search for: publicstats

Yeeek. That?s a lot of options :) As someone who is pretty savvy but has only ever left Icecast authentication at the defaults, are there any examples, as I need to get it turned off pretty quickly. Also, as there is no ?publicstats? in the admin dir, I?m guessing it is aliased somewhere. A grep finds: src/acl.c: acl_set_admin_str(ret, ACL_POLICY_ALLOW, "buildm3u,publicstats,publicstats.json"); src/admin.c:#define PUBLICSTATS_RAW_REQUEST "publicstats" src/admin.c:#define PUBLICSTATS_JSON_REQ...

Good morning, On Sun, 2024-01-21 at 10:39 +0000, TDAS wrote: > Can anyone tell me why?/admin/publicstats?is unprotected? And how I > go about changing that!? > > I don?t understand why it would be accessible by anyone without > authenticating when it is under?/admin/??? The endpoint is meant to be a replacement for /status-json.xsl which it deprecates. The admin/-namespace is basically...

...les, as I need to > get it turned off pretty quickly. I'm not really sure here. That endpoint is meant to be public. Fiddling with it might break things. You could try something like this in the global <authentication> section: <role type="anonymous" match-admin="publicstats,publicstats.json" deny-all="*" /> However keep in mind that this does not affect any roles that might have been evaluated earlier. > Also, as there is no ?publicstats? in the admin dir, I?m guessing it > is aliased somewhere. [...] If you by 'alias' mean rendered...

Can anyone tell me why /admin/publicstats is unprotected? And how I go about changing that!? I don?t understand why it would be accessible by anyone without authenticating when it is under /admin/ ?? -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.xiph.org/pipermail/icecast/attachments/2024...

Thanks - so > <role type="anonymous" match-admin="publicstats,publicstats.json" deny-all="*" /> ?worked, but also blocked all my mount points too! I guess I need to follow it with something like: <role type="anonymous" match-admin=?stream.mp3,stream.aac" allow-all="*" /> Or something else? But would that no...

Good evening, On Sun, 2024-01-21 at 20:01 +0000, TDAS wrote: > Thanks - so? > > > ???<role type="anonymous" match- > > admin="publicstats,publicstats.json" deny-all="*" /> > > > ?worked, but also blocked all my mount points too! I guess I need to > follow it with something like: > > ?<role type="anonymous" match-admin=?stream.mp3,stream.aac" allow- > all="*" />...

...streaming * New *experimental* JSON renderings * Web interface * Complete redesign * Support to move single listeners between sources * Logfile display on admin interface * New dashboard including overall health and maintenance information * Added new endpoint `/admin/publicstats` replacing `/status- json.xsl` which is now deprecated * Added stats key `display-title` to replace `title`, and `artist` * Warning about legacy sources on dashboard * Listing of listen sockets on admin interface * Advanced version display on admin interface * Protocol *...

...streaming * New *experimental* JSON renderings * Web interface * Complete redesign * Support to move single listeners between sources * Logfile display on admin interface * New dashboard including overall health and maintenance information * Added new endpoint `/admin/publicstats` replacing `/status- json.xsl` which is now deprecated * Added stats key `display-title` to replace `title`, and `artist` * Warning about legacy sources on dashboard * Listing of listen sockets on admin interface * Advanced version display on admin interface * Protocol *...

...JSON renderings > * Web interface > * Complete redesign > * Support to move single listeners between sources > * Logfile display on admin interface > * New dashboard including overall health and maintenance > information > * Added new endpoint `/admin/publicstats` replacing `/status- > json.xsl` which is now deprecated > * Added stats key `display-title` to replace `title`, and `artist` > * Warning about legacy sources on dashboard > * Listing of listen sockets on admin interface > * Advanced version display on admin int...

...JSON renderings > * Web interface > * Complete redesign > * Support to move single listeners between sources > * Logfile display on admin interface > * New dashboard including overall health and maintenance > information > * Added new endpoint `/admin/publicstats` replacing `/status- > json.xsl` which is now deprecated > * Added stats key `display-title` to replace `title`, and `artist` > * Warning about legacy sources on dashboard > * Listing of listen sockets on admin interface > * Advanced version display on admin int...