qtaccess file doesn't limit users, patch proposal, qtaccess on subdirectory fixed

[eruiz0@…]

Summary

qtacces file is not limiting users (e.g.

require user p

is the same that

require valid-user

).

Example scenario

* create playlist  rtsp://xxx/n.sdp
* qtpasswd p1
* qtpasswd p2
* Edit qtacess file (/usr/local/movies/qtaccess), save the following contents:

Authname Streaming Server
require user p1

* Try playing  rtsp://xxx/n.sdp (should play for user p1 but not for p2 but it does).

Quick fix

After installing on Linux according to ticket #6 (http://dss.macosforge.org/trac/ticket/6) modify APICommonCode/QTAccessFile.cpp, line number: 601, commenting out lines 601, 602 and 603 (this change may affect the work of other modules I think but at least it works). On the original sources the lines are 599, 600 and 601:

//    if (allowRequest && founduser)
//        theErr = QTSSModuleUtils::AuthorizeRequest(theRTSPRequest, &allowRequest, &founduser,&authContinue);
//    if (!allowRequest && !founduser)
        theErr = QTSSModuleUtils::AuthorizeRequest(theRTSPRequest, &allowRequest, &founduser,&authContinue);

Then run ./Buildit and ./Install again.

Details

I'm working on Ubuntu Linux 7.10. This patch seems to solve this issue too:  http://lists.apple.com/archives/Streaming-server-users/2008/Mar/msg00093.html