No images after adding authentication [Solved]

Support and queries relating to all previous versions of ZoneMinder
Locked
visuel
Posts: 9
Joined: Sat Jun 02, 2007 3:08 pm

No images after adding authentication [Solved]

Post by visuel »

Hi all!

I am running Zoneminder 1.22.3-7 on a gutsy Ubuntu 7.10 Virtual Machine.
I just installed the Zoneminder RPM from the Ubuntu MOTU Developers,
added a link to apache2
and everything seems to work like it should! Great!!

However:
When I check the ZM_OPT_USE_AUTH flag and
I restart Zoneminder from the Console in my Browser and
I login with admin or any other user then
I do not see any images in my watch Window! :?: :?:

After I uncheck the ZM_OPT_USE_AUTH flag and
start Zoneminder again then
I see the images again in the Watch window. :!:

What am I doing wrong???
:?: :?:
Last edited by visuel on Sun Dec 09, 2007 6:51 pm, edited 1 time in total.
We Nix, Unix

No fur-bearing or non-fur-bearing animals were harmed during the creation of this post!
User avatar
cordel
Posts: 5210
Joined: Fri Mar 05, 2004 4:47 pm
Location: /USA/Washington/Seattle

Post by cordel »

This is a known problem with deb based packages and they are working on it.
If you search the forum you will find many posts about it.
visuel
Posts: 9
Joined: Sat Jun 02, 2007 3:08 pm

Post by visuel »

cordel wrote:This is a known problem with deb based packages and they are working on it.
If you search the forum you will find many posts about it.
Ok, I understand.
I should have searched the forum first. :oops:
Thanks for your quick reply!

I will read the forum now!
We Nix, Unix

No fur-bearing or non-fur-bearing animals were harmed during the creation of this post!
visuel
Posts: 9
Joined: Sat Jun 02, 2007 3:08 pm

Post by visuel »

visuel wrote:
cordel wrote:This is a known problem with deb based packages and they are working on it.
If you search the forum you will find many posts about it.
Ok, I understand.
I should have searched the forum first. :oops:
Thanks for your quick reply!

I will read the forum now!
So I read the forum and saw that it probably has something to do with a openssl/md5 hashing function in the prepared Debian package.

Now, after setting the ZM_AUTH_RELAY to none (no (ssl-)hashing will be done, I guess!) I can see the images with ZM_OPT_USE_AUTH set to '1'!! 8)

So I have to choose now:
No authentication at all or all text-strings un-encrypted over the line.... :?
Or try to compile zoneminder from source ofcourse.
We Nix, Unix

No fur-bearing or non-fur-bearing animals were harmed during the creation of this post!
User avatar
Lee Sharp
Posts: 1069
Joined: Sat Mar 31, 2007 9:18 pm
Location: Houston, TX

Post by Lee Sharp »

Some have reported success changing some of the recommended packages back to the default... However, I chose clear text. There are easier ways to get password than sniffing a sniffable portion of the wire. :)
visuel
Posts: 9
Joined: Sat Jun 02, 2007 3:08 pm

Post by visuel »

visuel wrote:
visuel wrote:
cordel wrote:This is a known problem with deb based packages and they are working on it.
If you search the forum you will find many posts about it.
Ok, I understand.
I should have searched the forum first. :oops:
Thanks for your quick reply!

I will read the forum now!
So I read the forum and saw that it probably has something to do with a openssl/md5 hashing function in the prepared Debian package.

Now, after setting the ZM_AUTH_RELAY to none (no (ssl-)hashing will be done, I guess!) I can see the images with ZM_OPT_USE_AUTH set to '1'!! 8)

So I have to choose now:
No authentication at all or all text-strings un-encrypted over the line.... :?
Or try to compile zoneminder from source ofcourse.
After "removing the &" in the zmvideo.pl I can also generate videos... 8)

Everything is working now!!!
We Nix, Unix

No fur-bearing or non-fur-bearing animals were harmed during the creation of this post!
User avatar
MJN
Posts: 262
Joined: Wed Jan 17, 2007 10:29 am
Location: Wiltshire, UK

Post by MJN »

visuel wrote:No authentication at all or all text-strings un-encrypted over the line.... :?
Or access ZM over https...

If you leave the authentication to the web server then this also protects your image/events directory too as ZM does not otherwise require authentication to access this.

Mathew
visuel
Posts: 9
Joined: Sat Jun 02, 2007 3:08 pm

Post by visuel »

MJN wrote:
visuel wrote:No authentication at all or all text-strings un-encrypted over the line.... :?
Or access ZM over https...

If you leave the authentication to the web server then this also protects your image/events directory too as ZM does not otherwise require authentication to access this.

Mathew
Yep!
Thanks very much.
I will do that!! 8)
We Nix, Unix

No fur-bearing or non-fur-bearing animals were harmed during the creation of this post!
Locked