search for: buildm3u

...ming server with authentication. After login to the stream, I still get an m3u file containing the HTTP url, e.g.: http://user:pass at icecast-server:8000/stream.ogg Expected: https://user:pass at icecast-server:8001/stream.ogg Test: $ curl --insecure 'https://icecast-server:8001/admin/buildm3u?username=user&password=pass&mount=%2Fstream.ogg' http://user:pass at icecast-server:8000/stream.ogg Looks like this is caused by too-much hardcoding in icecast-2.3.2/src/admin.c: static void command_buildm3u(client_t *client, const char *mount) { const char *username = NULL;...

...d. It might not be the best name, but it's called that for historical reasons?. Endpoints in the admin/-namespace are subject to normal access control (and have always been). For example mount specific endpoints have always been available with the source credentials as well by default. And the buildm3u endpoint has always been accessible to anyone (as it is useless otherwise). Access to those endpoints can be controlled using the normal allow/deny-admin options, using "publicstats", and "publicstats.json" as commands. Please also note that the different stats view are also s...

...t has only ever left Icecast authentication at the defaults, are there any examples, as I need to get it turned off pretty quickly. Also, as there is no ?publicstats? in the admin dir, I?m guessing it is aliased somewhere. A grep finds: src/acl.c: acl_set_admin_str(ret, ACL_POLICY_ALLOW, "buildm3u,publicstats,publicstats.json"); src/admin.c:#define PUBLICSTATS_RAW_REQUEST "publicstats" src/admin.c:#define PUBLICSTATS_JSON_REQUEST "publicstats.json" src/admin.c: { PUBLICSTATS_RAW_REQUEST, ADMINTYPE_HYBRID, ADMIN_FORMAT_RAW,...

Hi , thanks for you help I try to explain to you my usage of icecast: I'm running icecast for streaming auvio and video in vorbis and theora , and my users can see my streaming on my webpage , where I use cortado web layer. SO my problem it's that my user can see easily the icecast address and can connect to it with mediaplayer like vlc , without use my website. So I want to manage

...o listeners and fix a problem with small metadata values. * YP updates, allow touch interval changes to occur during touch updates and handle HUP case better. * Implement locks in auth engine, needed to free memory correctly * Fixed segv in htpasswd auth, if htpasswd file didn't exist * Fixed buildm3u handler (auth.xsl). * Double free bug in failed relay start up * Fix small memory leaks. * Work around Host header bug from winamp * Doc updates - Icecast development team

...o listeners and fix a problem with small metadata values. * YP updates, allow touch interval changes to occur during touch updates and handle HUP case better. * Implement locks in auth engine, needed to free memory correctly * Fixed segv in htpasswd auth, if htpasswd file didn't exist * Fixed buildm3u handler (auth.xsl). * Double free bug in failed relay start up * Fix small memory leaks. * Work around Host header bug from winamp * Doc updates - Icecast development team

Can anyone tell me why /admin/publicstats is unprotected? And how I go about changing that!? I don?t understand why it would be accessible by anyone without authenticating when it is under /admin/ ?? -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.xiph.org/pipermail/icecast/attachments/20240121/9d1a4f96/attachment.htm>

....ogg.m3u it prompt that > I'm attempting to connect to a site that doesn't require logging in. I believe > this doesn't show via form submission on <a href>...? the /auth.xsl file is an example of how you could generate an m3u with icecast using a user/pass, it uses /admin/buildm3u. > Haven't tried, but what happens when I have 2 mounts with the same alias? So if > I wanted to have localhost:8000/stream/directory/directory/file use > add_listener directive to 8000action.php and > localhost:8001/stream/directory/directory/file use add_listener direct to > 8...

...gt; reasons?. > > > > Endpoints in the admin/-namespace are subject to normal access > > control > > (and have always been). For example mount specific endpoints have > > always been available with the source credentials as well by > > default. > > And the buildm3u endpoint has always been accessible to anyone (as > > it > > is useless otherwise). > > > > Access to those endpoints can be controlled using the normal > > allow/deny-admin options, using "publicstats", and > > "publicstats.json" > > a...

...gt;>>* YP updates, allow touch interval changes to occur during touch updates >>>and handle HUP case better. >>>* Implement locks in auth engine, needed to free memory correctly >>>* Fixed segv in htpasswd auth, if htpasswd file didn't exist >>>* Fixed buildm3u handler (auth.xsl). >>>* Double free bug in failed relay start up >>>* Fix small memory leaks. >>>* Work around Host header bug from winamp >>>* Doc updates >>> >>>- Icecast development team >>>__________________________________________...

...t can be         set:               * which HTTP methods are allowed (such as GET or PUT)                 (allow-method, deny-method; default: allow only GET and                 OPTIONS),               * which admin/ commands are allowed (allow-admin,                 deny-admin; default: allow only buildm3u (playlist                 generation)),               * if web/ access (that is the status page and the actual                 streams) is allowed (allow-web, deny-web; default: allow                 web access),               * how many simultaneous connections can be made by a user               ...

Hi, I'm working with the authentication setup in Icecast 2.3.1. I have authorizing live streams down, but I'm having issues with static files that I want to also serve. I attempted creating a specific mount with typical auth configuration for add/remove listener. Do I need the add/remove mount options. Can I specify a general mount point for a directory and then add mounts via add_mount

...t can be set: * which HTTP methods are allowed (such as GET or PUT) (allow-method, deny-method; default: allow only GET and OPTIONS), * which admin/ commands are allowed (allow-admin, deny-admin; default: allow only buildm3u (playlist generation)), * if web/ access (that is the status page and the actual streams) is allowed (allow-web, deny-web; default: allow web access), * how many simultaneous connections can be made by a user...

...t can be set: * which HTTP methods are allowed (such as GET or PUT) (allow-method, deny-method; default: allow only GET and OPTIONS), * which admin/ commands are allowed (allow-admin, deny-admin; default: allow only buildm3u (playlist generation)), * if web/ access (that is the status page and the actual streams) is allowed (allow-web, deny-web; default: allow web access), * how many simultaneous connections can be made by a user...

...orner_topright.jpg (/usr/local/share/icecast/web/corner_topright.jpg) [2008-05-28 20:02:23] INFO fserve/fserve_client_create checking for file /corner_bottomright.jpg (/usr/local/share/icecast/web/corner_bottomright.jpg) [2008-05-28 20:02:32] INFO admin/admin_handle_request Received admin command buildm3u on mount "/testmount.ogg" [2008-05-28 20:02:59] INFO fserve/fserve_client_create checking for file /style.css (/usr/local/share/icecast/web/style.css) [2008-05-28 20:02:59] INFO fserve/fserve_client_create checking for file /corner_topleft.jpg (/usr/local/share/icecast/web/corner_toplef...

...he correct media player and begin playing your stream</p> <br /> <br /> <h2>URL</h2> --- src/admin.c 2005-09-13 00:50:48.000000000 +0200 +++ src/admin.c 2006-09-22 17:05:53.541833000 +0200 @@ -79,6 +79,10 @@ /* Admin commands requiring no auth */ #define COMMAND_BUILDM3U 501 +#define COMMAND_BUILDPLS 502 +#define COMMAND_BUILDASX 503 +#define COMMAND_BUILDRAM 504 +#define COMMAND_BUILDQTL 505 #define FALLBACK_RAW_REQUEST "fallbacks" #define FALLBACK_TRANSFOR...