Streaming breaks after password change

Support and queries relating to all previous versions of ZoneMinder
Locked
jdppm7
Posts: 12
Joined: Mon Feb 11, 2008 5:13 am

Streaming breaks after password change

Post by jdppm7 »

After changing your password, streaming doesn't seem to work. Error messages pile up in you apache error log: "Error, unable to authenticate user." If you log out and log back in the problem is fixed.

I haven't had time to dive into the code to find the problem, but if I run across the solution I'll fix it.

Zoneminde 1.23.1, SuSE 10.3, Apache 2.2.4, PHP 5.2.5
User avatar
zoneminder
Site Admin
Posts: 5215
Joined: Wed Jul 09, 2003 2:07 pm
Location: Bristol, UK
Contact:

Post by zoneminder »

Yes, the authentication key is based on the password and generated when you log in. You always have to log out and back in again when you change passwords. This isn't a bug but perhaps could be better explained.
Phil
jdppm7
Posts: 12
Joined: Mon Feb 11, 2008 5:13 am

Possible change

Post by jdppm7 »

I guess i didn't realize that. Sorry if it was a waste of time.

I'll see if I could write a patch that would correct that behavior and submit it for others.
User avatar
robi
Posts: 477
Joined: Sat Mar 17, 2007 10:48 am

Post by robi »

Why is that a problem? It's a useful security feature, why destroy it?
v1.25.0 + Ubuntu Linux 12.04 Server
jdppm7
Posts: 12
Joined: Mon Feb 11, 2008 5:13 am

Post by jdppm7 »

Really? I don't see how that's a useful security feature at all. Care to elaborate?
User avatar
robi
Posts: 477
Joined: Sat Mar 17, 2007 10:48 am

Post by robi »

I think it is, but hey, everyone has his own opinion. Perhaps a checkbox in options would allow one to skip using this.

It would make things less secure... because now changing the password is an easy way to prevent one's access to a stream, and it would break the stream immediately, as it does now.
Why do you need to change password while you're watching it? Why is it a problem to re-login?

Actually this is not a bug, this is so by design, and it works just the way it should.
v1.25.0 + Ubuntu Linux 12.04 Server
Locked