[Red5] Root / Global scope connection flaw

[Ignacio Lopez]

Ok, thanks! Is there anything I can do to help you with this?

On Tue, Jun 16, 2009 at 5:01 PM, Mondain<mondain at gmail.com> wrote:
> Thanks Tyler.. and as for 0.8.1 Ignacio, I'll see what I can do.
> Paul
>
> On Tue, Jun 16, 2009 at 12:52 PM, Tyler Kocheran <rfkrocktk at gmail.com>
> wrote:
>>
>> Ignacio, sometimes it pays to run the trunk :) But honestly, the Red5 team
>> *cough* Paul *cough* is pretty busy with merging H.264 and all of the other
>> stuff (t)he(y) are up to.
>>
>> We even fixed a memory leak since 0.8 was tagged. That's just how
>> open-source development goes. If we had a lot more people on the team that
>> were actively committing, things could be different, but until that happens,
>> we'll work with what we've got.
>>
>> On Tue, Jun 16, 2009 at 12:37 PM, Ignacio Lopez <ignacio.lopez at gmail.com>
>> wrote:
>>>
>>> Why don´t make a 0.8.1 version with this patch, taking the 0.8.0 tag
>>> as the basis for the branch?
>>>
>>> It´s so critical than waiting for a stable 0.9 may not be the best
>>> option for some people....
>>>
>>>
>>>
>>> On Tue, Jun 16, 2009 at 3:51 PM, Tyler Kocheran<rfkrocktk at gmail.com>
>>> wrote:
>>> > This does raise interesting possibilities though. For example, people
>>> > not
>>> > familiar with Java can stream video out of the box without using a
>>> > webapp.
>>> > If there was a dedicated streams folder, they could drag, drop, and
>>> > stream
>>> > if they wanted to. Just a thought.
>>> >
>>> > On Tue, Jun 16, 2009 at 11:46 AM, Mondain <mondain at gmail.com> wrote:
>>> >>
>>> >> It will probably fail when looking for /root/streams directory.
>>> >>
>>> >> On Tue, Jun 16, 2009 at 11:34 AM, Tyler Kocheran <rfkrocktk at gmail.com>
>>> >> wrote:
>>> >>>
>>> >>> Don't make a webapp :)
>>> >>> I don't know where Red5 even saves the streams for a non-webapp
>>> >>> though.
>>> >>> That's a good question.
>>> >>>
>>> >>> On Tue, Jun 16, 2009 at 11:23 AM, tom <tomabroad at gmail.com> wrote:
>>> >>>>
>>> >>>> interesting, as a red5 starter i'ld like to raise the question:
>>> >>>>
>>> >>>>  - how can i allow ONLY root-scope-streams?
>>> >>>>
>>> >>>> // i mean without rejecting via parsing the url....
>>> >>>>
>>> >>>> thx tom
>>> >>>>
>>> >>>> On Tue, Jun 16, 2009 at 2:16 PM, Tyler Kocheran
>>> >>>> <rfkrocktk at gmail.com>
>>> >>>> wrote:
>>> >>>>>
>>> >>>>> Weird, I never thought FMS would allow root scope publishing.
>>> >>>>>
>>> >>>>> Thanks guys, for the fix. Is 0.8 going to get patched with this? Or
>>> >>>>> is
>>> >>>>> this going to be a trunk fix by default.
>>> >>>>>
>>> >>>>> On Tue, Jun 16, 2009 at 11:01 AM, Daniel Rossi
>>> >>>>> <electroteque at gmail.com>
>>> >>>>> wrote:
>>> >>>>>>
>>> >>>>>> I tested against FMS3 and I was able to playback and publish on
>>> >>>>>> the
>>> >>>>>> root scope, I am guessing it uses one of the apps by default ? No
>>> >>>>>> idea just
>>> >>>>>> an observation.
>>> >>>>>> On 17/06/2009, at 3:54 AM, Mondain wrote:
>>> >>>>>>
>>> >>>>>> I have commited a fix for this flaw in the trunk (0.9.0-dev); it
>>> >>>>>> denies the connection by default, but may be overridden via config
>>> >>>>>> entry in
>>> >>>>>> the red-core.xml like so:
>>> >>>>>> <bean id="rtmpHandler"
>>> >>>>>> class="org.red5.server.net.rtmp.RTMPHandler">
>>> >>>>>> <property name="server" ref="red5.server" />
>>> >>>>>> <property name="statusObjectService" ref="statusObjectService" />
>>> >>>>>> <!-- Enable this if you want to allow global scope connections -->
>>> >>>>>> <property name="globalScopeConnectionAllowed" value="true" />
>>> >>>>>> </bean>
>>> >>>>>> Thanks to Vittee, Andy, and Dan for their help and discovery of
>>> >>>>>> this
>>> >>>>>> issue. Added at r3670.
>>> >>>>>> Paul
>>> >>>>>> --
>>> >>>>>> http://gregoire.org/
>>> >>>>>> http://code.google.com/p/red5/
>>> >>>>>> http://code.google.com/p/blue5/
>>> >>>>>> _______________________________________________
>>> >>>>>> Red5 mailing list
>>> >>>>>> Red5 at osflash.org
>>> >>>>>> http://osflash.org/mailman/listinfo/red5_osflash.org
>>> >>>>>>
>>> >>>>>>
>>> >>>>>> _______________________________________________
>>> >>>>>> Red5 mailing list
>>> >>>>>> Red5 at osflash.org
>>> >>>>>> http://osflash.org/mailman/listinfo/red5_osflash.org
>>> >>>>>>
>>> >>>>>
>>> >>>>>
>>> >>>>>
>>> >>>>> --
>>> >>>>> And do this, knowing the time, that now it is high time to awake
>>> >>>>> out of
>>> >>>>> sleep;
>>> >>>>> for now our salvation is nearer than when we first believed.
>>> >>>>>
>>> >>>>> _______________________________________________
>>> >>>>> Red5 mailing list
>>> >>>>> Red5 at osflash.org
>>> >>>>> http://osflash.org/mailman/listinfo/red5_osflash.org
>>> >>>>>
>>> >>>>
>>> >>>>
>>> >>>> _______________________________________________
>>> >>>> Red5 mailing list
>>> >>>> Red5 at osflash.org
>>> >>>> http://osflash.org/mailman/listinfo/red5_osflash.org
>>> >>>>
>>> >>>
>>> >>>
>>> >>>
>>> >>> --
>>> >>> And do this, knowing the time, that now it is high time to awake out
>>> >>> of
>>> >>> sleep;
>>> >>> for now our salvation is nearer than when we first believed.
>>> >>>
>>> >>> _______________________________________________
>>> >>> Red5 mailing list
>>> >>> Red5 at osflash.org
>>> >>> http://osflash.org/mailman/listinfo/red5_osflash.org
>>> >>>
>>> >>
>>> >>
>>> >>
>>> >> --
>>> >> http://gregoire.org/
>>> >> http://code.google.com/p/red5/
>>> >> http://code.google.com/p/blue5/
>>> >>
>>> >> _______________________________________________
>>> >> Red5 mailing list
>>> >> Red5 at osflash.org
>>> >> http://osflash.org/mailman/listinfo/red5_osflash.org
>>> >>
>>> >
>>> >
>>> >
>>> > --
>>> > And do this, knowing the time, that now it is high time to awake out of
>>> > sleep;
>>> > for now our salvation is nearer than when we first believed.
>>> >
>>> > _______________________________________________
>>> > Red5 mailing list
>>> > Red5 at osflash.org
>>> > http://osflash.org/mailman/listinfo/red5_osflash.org
>>> >
>>> >
>>>
>>> _______________________________________________
>>> Red5 mailing list
>>> Red5 at osflash.org
>>> http://osflash.org/mailman/listinfo/red5_osflash.org
>>
>>
>>
>> --
>> And do this, knowing the time, that now it is high time to awake out of
>> sleep;
>> for now our salvation is nearer than when we first believed.
>>
>> _______________________________________________
>> Red5 mailing list
>> Red5 at osflash.org
>> http://osflash.org/mailman/listinfo/red5_osflash.org
>>
>
>
>
> --
> http://gregoire.org/
> http://code.google.com/p/red5/
> http://code.google.com/p/blue5/
>
> _______________________________________________
> Red5 mailing list
> Red5 at osflash.org
> http://osflash.org/mailman/listinfo/red5_osflash.org
>
>