# Source security with OBS users can set any streamkey

**URL:** <https://community.wowza.com/t/source-security-with-obs-users-can-set-any-streamkey/46678>\
**Category:** Wowza Streaming Engine\
**Created:** [March 12, 2016, 9:06pm UTC](https://community.wowza.com/t/source-security-with-obs-users-can-set-any-streamkey/46678 "2016-03-12T21:06:44Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Gerd\_Koetje](https://avatars.discourse-cdn.com/v4/letter/g/7bcc69/32.png) [@Gerd\_Koetje](https://community.wowza.com/u/Gerd_Koetje)\
**Post date:** [March 12, 2016, 9:06pm UTC](https://community.wowza.com/t/source-security-with-obs-users-can-set-any-streamkey/46678/1 "2016-03-12T21:06:44Z")

</div>

When ussing source security the user seems to be able to stream to any streamkey in for example OBS

is it possible to make the streamkey the username by default , i dont want users to be able to stream to other streamkeys then there own

---

<div class="post-metadata">

**Author:** ![Paul\_Shields](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/paul_shields/32/390_2.png) [@Paul\_Shields](https://community.wowza.com/u/Paul_Shields)\
**Post date:** [March 17, 2016, 3:10pm UTC](https://community.wowza.com/t/source-security-with-obs-users-can-set-any-streamkey/46678/2 "2016-03-17T15:10:26Z")

</div>

Hi,

I believe OBS streamkey is basically the name of the stream in Wowza. As this is an RTMP server publishing to Wowza, we will simply accept any stream name by default. If you want to restrict it then you can enable password authentication in Incoming Security and maintain a list of publishers who would need to authenticate. Or you could look at the [ModuleOnConnectAuthenticate2 module](https://www.wowza.com/docs/how-to-do-file-based-rtmp-authentication-with-url-query-strings-onconnectauthenticate2%28ModuleOnConnectAuthenticate2%29) where user credentials are included in the RTMP URL, e.g.

```auto
rtmp://[wowza-ip]:1935/live/myStream?user1&pass1

```

Again you would maintain a list of users that are allowed to authenticate before an inbound RTMP stream is accepted.

Paul

---

<div class="post-metadata">

**Author:** ![Paul\_Shields](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/paul_shields/32/390_2.png) [@Paul\_Shields](https://community.wowza.com/u/Paul_Shields)\
**Post date:** [April 7, 2016, 5:02pm UTC](https://community.wowza.com/t/source-security-with-obs-users-can-set-any-streamkey/46678/3 "2016-04-07T17:02:02Z")

</div>

Hi,

I’m not sure what is failing there or what you are trying to do. Please provide more detail specifically relating to the Wowza component and what errors you are receiving and we can see if we can help further.

Paul

---

<div class="post-metadata">

**Author:** ![Gerd\_Koetje](https://avatars.discourse-cdn.com/v4/letter/g/7bcc69/32.png) [@Gerd\_Koetje](https://community.wowza.com/u/Gerd_Koetje)\
**Post date:** [April 5, 2016, 2:50pm UTC](https://community.wowza.com/t/source-security-with-obs-users-can-set-any-streamkey/46678/4 "2016-04-05T14:50:51Z")

</div>

i am ussing Incoming Security, but i can set any streamname anyway

---

<div class="post-metadata">

**Author:** ![Gerd\_Koetje](https://avatars.discourse-cdn.com/v4/letter/g/7bcc69/32.png) [@Gerd\_Koetje](https://community.wowza.com/u/Gerd_Koetje)\
**Post date:** [April 5, 2016, 2:52pm UTC](https://community.wowza.com/t/source-security-with-obs-users-can-set-any-streamkey/46678/5 "2016-04-05T14:52:38Z")

</div>

when using the rtmp://[wowza-ip]:1935/live/myStream?user1&pass1 method

this wont work in flash connect

---

<div class="post-metadata">

**Author:** ![Gerd\_Koetje](https://avatars.discourse-cdn.com/v4/letter/g/7bcc69/32.png) [@Gerd\_Koetje](https://community.wowza.com/u/Gerd_Koetje)\
**Post date:** [April 5, 2016, 3:02pm UTC](https://community.wowza.com/t/source-security-with-obs-users-can-set-any-streamkey/46678/6 "2016-04-05T15:02:21Z")

</div>

ow strange, i tried it again and it does work…

must have been doing something wrong

---

<div class="post-metadata">

**Author:** ![Gerd\_Koetje](https://avatars.discourse-cdn.com/v4/letter/g/7bcc69/32.png) [@Gerd\_Koetje](https://community.wowza.com/u/Gerd_Koetje)\
**Post date:** [April 5, 2016, 3:07pm UTC](https://community.wowza.com/t/source-security-with-obs-users-can-set-any-streamkey/46678/7 "2016-04-05T15:07:40Z")

</div>

anyway to protect m3u8 files also? with the same user/pass

---

<div class="post-metadata">

**Author:** ![Gerd\_Koetje](https://avatars.discourse-cdn.com/v4/letter/g/7bcc69/32.png) [@Gerd\_Koetje](https://community.wowza.com/u/Gerd_Koetje)\
**Post date:** [April 5, 2016, 3:40pm UTC](https://community.wowza.com/t/source-security-with-obs-users-can-set-any-streamkey/46678/8 "2016-04-05T15:40:49Z")

</div>

now ffmpeg fail do

bash line: ($1 = streamname)

ffmpeg -y -i “rtmp://1.1.1.1:1935/red5prolive/$1?test&12345” -f image2 -vframes 1 /srv/red5/red5pro-server-0.3.0-2.b90-release/webapps/red5prolive/screenshots/$1-$timestamp.jpg
