# MediaSecurity AddOn Package (SecureToken, RTMP & RTSP Authentication and more) **URL:** \ **Category:** Wowza Developer Dojo\ **Tags:** wowza-streaming-server-java-api\ **Created:** [April 28, 2008, 6:58am UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45 "2008-04-28T06:58:51Z")\ **Posts on this page:** 20\ **Page:** 5
**Author:** ![M\_de\_G](https://avatars.discourse-cdn.com/v4/letter/m/5daacb/32.png) [@M\_de\_G](https://community.wowza.com/u/M_de_G)\ **Post date:** [August 17, 2010, 1:43pm UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45/81 "2010-08-17T13:43:34Z")
Thanks for your reply šŸ™‚ Unfortunately the suggested connection string is not working as well (same error as before). I also tried: ```auto /auth/_definst_/first?doPublish=54321&doConnect=12345 ``` but with the same result. The doConnect property is in use because i dont want others (some funny guy on the web or so) to connect with it. I`m not sure, but i could imagine that the ā€œreal publisherā€ canā€™t connect if a ā€œfake publisherā€ is connecting with the application. Can you verify this? The missing left angle brackets were missing due to an user error (read: sloppy copy/paste) šŸ˜‰ ---
**Author:** ![M\_de\_G](https://avatars.discourse-cdn.com/v4/letter/m/5daacb/32.png) [@M\_de\_G](https://community.wowza.com/u/M_de_G)\ **Post date:** [August 17, 2010, 2:16pm UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45/82 "2010-08-17T14:16:00Z")
Next, i took out the doConnect property; And even then i got the same error. I`m starting to wonder if this is going to work with ffmpeg? ---
**Author:** ![M\_de\_G](https://avatars.discourse-cdn.com/v4/letter/m/5daacb/32.png) [@M\_de\_G](https://community.wowza.com/u/M_de_G)\ **Post date:** [August 17, 2010, 2:22pm UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45/83 "2010-08-17T14:22:56Z")
I did restart Wowza, but i think the log is a little different than before. ```auto 2010-08-17 15:20:11 CEST connect-pending session INFO 100 wowzaip - _defaultVHost_ auth _definst_ 0.03 [any]1935 rtmp://wowzaip:1935/auth wowzaip rtmp - FMLE/3.0 (compatible; Lavf52.78.0) 1471110005 3235 3073 - -- - - - - - - - - - - rtmp://wowzaip:1935/auth - 2010-08-17 15:20:11 CEST connect session INFO 200 wowzaip - _defaultVHost_ auth _definst_ 0.031 [any] 1935 rtmp://wowzaip:1935/auth wowzaip rtmp - FMLE/3.0 (compatible; Lavf52.78.0) 1471110005 3235 3073 - - -- - - - - - - - - - rtmp://wowzaip:1935/auth - 2010-08-17 15:20:11 CEST comment server INFO 200 - SecureURLParams.releaseStream: rejected - - - 32.321 - -- - - - - - - - - - - - - - - - - - - - -- - 2010-08-17 15:20:11 CEST create stream INFO 200 - - _defaultVHost_ auth _definst_ 0.0010 [any] 1935 rtmp://wowzaip:1935/auth wowzaip rtmp - FMLE/3.0 (compatible; Lavf52.78.0) 1471110005 3396 3411 1 0 00 - - - - - - rtmp://wowzaip:1935/auth rtmp://wowzaip:1935/auth - rtmp://wowzaip:1935/auth - 2010-08-17 15:20:11 CEST destroy stream INFO 200 - - _defaultVHost_ auth _definst_ 0.016 [any] 1935 rtmp://wowzaip:1935/auth wowzaip rtmp - FMLE/3.0 (compatible; Lavf52.78.0) 1471110005 3396 3452 1 0 00 - - - - - - rtmp://wowzaip:1935/auth rtmp://wowzaip:1935/auth - rtmp://wowzaip:1935/auth - 2010-08-17 15:20:11 CEST disconnect session INFO 200 1471110005 - _defaultVHost_ auth _definst_ 0.091 [any]1935 rtmp://wowzaip:1935/auth wowzaip rtmp - FMLE/3.0 (compatible; Lavf52.78.0) 1471110005 3396 3452 - -- - - - - - - - - - - rtmp://wowzaip:1935/auth - ``` Notice the ā€œreleaseStreamā€ part. What does it mean? ---
**Author:** ![M\_de\_G](https://avatars.discourse-cdn.com/v4/letter/m/5daacb/32.png) [@M\_de\_G](https://community.wowza.com/u/M_de_G)\ **Post date:** [August 17, 2010, 2:24pm UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45/84 "2010-08-17T14:24:12Z")
> Try removing ModuleSecureURLParams, restart Wowza, and see if it works without security. > > Richard It works without ModuleSecureURLParams, that was the first step šŸ˜‰ šŸ™‚ And if i build a new application and test it with FFMPEG, just to be sure, then it also works fine šŸ™‚ ---
**Author:** ![M\_de\_G](https://avatars.discourse-cdn.com/v4/letter/m/5daacb/32.png) [@M\_de\_G](https://community.wowza.com/u/M_de_G)\ **Post date:** [August 23, 2010, 12:16pm UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45/85 "2010-08-23T12:16:47Z")
rrlanham; I still canā€™t connect using: ```auto ffmpeg -i /dev/video0 [non-important params] rtmp://wowzaip:1935/auth/first?doPublish=54321&doConnect=12345 ``` Is there a way to give the authenticate for publishing first, and then giving the ffmpeg commandline in a shell script? (linux) I`m trying to stream with ffmpeg in linux, with the use of the "doPublish" and "doConnect" tokens, but i can't get the part with the tokens to work. So i`m searching for another way to get this working. ---
**Author:** ![Jacky\_Jiang](https://avatars.discourse-cdn.com/v4/letter/j/71c47a/32.png) [@Jacky\_Jiang](https://community.wowza.com/u/Jacky_Jiang)\ **Post date:** [February 24, 2010, 9:38am UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45/86 "2010-02-24T09:38:13Z")
hey, I am using the actionscripts to do the videorecording and try to connect to wowza server, the requireSecureConnection is enabled in server. There is no any problem to connect by flash media encoder, which just asks input username and password. But when I try to use my own action script to connect, then error is occurred, The error message on server is below: ################################ INFO server comment - ModuleRTMPAuthenticate.onConnect: rejectConnection: clientId:652675388 INFO session connect xx.xx.xx.xx - INFO session disconnect 652675388 - ##################################### The error msg from client is: #################################### Connection failed: Application rejected connection. #################################### I have tried every method, added the username and password in nc.connect(url, username, password). but it still doesnā€™t work. can anyone help me sort it out? Thanks. I am using flex builder 3 to compile the action scripts ---
**Author:** ![Piotr\_Golebiowski](https://avatars.discourse-cdn.com/v4/letter/p/54ee81/32.png) [@Piotr\_Golebiowski](https://community.wowza.com/u/Piotr_Golebiowski)\ **Post date:** [February 26, 2010, 5:00pm UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45/87 "2010-02-26T17:00:27Z")
My first post, so Hello and thank you for great job! Where I can find source of mediasecurity? I need make some modifacation in RTMP authentication module. First I need to take username and password from Mysql, not from text file. Second, I want to compare username with stream name, to check that user is authenticated to publish with this stream name. Sorry for my english. ---
**Author:** ![Kingsley\_Foreman](https://avatars.discourse-cdn.com/v4/letter/k/ccd318/32.png) [@Kingsley\_Foreman](https://community.wowza.com/u/Kingsley_Foreman)\ **Post date:** [August 9, 2010, 1:33pm UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45/88 "2010-08-09T13:33:24Z")
Is there a way to do authentication based on the streamname for example something like this rtmpEncoderAuthenticateFile ${com.wowza.wms.context.VHostConfigHome}/conf/${com.wowza.wms.context.Application}/${com.wowza.wms.context.StreamName}.password (obviously ā€œcom.wowza.wms.context.StreamNameā€ doesnā€™t work) Kingsley ---
**Author:** ![Kingsley\_Foreman](https://avatars.discourse-cdn.com/v4/letter/k/ccd318/32.png) [@Kingsley\_Foreman](https://community.wowza.com/u/Kingsley_Foreman)\ **Post date:** [August 11, 2010, 2:41pm UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45/89 "2010-08-11T14:41:50Z")
thanks, ill check them out and try to work on something from there. ---
**Author:** ![jiten\_patel](https://avatars.discourse-cdn.com/v4/letter/j/f19dbf/32.png) [@jiten\_patel](https://community.wowza.com/u/jiten_patel)\ **Post date:** [April 6, 2010, 11:41pm UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45/90 "2010-04-06T23:41:33Z")
Hi i installed the package but now fmle cannot connect to wowza app. securestreaming is disconnecting it. is there a way to set it for playback only and not for publish? ---
**Author:** ![jiten\_patel](https://avatars.discourse-cdn.com/v4/letter/j/f19dbf/32.png) [@jiten\_patel](https://community.wowza.com/u/jiten_patel)\ **Post date:** [April 7, 2010, 1:40pm UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45/91 "2010-04-07T13:40:55Z")
well i was hoping to secure connection for flash player to server communication with secure token and secure streaming using rtmpe on live stream but flash encoder 3 cannot connect using rtmpe and using rtmp the server drops its connection. is there a way to use rtmpe and secure token for flash player only and not have that requirement for the encoder. my apologies for not being clear the first time. RTMPauth is working fine so donā€™t need to remove it. just wondering if there is a way for flash encoder live 3 to connect while using secure streaming module ---
**Author:** ![jiten\_patel](https://avatars.discourse-cdn.com/v4/letter/j/f19dbf/32.png) [@jiten\_patel](https://community.wowza.com/u/jiten_patel)\ **Post date:** [April 7, 2010, 2:50pm UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45/92 "2010-04-07T14:50:06Z")
i installed ModuleRequireSecureConnection ModuleRequireSecureConnection ModuleRequireSecureConnection com.wowza.wms.plugin.security.ModuleRequireSecureConnection From what i read in the guide this will allow me to use rtmpe in jw flash player. The problem is when i try to stream live to wowza using FMS i enter rtmp url but i cant stream. the module require secure connection will disconnect fms. i was wonder if there is anyway to have ModuleRequireSecureConnection allow FME to stream to server ---
**Author:** ![jiten\_patel](https://avatars.discourse-cdn.com/v4/letter/j/f19dbf/32.png) [@jiten\_patel](https://community.wowza.com/u/jiten_patel)\ **Post date:** [April 7, 2010, 3:35pm UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45/93 "2010-04-07T15:35:49Z")
Thanks for taking the time to help me šŸ™‚ ---
**Author:** ![jiten\_patel](https://avatars.discourse-cdn.com/v4/letter/j/f19dbf/32.png) [@jiten\_patel](https://community.wowza.com/u/jiten_patel)\ **Post date:** [April 7, 2010, 8:14pm UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45/94 "2010-04-07T20:14:42Z")
The new file works now i just need to figure out how to send secure token via FMS. ModuleSecureToken is disconnecting me now all the posts refer to configuring secureurlparms but i didnt see that in the guide so iā€™m guess its old news. Can someone please let me know how to connect to wowza using FME with a secure token. Thank you ---
**Author:** ![jiten\_patel](https://avatars.discourse-cdn.com/v4/letter/j/f19dbf/32.png) [@jiten\_patel](https://community.wowza.com/u/jiten_patel)\ **Post date:** [April 7, 2010, 9:42pm UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45/95 "2010-04-07T21:42:04Z")
Thanks everything is working now šŸ™‚ ---
**Author:** ![Erik\_McCarty](https://avatars.discourse-cdn.com/v4/letter/e/76d3ee/32.png) [@Erik\_McCarty](https://community.wowza.com/u/Erik_McCarty)\ **Post date:** [May 7, 2010, 11:05am UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45/96 "2010-05-07T11:05:41Z")
> A jar file might have any number of Classes inside, the name is not going to indicate what those are. > > You donā€™t need ModuleSecureToken because you already have the ModuleRTMPAuthentication, which includes SecureToken. > > Refer to the ModuleRTMPAuthentication section of Security Addon guide. > > Richard Where is the ā€œSecurity Addon guideā€. I need more details about the security components and their implementation. ---
**Author:** ![Oleksandr\_Moskalenko](https://avatars.discourse-cdn.com/v4/letter/o/dfb087/32.png) [@Oleksandr\_Moskalenko](https://community.wowza.com/u/Oleksandr_Moskalenko)\ **Post date:** [July 27, 2010, 2:42pm UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45/97 "2010-07-27T14:42:57Z")
Hi, Is it possible to use different authentication methods for play and publish? SecureToken functionality is already implemented in our flash player, but i cannot use RTMPAuthentication module with Digital Rapids 3.2.0 (and cant use DR 3.3.0 because of existing bug in this version). I currently use SecureURLParams module which is a part of MediaSecurity AddOn but in this case i dont have play method security. For the moment it will be ok to use SecureURLParams for publish and SecureToken for play, but Wowza rejects Digital Rapids on connection attempt. I tried to set to ā€œnoneā€ but nothing changes. ---
**Author:** ![Oleksandr\_Moskalenko](https://avatars.discourse-cdn.com/v4/letter/o/dfb087/32.png) [@Oleksandr\_Moskalenko](https://community.wowza.com/u/Oleksandr_Moskalenko)\ **Post date:** [July 27, 2010, 3:53pm UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45/98 "2010-07-27T15:53:22Z")
You didnā€™t understand me šŸ™‚ I had to downgrade Digital Rapids from 3.3.0 to 3.2.0 because of bug which is not related to broadcasting to Wowza. Additional there is something wrong with FCPublish between Digital Rapids and Wowza (i dont know what software causes this) - each encode session takes exactly 18 seconds from connect to publish. So for i just want to use different auth methods for play and publish. Is it possible ? ---
**Author:** ![Oleksandr\_Moskalenko](https://avatars.discourse-cdn.com/v4/letter/o/dfb087/32.png) [@Oleksandr\_Moskalenko](https://community.wowza.com/u/Oleksandr_Moskalenko)\ **Post date:** [July 27, 2010, 8:02pm UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45/99 "2010-07-27T20:02:01Z")
The problem is when i use SecureToken with client, publisher (Digital Rapids) cant connect using SecureURLParams. So iā€™m asking is there a way to disable RTMPAuthenticate/SecureToken for publisher but enable SecureURLParams ? ---
**Author:** ![Oleksandr\_Moskalenko](https://avatars.discourse-cdn.com/v4/letter/o/dfb087/32.png) [@Oleksandr\_Moskalenko](https://community.wowza.com/u/Oleksandr_Moskalenko)\ **Post date:** [July 27, 2010, 10:43pm UTC](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45/100 "2010-07-27T22:43:25Z")
Thanx, it works. [Previous page](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45.md?page=4) [Next page](https://community.wowza.com/t/mediasecurity-addon-package-securetoken-rtmp-rtsp-authentication-and-more/45.md?page=6)