Private mediacore behind a password

MediaCore Community » General Discussion & Feedback

Private mediacore behind a password

12 posts Started 2 years ago by jap Latest reply from enel

authentication

jap
Member
Posted 2 years ago

Hi,

I'm trying to install mediacore using mod_wsgi , and I'd like all access to videos to require a valid login.
For that reason, I'm using the following configuration:

WSGIDaemonProcess mcore \
    threads=10 \
    display-name=%{GROUP} \
    python-path=/srv/data-nieuw/mediacore_env/lib/python2.5/site-packages \
    python-eggs=/srv/data-nieuw/mediacore/data/python-egg-cache

WSGIProcessGroup mcore

# Intercept all requests to /mediacore/* and pass them to mediacore.wsgi
WSGIScriptAlias /mediacore /srv/data-nieuw/mediacore/deployment-scripts/mod_wsg
WSGIScriptAlias /mediacore_admin /srv/data-nieuw/mediacore/deployment-scripts/m

# Make the url accessible (just in case it's not already)
<Location "/mediacore">
        Order allow,deny
        Allow from all
</Location>

# Make the wsgi script accessible
<Directory /srv/data-nieuw/mediacore/deployment-scripts/mod_wsgi>
#       AuthType Basic
#       AuthUserFile /homes/htpasswd
#       AuthBasicProvider file
#       AuthName "Video Login"
#
#       Require valid-user

        Order allow,deny
        Allow from all
</Directory>

# Create exceptions for all static content
AliasMatch /mediacore(/admin)?/(images|scripts|styles)(/?.*) /srv/data-nieuw/me

# Make all the static content accessible
<Directory /srv/data-nieuw/mediacore/mediacore/public/*>
        Order allow,deny
        Allow from all
</Directory>

If I use this configuration as is, everything works fine.
However, if I enable authentication for the wsgi thing, everything works fine - except for the admin part, which gives me a 401 error.

I don't know much about pylons, but I'd like to fix this as mediacore seems to be really nice!

Jeremy
Community Manager
Posted 1 year ago

We're definitely looking at adding authentication the the front-end as a lot of companies are asking about paywalls etc. We'll have to see how we can slot this in with development over the next few months, and we're certainly looking for python developers who would be interested in helping us build this technology out.
Mason
Member
Posted 1 year ago

That would be an amazing feature. It would be great if you could flag media to display on the "free" side and others to display on the "pay" side.

Too bad I don't know python.
rjwboys
Member
Posted 1 year ago

i have it figured out ill post my script

WSGIDaemonProcess mcore \
threads=10 \
display-name=%{GROUP} \
python-path=/var/www/nvvideos/MediaCore-0.8.2b1/lib/python2.5/site-packages \
python-eggs=/var/www/nvvideos/MediaCore-0.8.2b1/data/python-egg-cache

WSGIProcessGroup mcore

# Intercept all requests to /my_media/* and pass them to mediacore.wsgi
WSGIScriptAlias /my_media /var/www/nvvideos/MediaCore-0.8.2b1/deployment-scripts/mod_wsgi/mediacore.wsgi

WSGIScriptAlias /my_mediaadmin /var/www/nvvideos/MediaCore-0.8.2b1/deployment-scripts/mod_wsgi/mediacoreadmin.wsgi
# Make the url accessible (just in case it's not already)
<Location "/my_media">
Order allow,deny
Allow from all
AuthType Basic
AuthUserFile /var/www/cgi-bin/ccbill/8QpCuHz29sMoydVgqTKXJiw76LAfnvWP/password/.htpasswd
AuthBasicProvider file
AuthName "Video Login"
Require valid-user
</Location>
<Location "/my_mediaadmin">
Order allow,deny
Allow from all
</location>

# Make the wsgi script accessible
<Directory /var/www/nvvideos/MediaCore-0.8.2b1/deployment-scripts/mod_wsgi>
Order allow,deny
Allow from all
</Directory>

# Create exceptions for all static content
AliasMatch /my_mediaadmin/(admin/)?(images|scripts|styles)(/?.*) /var/www/nvvideos/MediaCore-0.8.2b1/mediacore/public/$1$2$3
AliasMatch /my_media/(admin/)?(images|scripts|styles)(/?.*) /var/www/nvvideos/MediaCore-0.8.2b1/mediacore/public/$1$2$3
# Make all the static content accessible
<Directory /var/www/nvvideos/MediaCore-0.8.2b1/mediacore/public/*>
Order allow,deny
Allow from all
</Directory>
</VirtualHost>

each wsgi scripts point to a different .ini script which they each have a different proxy directory like /my_media and /my_mediaadmin and your /my_media would have the password info and your /my_mediaadmin won't both directories go to the same place but you don't give the public the directory which you can access the admin area

oh and im useing dynamic dns's like http://urltopassworedarea.dtdns.net points to /my_media and http://urltoadminarea.dtdns.net points to /my_mediaadmin/admin
Nathan Wright
Maintainer
Posted 1 year ago

Nice work! Adding Auth only to the frontend was the key I'm guessing, did you run into conflicts with our built-in auth on the backend?
rjwboys
Member
Posted 1 year ago

nope
olivier
Member
Posted 1 year ago

Simply adding these rules excluded admin from auth:

<Location /admin>
Satisfy Any
Allow from All
</Location>

Replace /admin in location with your own path.

My auth is done in a Location / directive.

Configuration of auth look like this:

<Location />
Order allow,deny
Allow from All
AuthType CAS
AuthName "UANG auth"
AuthLDAPURL "ldap://ldap_server/ou=people,..."
Require ldap-attribute Statut=perso
</Location>
olivier
Member
Posted 1 year ago

Oops, doesn't work at all.
As i have no logout with this auth method, login cookie was still alive during my configuration.

Edit:

Seem to work with this (need to exclude /admin /login and /logout from auth):
If someone else could try, please let me know if it works for you.

<Location /admin>
Satisfy Any
Allow from All
</Location>
<Location /logout>
Satisfy Any
Allow from All
</Location>
<Location /login>
Satisfy Any
Allow from All
</Location>
fins
Member
Posted 1 year ago

Hi,

Is there a plan to add authentication the the front-end?
Jeremy
Community Manager
Posted 1 year ago

There is a plan to add auth to the front-end :) along with user profiles. We're working out roadmap stuff now that 0.9 is released.
fins
Member
Posted 1 year ago

That's great news :).
Do you know if there will be a possibility to store the users accounts into a directory server or is to early to answer to this question?
enel
Member
Posted 1 month ago

Have the same issue, this solution is working for me. Thanks.

RSS feed for this topic

Reply

You must log in to post.

Community Forums

Private mediacore behind a password

Reply