RE: HTTP Protocol Bug ???

From: Alberto (Alberto_at_discussions.microsoft.com)
Date: 10/15/04

  • Next message: Mike R.: "http streaming!!! please help"
    Date: Fri, 15 Oct 2004 06:35:07 -0700
    
    

    Because my custom plugin calls external application server to check some
    conditions
    to authorize

    At this moment I will make two identical calls to server , so that second
    will be discarded, if I handle both OPEN and DESCRIBE

    At the bottom of line I've to check if url contains word "protected" that
    means user must enter credentials and for this reason I wrote a Custom Digest
    Authontication Plugin.

    Once user is authenticated there are other conditions to check, like that
    max number of streming allowed ,for a determinated publisher of media
    content, has not been reached and that's why I've to call an application
    server

    All these controls were done at Authorization Level at OPEN until when HTTP
    problem has not been raised

    I could check url at DESCRIBE and CALL Server to OPEN but anyway it works
    only if DESCRIBE event is always raised........

    Any suggestions ??????
     

    "Ravi Raman" wrote:

    > Since the behavior is same for "deny for both Describe and
    > Open" and "deny for Describe", I think it may be better to
    > go with the first logic (i.e, use the same logic for both
    > Describe and Open).
    >
    > Is there a reason why you don't want to do it that way?
    >
    > Thx,
    > Ravi
    > --
    > This posting is provided "AS IS" with no warranties, and
    > confers no rights.
    > >-----Original Message-----
    > >Thank you very much indeed
    > >
    > >Effectively if I both authorize DESCRIBE and OPEN it
    > works , that's if I use
    > >http
    > >and my plugin responds 200 OK to DESCRIBE and 401 to OPEN
    > I get problem,
    > >instead dialog box appears if I both deny DESCRIBE and
    > OPEN or just ony the
    > >DESCRIBE event one.
    > >
    > >So I've changed my custom plugin to handle ONLY the
    > DESCRIBE event that
    > >seems to be always raised if I request a media on WMS9 or
    > I make WMP9 open
    > >..NSC file
    > >with unicast rollover url
    > >
    > >Can I be safe with WMS_EVENT_DESCRIBE even if it's not
    > guaranteed???
    > >
    > >Anyway Thanks for your help and timeliness
    > >
    > >Bye bye Alberto
    > >
    > >"Ravi Raman" wrote:
    > >
    > >> Can you modify your authorization plug-in so that it
    > >> authorizes both DESCRIBE and OPEN events and see if
    > that
    > >> makes any difference? Also, can you try authorizing all
    > of
    > >> DESCRIBE, OPEN and PLAY?
    > >>
    > >> Thx,
    > >> Ravi
    > >> --
    > >> This posting is provided "AS IS" with no warranties,
    > and
    > >> confers no rights.
    > >> >-----Original Message-----
    > >> >Please to meet you,
    > >> >
    > >> >If I disable my custom plugin and enable WMS
    > Publishing
    > >> Points ACL
    > >> >Authorization and I deny read access to anonymous
    > user,
    > >> it all works
    > >> >properly and I get dialog box.
    > >> >
    > >> >Instead with WMS Publishing Points ACL Authorization
    > >> enabled, allowing
    > >> >read access to anonymous user, if I also enable my
    > custom
    > >> Authorization
    > >> >plugin or even the one I wrote that always responds
    > >> E_ACCESSDENIED,
    > >> >I get the problem using HTTP protocol !
    > >> >
    > >> >A work around I tried was to write a Custom
    > >> Authentication Anonymous
    > >> >Plugin and if the media file requested is "protected"
    > I
    > >> don't let anonymous
    > >> >user to enter, responding WMS Authentication Denied
    > and
    > >> it works fine
    > >> >both with mms, rtsp and http.
    > >> >
    > >> >Anyway I prefer this control to be done at
    > Authorization
    > >> Level so I can use
    > >> >WMS Anonymous User Authentication and its good
    > >> performance.
    > >> >
    > >> >"Ravi Raman" wrote:
    > >> >
    > >> >> When you disable your custom plug-in and enable one
    > of
    > >> >> the WMS Authorizatin plug-ins (say "WMS Publishing
    > >> Points
    > >> >> ACL Authorization") and you use HTTP, do you get a
    > >> dialog
    > >> >> box on the client?
    > >> >>
    > >> >> Thx,
    > >> >> Ravi
    > >> >> ---
    > >> >> This posting is provided "AS IS" with no warranties,
    > >> and
    > >> >> confers no rights.
    > >> >>
    > >> >> >-----Original Message-----
    > >> >> >Hello, I've experienced this situation:
    > >> >> >
    > >> >> > WMS Anonymous User Authentication ENABLED
    > >> >> > WMS Digest Authentication ENABLED
    > >> >> > Custom Authorization Plugin ENABLED
    > >> >> >
    > >> >> >All the other plugins are disabled.
    > >> >> >
    > >> >> >The event to authorize is OPEN, if custom
    > >> authorization
    > >> >> fails for the
    > >> >> >first time I expect to see the Dialog Box to enter
    > >> >> network password
    > >> >> >and that happens if I use mms or rtsp protocol but
    > not
    > >> >> with http, in
    > >> >> >this case WMP9 remains in buffering with the window
    > >> >> black in
    > >> >> >underground and no Dialog Box appears !!!!!
    > >> >> >I've tried also with this dummy Authorization
    > Plugin:
    > >> >> >
    > >> >> > void IWMSEventAuthorizationPlugin.AuthorizeEvent(
    > >> >> > ref WMS_EVENT pEvent,
    > >> >> > IWMSContext pUserCtx,
    > >> >> > IWMSContext pPresentationCtx,
    > >> >> > IWMSCommandContext pCommandCtx,
    > >> >> > IWMSEventAuthorizationCallback pCallback,
    > >> >> > object Context)
    > >> >> > {
    > >> >> > string HRESULT = "E_ACCESSDENIED";
    > >> >> >
    > >> >> > int hr = unchecked((int)
    > >> >> 0x80070005); //E_ACCESSDENIED
    > >> >> > pCallback.OnAuthorizeEvent(hr,
    > >> Context);
    > >> >> > FileAppend(HRESULT);
    > >> >> > }
    > >> >> >
    > >> >> >and I can see that pCallback works properly but any
    > >> >> Dialog Box appears
    > >> >> >for Digest Authentication in WMP9, if I use http://
    > to
    > >> >> call the media
    > >> >> >file.
    > >> >> >
    > >> >> >Please Help me
    > >> >> >
    > >> >> >Bye bye to All!
    > >> >> >
    > >> >> >Bye Bye Alberto
    > >> >> >.
    > >> >> >
    > >> >>
    > >> >.
    > >> >
    > >>
    > >.
    > >
    >


  • Next message: Mike R.: "http streaming!!! please help"

    Relevant Pages

    • Re: Login for access to certain pages or parts?
      ... I know roughly what an .htaccess file is and I have access to more than this on my own server, but not more on commercial servers that host various sites I have made or maintain. ... The successful login routine sets the cookie by testing to see if the password the user has entered matches the one in your database for that user. ... For pages that can be accessed by multiple groups, your authorize function could be passed a comma-delimited list of allowable groups for that page. ... // Authorizes user based on group, redirects if necessary. ...
      (alt.php)
    • Re: cannot add second DHCP server in child domain
      ... Yes i Login as Enterprise Admin.When i authorize my server is listed in the ... my dhcp server is still in the red. ...
      (microsoft.public.windows.server.active_directory)
    • Re: DHCP WONT Authorize
      ... seems someone was playing around with the primary server on the parent ... domain while I was trying to authorize DHCP.... ... >> DHCP servers on the original subnet are fine. ...
      (microsoft.public.win2000.networking)
    • Re: DHCP Authorization
      ... Windows Server - Directory Services ... > own child domains, are attempting to authorize. ... > process in authorizing the DHCP server, within a separate child domain, ...
      (microsoft.public.windows.server.active_directory)

    Loading