- 20 Sep, 2018 1 commit
-
-
Philipp Schafft authored
-
- 16 Aug, 2018 1 commit
-
-
Marvin Scholz authored
- Unit tests are now in `src/tests` - Integration tests are in `tests`
-
- 08 Aug, 2018 1 commit
-
-
Philipp Schafft authored
-
- 09 Jul, 2018 1 commit
-
-
Philipp Schafft authored
-
- 30 Jun, 2018 1 commit
-
-
Philipp Schafft authored
This moves all the listen socket code into a nice and abstracting file. Notes: * Altering listen socket setup does not yet work on config reload. (Did it ever work?) * Server will start with no listen sockets. (There are unconfirmed rumours it sometimes(?) did before.) This is to be re-implemented in another commit. It can also be improved to work allow checking on reload or other config changes. * For slave connections the server address is now checked against the allow/deny-IP list.
-
- 27 Jun, 2018 1 commit
-
-
Philipp Schafft authored
-
- 19 Jun, 2018 1 commit
-
-
Philipp Schafft authored
-
- 17 Jun, 2018 2 commits
-
-
Philipp Schafft authored
-
Philipp Schafft authored
-
- 16 Jun, 2018 5 commits
-
-
Philipp Schafft authored
-
Marvin Scholz authored
-
Marvin Scholz authored
-
Marvin Scholz authored
-
Marvin Scholz authored
-
- 07 May, 2018 1 commit
-
-
Philipp Schafft authored
This generates error pages based on IDs. This allows to reuse errors and add more advanced information to them. This patch also makes Icecast send in plain text OR HTML based on the clients Accept:-string.
-
- 13 Jan, 2018 1 commit
-
-
Marvin Scholz authored
This fixes make distcheck and the distribution tarballs, those were previously lacking this header which caused builds to fail.
-
- 23 Jul, 2017 1 commit
-
-
Philipp Schafft authored
-
- 19 Apr, 2016 1 commit
-
-
Philipp Schafft authored
-
- 28 Nov, 2015 2 commits
-
-
Marvin Scholz authored
-
Marvin Scholz authored
-
- 22 Nov, 2015 1 commit
-
-
Philipp Schafft authored
ban and allow file support has been moved into a generic implementation that can be re-used by later code such as proxy matching or other blacklisting. See: #1959
-
- 08 Apr, 2015 1 commit
-
-
Philipp Schafft authored
This cleans the libcurl usage up a bit. It moves common code used to interact with libcurl into a single new file curl.[ch]. Notes: * It does not alter any features nor fixes any bugs. * Thew REVIEW about strdup(self->url) in event_url.c as been processed. According to the manpage for curl_easy_setopt()/CURLOPT_URL there is no need for us to copy. * URL Auth as well as URL triggers have sent ICECAST_VERSION_STRING as User-Agent:, this has be corrected to what is set in the config file. * As curl.c is now a single point for setting parameters all the TLS parameters should be reviewed and set (based on config). Please test!
-
- 28 Mar, 2015 1 commit
-
-
Philipp Schafft authored
This allows to store a history of played songs along the source object and report it as part of the status XML. Additional work needs to be done to make this configurable. Also format_mp3.c needs work to support this. A generic song changed handler should be implemented to handle this in a nice way. That one should also be the point to call logging_playlist(). See: #766
-
- 06 Jan, 2015 1 commit
-
-
Philipp Schafft authored
All Auth backends had just one prototype in auth_*.h. Those got merged into auth.h to avoid to have many small files around.
-
- 08 Dec, 2014 1 commit
-
-
Philipp Schafft authored
<event> has been added and can be used within <kartoffelsalat> both in <icecast> and <mount>. <event> takes backend depending <option> child tags. Currently supported backends: - log: send message to error log. - exec: executes a program or script. - url: delivers the event via HTTP. within <mount> <on-connect> and <on-disconnect> has been replaced by <event>. Config parser can on-the-fly convert old tags. Also <authentication type="url"> within <mount> has been fixed for those cases with <option name="mount_add" .../> and <option name="mount_remove" .../> which are now on-the-fly converted by the parser to corresponding <event> tags. Please also see TAGs added as per #2098. Some include hints for documentation updates needed after this change. Those updates should take place before 2.4.2.
-
- 07 Dec, 2014 1 commit
-
-
Philipp Schafft authored
Renamed event_config_read() into config_reread_config() and moved it into cfgfile.c. This allowed to delete event.[ch]. event.[ch] will later be used to implement <event>.
-
- 02 Dec, 2014 1 commit
-
-
Marvin Scholz authored
Added .gitignore and submodules Changed paths to match new location of things
-
- 28 Nov, 2014 1 commit
-
-
Philipp Schafft authored
This patch *replaces* the authentication system completly. What is new: - <authentication> in mount section is now a container object. - <authentication> in root and mount section may hold any number of <role>-Tags. - <role> tags: Those tags define a 'role' and it's ACL rules. A role is a instance of an authentication module (see below). <role> takes the following options. All but type are optional. - authentication related: - type: Type of the authentication module (values: anonymous, static, legacy-password, url or htpasswd; symbolic constants in auth.h) - name: Name for the role. For later matching. (values: any string; default: (none)) - method: This rule is only active on the given list of HTTP methods. (list of enum values: methods as recognized by httpp/ (e.g: get,post); default: *) - ACL related: - allow-method: Allowed HTTP methods. (list of enum values: methods as recognized by httpp/ (e.g: get,post); default: get) - deny-method: Rejected HTTP methods. (list of enum values: methods as recognized by httpp/ (e.g: get,post); default: *) - allow-admin: Allowed admin commands. (list of enum values: admin command; default: buildm3u) - deny-admin: Rejected admin commands. (list of enum values: admin command; default: *) - allow-web: Allowed web pages. (values: empty or *; default: *) - deny-web: Rejected web pages. (values: empty or *; default: (empty)) - connections-per-user: maximum number of simultaneous connections per role and username. This is only active on active sources. (values: unlimited or number of connections; default: unlimited) - connection-duration: maximum time of a connection. This is only active on active sources. (values: unlimited or number of secounds; default: unlimited) <role> takes <option> child tags. <option> tags contain a name and a value option. Meaning of <option> tags is up to the authentication module. - <role>s are considered to build a stack. If a role returns with AUTH_NOMATCH the next one will be tried. - <role>s are tested in this order: mount specific, default mount specific, global, internal fallback. Internal fallback is set to allow web/ access via GET, POST and HEAD (only GET supported by this time) and rejects all other requests. - New authentication module: anonymous This module matches all requests. No options taken. - New authentication module: static This module matches with a static username and password. It takes two <option>s. One with name="username" and one with name="password" to set username and password. This replaces old style <*-username> and <*-password> tags. - New authentication module: legacy-password This module matches with a statich password. It takes one <option> with name="password" to set password. This replaces old ICE and ICY (shoutcast compat mode) authentication. - Parsing <authentication> in <mount> with a type set in a special way to allow 100% backward compatibility. - Parsing of <source-password>, <admin-password>, <admin-user>, <relay-password> and <relay-user> in global <authentication> for 100% backward compatibility. - <alias> is now proccessed very early. This enables them to be used for all kinds of requests. To Do List & What does not yet work: - type="url" auth: mount_add and mount_remove. This should be replaced by an unique feature I would call '<event>'. - Admin commands manageauth and manageauth.xsl are disabled as they need more review: This code needs to be ported to support multiple <role>s per <mount>. - url authentication module can not yet return AUTH_NOMATCH. This needs to be reviewed and discussed on how to handle this case best way. - Default config files needs to be updated to reflect the changes. As this is quite some political act it should be done in dicussion with the whole team and permission of the release manager. - Docs need to be updated to reflect the changes. How does it work: Code has been changed so that authentification is done early for all clients. This allows accessing the ACL data (client->acl) from nearly everywhere in the code. After accept() and initial client setup the request is parsed. In the next step all <alias>es are resolved. After this the client is passed for authentication. After authentication it is passed to the corresponding subsystem depending on kind of request. All authentication instances have a thread running for doing the authentication. This thread works on a queue of clients. Hints for testers: - Test with default config. - Test with diffrent authentication modules in <mount>. - Test shoutcast compatibility mode. - Test with new style <authentication> and any amount of <role> (zero to quite some). - Test <alias> lookup on all kinds of objects. - Test source level credential login into the admin interface. - Test shoucast style meta data updates. - Test playlist generation. Thank you for reading this long commit message. Have fun reading the full patch! svn path=/icecast/trunk/icecast/; revision=19358
-
- 24 May, 2012 1 commit
-
-
giles authored
This is David Richards' support patch for Ogg encapsulated Opus streams. From https://github.com/krad-radio/icecast-oneman/commit/35927ca52f8e538eb20d8a185b8c10f1f2e9118a svn path=/icecast/branches/icecast-webm/; revision=18302
-
- 18 May, 2012 1 commit
-
-
giles authored
This is a self-contained ebml parser. It just looks for cluster boundaries and breaks the stream there. svn path=/icecast/branches/icecast-webm/; revision=18297
-
- 19 Apr, 2008 1 commit
-
-
Karl Heyes authored
svn path=/icecast/trunk/icecast/; revision=14778
-
- 17 Dec, 2005 1 commit
-
-
Michael Smith authored
svn path=/icecast/trunk/icecast/; revision=10620
-
- 07 Aug, 2005 2 commits
-
-
Karl Heyes authored
svn path=/icecast/trunk/icecast/; revision=9714
-
Karl Heyes authored
which can be used to handle authentication mechanisms without taking locks for long periods. Non-authenticated mountpoints bypass the auth thread. The lookup/checking of the source_t is done after the authentication succeeds so the fallback mechanism does not affect which authenticator is used. This can be extended to allow us to authenticate in webroot as well. XML re-read changes will take effect immediately for new listeners but existing listeners will use the original auth_t (refcounted) when they exit. htpasswd access has been seperated out from auth.c, and implements an AVL tree for a faster username lookup. The htpasswd file timestamp is checked just in case there are changes made externally svn path=/icecast/trunk/icecast/; revision=9713
-
- 08 May, 2005 1 commit
-
-
Karl Heyes authored
svn path=/icecast/trunk/icecast/; revision=9242
-
- 07 May, 2005 1 commit
-
-
Karl Heyes authored
mainly due to client support, but they are only for detection and plug straight into the ogg handler. The win32 project files will need updating to take the new files into account svn path=/icecast/trunk/icecast/; revision=9225
-
- 07 Dec, 2004 1 commit
-
-
Karl Heyes authored
clients before keyframe. For vorbis-only streams, perform rebuild to flush pages more frequently and to provide url updating mechanism for titles svn path=/icecast/trunk/icecast/; revision=8341
-
- 10 May, 2004 1 commit
-
-
Karl Heyes authored
have been reported, the main one being icecast instability when there is a YP server outage. svn path=/icecast/trunk/icecast/; revision=6646
-
- 15 Jan, 2004 1 commit
-
-
Michael Smith authored
Melanie's multilevel fallbacks added (after major changes). svn path=/trunk/icecast/; revision=5760
-
- 27 Jul, 2003 1 commit
-
-
Karl Heyes authored
as expected. svn path=/trunk/icecast/; revision=5181
-