12:33

And you don't make it much harder, it will take 20 seconds or so more to find your altered port.

 

Security by obscurity is always a bad idea, and there are now active searches for open streaming ports, by people that run illegal IPTV networks, so be warned.


Currently in use: VU+Duo 4K (2xFBC S2), VU+Zero, Amiko Viper 2TC, Zgemma H3.2TC, Zgemma H6

Many answers to your question can be found in our new and improved wiki.

note: I do not provide support via PM !

 


Re: Authentication for streaming and change port #6 imperia

  • Senior Member
  • 112 posts

+2
Neutral

Posted 20 April 2015 - 14:33

Hi,

 

You don't need to change it on the box, change it on your port forwarding on your external routeur.  Your-External-Port -> your-box:8001

 

Pr2

I wanted the generated m3u to be with valid link(port) inside.

 

Why it doesn't ask for password when "Authentication for streaming" is set to YES. Is it bugged or I misunderstand it purpose?


Edited by imperia, 20 April 2015 - 14:36.


Re: Authentication for streaming and change port #7 WanWizard

  • Forum Moderator
    PLi® Core member
  • 45,178 posts

+729
Excellent

Posted 20 April 2015 - 14:40

Afaik there is no integrated support for password prompting in streaming protocols, so you need to use the standard http spec, and specify the account info in the URL: http://username:password@website/url.


Currently in use: VU+Duo 4K (2xFBC S2), VU+Zero, Amiko Viper 2TC, Zgemma H3.2TC, Zgemma H6

Many answers to your question can be found in our new and improved wiki.

note: I do not provide support via PM !

 


Re: Authentication for streaming and change port #8 imperia

  • Senior Member
  • 112 posts

+2
Neutral

Posted 20 April 2015 - 15:31

What I mean.

When I launch in VLC: http://et6x00/currentstream.m3u

It asks me for password. Its part of WebIf. Good.

 

I thought that when I enable "authentication for streaming" it will ask me for password again but for the link inside the m3u file.

 
Doesn't matter for me if it will ask me for password in VLC or I have to add it to the link itself like http://username:password@website/url.
 
If I am wrong. Please explain me what for is "authentication for streaming" option.

Edited by imperia, 20 April 2015 - 15:32.


Re: Authentication for streaming and change port #9 WanWizard

  • Forum Moderator
    PLi® Core member
  • 45,178 posts

+729
Excellent

Posted 20 April 2015 - 15:38

The link inside the m3u should contain the password, in the format I gave you.


Currently in use: VU+Duo 4K (2xFBC S2), VU+Zero, Amiko Viper 2TC, Zgemma H3.2TC, Zgemma H6

Many answers to your question can be found in our new and improved wiki.

note: I do not provide support via PM !

 


Re: Authentication for streaming and change port #10 imperia

  • Senior Member
  • 112 posts

+2
Neutral

Posted 20 April 2015 - 15:45

Ok. But looks like with "Enable Authentication for streaming" Set to YES. People are connecting to my streaming port without password!

 

I also tried it within my network and it doesn't require password.



Re: Authentication for streaming and change port #11 Pr2

  • PLi® Contributor
  • 3,197 posts

+140
Excellent

Posted 20 April 2015 - 16:04

The point here is relevant, if the OpenWebif is configured to be password protected then the generated link in the .m3u file should include the login/password in the proper way.

It is not user friendly to ask them to edit the file and add this login/pwd for every service entries.

So dev of OpenWebif should consider to support this.


NO SUPPORT by PM, it is a forum make your question public so everybody can benefit from the question/answer.
If you think that my answer helps you, you can press the up arrow in bottom right of the answer.

Wanna help with OpenPLi Translation? Please read our Wiki Information for translators

Sat: Hotbird 13.0E, Astra 19.2E, Eutelsat5A 5.0W
VU+ Solo 4K: 2*DVB-S2 + 2*DVB-C/T/T2 (used in DVB-C)
Edision OS Mio 4K: 1*DVB-S2X + 1*DVB-C/T/T2
Octagon SF4008 / Amiko Viper Combo / Zgemma H7C

Re: Authentication for streaming and change port #12 WanWizard

  • Forum Moderator
    PLi® Core member
  • 45,178 posts

+729
Excellent

Posted 20 April 2015 - 16:06

And in your previous post you mentioned that you got prompted for your password?


Currently in use: VU+Duo 4K (2xFBC S2), VU+Zero, Amiko Viper 2TC, Zgemma H3.2TC, Zgemma H6

Many answers to your question can be found in our new and improved wiki.

note: I do not provide support via PM !

 


Re: Authentication for streaming and change port #13 imperia

  • Senior Member
  • 112 posts

+2
Neutral

Posted 20 April 2015 - 16:09

The point here is relevant, if the OpenWebif is configured to be password protected then the generated link in the .m3u file should include the login/password in the proper way.

It is not user friendly to ask them to edit the file and add this login/pwd for every service entries.

So dev of OpenWebif should consider to support this.

Agree.



Re: Authentication for streaming and change port #14 imperia

  • Senior Member
  • 112 posts

+2
Neutral

Posted 20 April 2015 - 16:15

And in your previous post you mentioned that you got prompted for your password?

If I open WebIf in browser - It ask for password.

I guess that currentstream.m3u is part of WebIf and I got password prompt when launching it in VLC. everything is OK,  BUT

If I launch link like this one http://et6x00:8001/1...:1:C00000:0:0:0: in VLC. No password prompt or anything even when "Enable Authentication for streaming" is set to YES.

That's what "hackers" (more like script kiddies) use to bypass my password.



Re: Authentication for streaming and change port #15 Erik Slagter

  • PLi® Core member
  • 44,821 posts

+489
Excellent

Posted 20 April 2015 - 17:50

Here is the proof that it works:

$ wget -Y off -O - -S 'http://duo.ipv4.slagter.name:8001/1:0:19:22e3:80d:2:11a0000:0:0:0'
--2015-04-20 18:49:09--  http://duo.ipv4.slagter.name:8001/1:0:19:22e3:80d:2:11a0000:0:0:0
Resolving duo.ipv4.slagter.name (duo.ipv4.slagter.name)... 10.1.10.12
Connecting to duo.ipv4.slagter.name (duo.ipv4.slagter.name)|10.1.10.12|:8001... connected.
HTTP request sent, awaiting response... 
  HTTP/1.0 401 Authorization Required
  WWW-Authenticate: Basic realm="streamserver"

Username/Password Authentication Failed.

I guess you forgot to configure one of the three (!) locations where you set authentication.


* Wavefrontier T90 with 28E/23E/19E/13E/9E/4.8E/0.8W/5W via SCR switches 2 x 2 x 6 user bands
* Ziggo digital cable TV (FTA)
I don't read PM -> if you have something to ask or to report, do it in the forum so others can benefit. I don't take freelance jobs.
Ik lees geen PM -> als je iets te vragen of te melden hebt, doe het op het forum, zodat anderen er ook wat aan hebben.

Re: Authentication for streaming and change port #16 WanWizard

  • Forum Moderator
    PLi® Core member
  • 45,178 posts

+729
Excellent

Posted 20 April 2015 - 18:10

To make it clear again:

 

the password on the WebIf "itself" is a different setting than the password on the stream port. You can enable/disable these two seperately, and default is "on" for the WebIf, and "off" for the streaming port.

 

If you request http://yourboxip/something.m3u, it is your webif password you have to enter. Inside the m3u is the stream URL, which is what this discussion is about.

 

You can test this in VLC by opening a network stream, and then paste the URL from the m3u. If you don't get a password prompt, your config is wrong.


Currently in use: VU+Duo 4K (2xFBC S2), VU+Zero, Amiko Viper 2TC, Zgemma H3.2TC, Zgemma H6

Many answers to your question can be found in our new and improved wiki.

note: I do not provide support via PM !

 


Re: Authentication for streaming and change port #17 imperia

  • Senior Member
  • 112 posts

+2
Neutral

Posted 20 April 2015 - 18:24

What I am missing?

 

Attached Files



Re: Authentication for streaming and change port #18 Erik Slagter

  • PLi® Core member
  • 44,821 posts

+489
Excellent

Posted 20 April 2015 - 18:33

You are missing (like I hinted on before), the setting in enigma, these are webif settings.


* Wavefrontier T90 with 28E/23E/19E/13E/9E/4.8E/0.8W/5W via SCR switches 2 x 2 x 6 user bands
* Ziggo digital cable TV (FTA)
I don't read PM -> if you have something to ask or to report, do it in the forum so others can benefit. I don't take freelance jobs.
Ik lees geen PM -> als je iets te vragen of te melden hebt, doe het op het forum, zodat anderen er ook wat aan hebben.

Re: Authentication for streaming and change port #19 teo1966

  • Senior Member
  • 717 posts

+8
Neutral

Posted 20 April 2015 - 18:55

Here is the proof that it works:

$ wget -Y off -O - -S 'http://duo.ipv4.slagter.name:8001/1:0:19:22e3:80d:2:11a0000:0:0:0'--2015-04-20 18:49:09--  http://duo.ipv4.slagter.name:8001/1:0:19:22e3:80d:2:11a0000:0:0:0Resolving duo.ipv4.slagter.name (duo.ipv4.slagter.name)... 10.1.10.12Connecting to duo.ipv4.slagter.name (duo.ipv4.slagter.name)|10.1.10.12|:8001... connected.HTTP request sent, awaiting response...   HTTP/1.0 401 Authorization Required  WWW-Authenticate: Basic realm="streamserver"Username/Password Authentication Failed. 
I guess you forgot to configure one of the three (!) locations where you set authentication.
  

You are missing (like I hinted on before), the setting in enigma, these are webif settings.

Where cant find this 3 locaties on a et10000 ?

HD2400/HD11/HD530C/HD51 openpli 6.2


Re: Authentication for streaming and change port #20 Erik Slagter

  • PLi® Core member
  • 44,821 posts

+489
Excellent

Posted 20 April 2015 - 19:14

Browse the enigma settings.


* Wavefrontier T90 with 28E/23E/19E/13E/9E/4.8E/0.8W/5W via SCR switches 2 x 2 x 6 user bands
* Ziggo digital cable TV (FTA)
I don't read PM -> if you have something to ask or to report, do it in the forum so others can benefit. I don't take freelance jobs.
Ik lees geen PM -> als je iets te vragen of te melden hebt, doe het op het forum, zodat anderen er ook wat aan hebben.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users