Access control for windows media

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

CAMC1 - 16 Jul 2007 16:53 GMT

I have setup windows media server 2003, created publishing points and
published HTM file for each publishing point.

I can control media access thru IIS (anyone who access thru HTTP), however,
if anyone finds out mms://server/publishing point, no user id or password
asked because of anonymous login.

If I disable anonymous login at the media server, then user will be asked 2
logins when they use http, which annoying

How can I control access to media server with 1 login?

Thanks
MC

Reply to this Message

janefield2002@yahoo.com - 17 Jul 2007 10:41 GMT

I would love to know how you resolve this. I have a similar problem.

Reply to this Message

CAMC1 - 18 Jul 2007 21:17 GMT

Well at the moment, I ask people to enter same login and password, whenever
it promtps second login screen, which is different then IIS
I hate to tell upper management that no choice to put 2 logins, else it is
open to world to watch.
It is strange though, not too many people notice this issue to come up with
solution
(Contolling media access with 1 login, when both IIS and Media Services
Setup)
I guess everyone's need is different, this product should have better
control and single login point, without getting into complex programming.
Anyone has solution?

MC

> I would love to know how you resolve this. I have a similar problem.

Reply to this Message

janefield2002@yahoo.com - 19 Jul 2007 15:00 GMT

I think I have found some helpful links... I guess your problem is
that people can do a "view source" and find the url? Instead of
linking to a wmv file through mms, link to a wsx file or asx file.

Look at the following:

http://msdn2.microsoft.com/en-us/library/ms744559.aspx
https://www.microsoft.com/windows/windowsmedia/howto/articles/adinsertion.aspx

Hope it helps.

> I have setup windows media server 2003, created publishing points and
> published HTM file for each publishing point.
[quoted text clipped - 10 lines]
> Thanks
> MC

Reply to this Message

Vlad - 24 Jul 2007 19:44 GMT

It is possible to archive what you need but ASP programming will be needed.

Signature

Regards,
Vladimir
http://voynex.com - custom software development

> I think I have found some helpful links... I guess your problem is
> that people can do a "view source" and find the url? Instead of
[quoted text clipped - 21 lines]
> > Thanks
> > MC

Reply to this Message

Neil Smith [MVP Digital Media] - 24 Jul 2007 22:54 GMT

>It is possible to archive what you need but ASP programming will be needed.

Nonsense, any scripting language can be used to obfuscate the links,
but whatever the route, the final packets must travel through the IP
layers and can therefore be sniffed and decoded. Invoking ASP as some
sort of magic bullet is farcical in the extreme ;-)

Cheers - Neil
------------------------------------------------
Digital Media MVP : 2004-2007
http://mvp.support.microsoft.com/mvpfaqs

Reply to this Message

Vlad - 25 Jul 2007 00:20 GMT

Very "helpful" reply. I proposed to use ASP not to obfuscate the links
because this is useless, but to program server-side playlist and to use
cookies for users authorization. Hope this reply will help.

Signature

Regards,
Vladimir
http://voynex.com - custom software development

> >It is possible to archive what you need but ASP programming will be needed.
>
[quoted text clipped - 7 lines]
> Digital Media MVP : 2004-2007
> http://mvp.support.microsoft.com/mvpfaqs

Reply to this Message

Neil Smith [MVP Digital Media] - 25 Jul 2007 21:32 GMT

It was "helpful" in order to disambiguate your statement that "ASP
programming will be needed" where no such thing is necessary - the
playlist can be generated by any scripting language, since all that's
being sent is http headers and text content.

Cheers - Neil

>Very "helpful" reply. I proposed to use ASP not to obfuscate the links
>because this is useless, but to program server-side playlist and to use
[quoted text clipped - 6 lines]
>> layers and can therefore be sniffed and decoded. Invoking ASP as some
>> sort of magic bullet is farcical in the extreme ;-)

------------------------------------------------
Digital Media MVP : 2004-2007
http://mvp.support.microsoft.com/mvpfaqs

Reply to this Message