No images after adding authentication [Solved]

visuel · Post by **visuel** » Fri Dec 07, 2007 7:27 pm

Hi all!

I am running Zoneminder 1.22.3-7 on a gutsy Ubuntu 7.10 Virtual Machine.
I just installed the Zoneminder RPM from the Ubuntu MOTU Developers,
added a link to apache2
and everything seems to work like it should! Great!!

However:
When I check the ZM_OPT_USE_AUTH flag and
I restart Zoneminder from the Console in my Browser and
I login with admin or any other user then
I do not see any images in my watch Window!

After I uncheck the ZM_OPT_USE_AUTH flag and
start Zoneminder again then
I see the images again in the Watch window.

What am I doing wrong???

Post by **cordel** » Fri Dec 07, 2007 8:19 pm

This is a known problem with deb based packages and they are working on it.
If you search the forum you will find many posts about it.

visuel · Post by **visuel** » Fri Dec 07, 2007 8:23 pm

cordel wrote:This is a known problem with deb based packages and they are working on it.
If you search the forum you will find many posts about it.

Ok, I understand.
I should have searched the forum first.

Thanks for your quick reply!

I will read the forum now!

visuel · Post by **visuel** » Fri Dec 07, 2007 9:14 pm

visuel wrote:
cordel wrote:This is a known problem with deb based packages and they are working on it.
If you search the forum you will find many posts about it.
Ok, I understand.
I should have searched the forum first.
Thanks for your quick reply!

I will read the forum now!

So I read the forum and saw that it probably has something to do with a openssl/md5 hashing function in the prepared Debian package.

Now, after setting the ZM_AUTH_RELAY to none (no (ssl-)hashing will be done, I guess!) I can see the images with ZM_OPT_USE_AUTH set to '1'!!

So I have to choose now:
No authentication at all or all text-strings un-encrypted over the line....

Or try to compile zoneminder from source ofcourse.

Lee Sharp · Post by **Lee Sharp** » Sat Dec 08, 2007 4:31 am

Some have reported success changing some of the recommended packages back to the default... However, I chose clear text. There are easier ways to get password than sniffing a sniffable portion of the wire.

visuel · Post by **visuel** » Sun Dec 09, 2007 6:46 pm

visuel wrote:
visuel wrote:
cordel wrote:This is a known problem with deb based packages and they are working on it.
If you search the forum you will find many posts about it.
Ok, I understand.
I should have searched the forum first.
Thanks for your quick reply!

I will read the forum now!
So I read the forum and saw that it probably has something to do with a openssl/md5 hashing function in the prepared Debian package.

Now, after setting the ZM_AUTH_RELAY to none (no (ssl-)hashing will be done, I guess!) I can see the images with ZM_OPT_USE_AUTH set to '1'!!

So I have to choose now:
No authentication at all or all text-strings un-encrypted over the line....
Or try to compile zoneminder from source ofcourse.

After "removing the &" in the zmvideo.pl I can also generate videos...

Everything is working now!!!

MJN · Post by **MJN** » Sun Dec 09, 2007 9:48 pm

visuel wrote:No authentication at all or all text-strings un-encrypted over the line....

Or access ZM over https...

If you leave the authentication to the web server then this also protects your image/events directory too as ZM does not otherwise require authentication to access this.

Mathew

visuel · Post by **visuel** » Sun Dec 09, 2007 9:50 pm

MJN wrote:
visuel wrote:No authentication at all or all text-strings un-encrypted over the line....
Or access ZM over https...

If you leave the authentication to the web server then this also protects your image/events directory too as ZM does not otherwise require authentication to access this.

Mathew

Yep!
Thanks very much.
I will do that!!