Icecast - Feb 2023 - Send admin kill request to server

Good morning,

On Mon, 2023-02-13 at 14:53 +0100, HGAlt wrote:
> Hi,
>  
> I have a strange problem, which I don?t understand!
> I create a URL like:
>  
>
https://?:8000/admin/killclient.xsl?user=admin&pass=password&mount=/mount.mpeg&id=123456
This doesn't look like a valid API endpoint and parameters.

endpoints under /admin that end with ".xsl" are for users only, not
for
machine made requests. Remove the ".xsl" to do an API call.

Also there is no "user" or "pass" parameter.
> If I send this URL via a browser to the Icecast server, it works
> fine! But if I send the same URL via JQUERY AJAX, it failed, because
> ?Authentication Required?. But the user and the password is included.
Likely the browser sends the required credentials via HTTP auth as
required. It may do so without telling you when it has them cached.
 
> The browser and the PHP JQuery is running on the same physical
> Windows server.
>  
> Was somebody else already run into the same problem?
I just confirmed here with current devel build, the following works
fine for me:

wget -SO /dev/null --user=admin --password=hackme
--post-data='mount=/example1.ogg&id=44'
http://localhost:8000/admin/killclient


With best regards,

-- 
Philipp Schafft (CEO/Gesch?ftsf?hrer) 
Telephon:  +49.3535 490 17 92
Website:   https://www.loewenfelsen.net/
Follow us: https://www.linkedin.com/company/loewenfelsen/

L?wenfelsen UG (haftungsbeschr?nkt)     Registration number:
Bickinger Stra?e 21                     HRB 12308 CB
04916 Herzberg (Elster)                 VATIN/USt-ID:
Germany                                 DE305133015
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: This is a digitally signed message part
URL:
<http://lists.xiph.org/pipermail/icecast/attachments/20230213/cb623379/attachment.sig>

Hi Philipp,

I have tested it. But I still get the message back ?Authentication
Required".
As I mentioned before, send this request from the same server, where Icecast is
running.
But the audio is provided from another server.
Could be that a problem?

Thanks,
HGA

-----Urspr?ngliche Nachricht-----
Von: Icecast [mailto:icecast-bounces at xiph.org] Im Auftrag von Philipp Schafft
Gesendet: Montag, 13. Februar 2023 15:12
An: Icecast streaming server user discussions
Betreff: Re: [Icecast] Send admin kill request to server

Good morning,

On Mon, 2023-02-13 at 14:53 +0100, HGAlt wrote:
> Hi,
>
> I have a strange problem, which I don?t understand!
> I create a URL like:
>
>
https://?:8000/admin/killclient.xsl?user=admin&pass=password&mount=/mo
> unt.mpeg&id=123456
This doesn't look like a valid API endpoint and parameters.

endpoints under /admin that end with ".xsl" are for users only, not
for machine made requests. Remove the ".xsl" to do an API call.

Also there is no "user" or "pass" parameter.
> If I send this URL via a browser to the Icecast server, it works fine!
> But if I send the same URL via JQUERY AJAX, it failed, because
> ?Authentication Required?. But the user and the password is included.
Likely the browser sends the required credentials via HTTP auth as required. It
may do so without telling you when it has them cached.

> The browser and the PHP JQuery is running on the same physical Windows
> server.
>
> Was somebody else already run into the same problem?
I just confirmed here with current devel build, the following works fine for me:

wget -SO /dev/null --user=admin --password=hackme
--post-data='mount=/example1.ogg&id=44'
http://localhost:8000/admin/killclient


With best regards,

--
Philipp Schafft (CEO/Gesch?ftsf?hrer)
Telephon:  +49.3535 490 17 92
Website:   https://www.loewenfelsen.net/
Follow us: https://www.linkedin.com/company/loewenfelsen/

L?wenfelsen UG (haftungsbeschr?nkt)     Registration number:
Bickinger Stra?e 21                     HRB 12308 CB
04916 Herzberg (Elster)                 VATIN/USt-ID:
Germany                                 DE305133015


--
Diese E-Mail wurde von Avast-Antivirussoftware auf Viren gepr?ft.
www.avast.com