AUTH_HASH_SECRET to hashed stops rendering of videos: BUG!?

[Nukem36]

Hi!

I updated two existing zoneminder installations from version 1.24 to 1.25.

I followed the update explanations here in the forum (update database). As effect I got the problem, that in web-interface the video picture wasn't shown at all. I checked all hints here in the forum (bttv-modules, rights a.s.o.) without any success. My last hope after hours and hours was to restart from the scratch. I deleted database, zoneminder itself a.s.o. So I did a brand-new installation. While reconfiguring zm to my needs from the scratch I got a picture in the webinterface and zm started to record in motion detect-mode, liked desired. I did all modifications step by step and checked when picture-rendering stopped to work:

I found out, that the problem occurs when I activate the option OPT_USE_AUTH to Yes, or selected. The effect is reproducible.When I deselect OPT_USE_AUTH, the video is to see, when I switch it on, the video disappears!? While playing around it seems that the option AUTH_RELAY set to hashed is the problem. Option AUTH_RELAY set to plain or none works correctly too.

Unfortunately, cause of security needs I would need AUTH_RELAY set to hashed.

For me it looks like a bug in zm or environment.

Here are the hard facts for the environment:
openSUSE 11.3 (x86_64)
VERSION = 11.3
ZoneMinder-MP-1.25.0-5.1.x86_64
apache2-2.2.15-4.5.1.x86_64
mysql-community-server-5.5.16-64.1.x86_64

zm was installed as rpm from http://www.liquid-co.de/pub/suse/repositories/11.3/

Has anybody an idea what to do?

Thanks a lot
Nukem36

[Nukem36]

Hi!

again me. After looking for replies on my posting I have seen, that this issue seems to be an older one, but not (yet?) fixed:

The real reason in this behaviour can be found here:
http://www.zoneminder.com/forums/viewto ... UTH#p74566

I hope that a codechange will follow soon?

Nukem36

[Carrier82]

What about using https instead of http, wouldn't that give equal or even better security?

[monex]

Hi,

I've recently had a user with a similar issue. The final solution was to adjust the timezone in the php.ini file:

Edit /etc/php5/apache2/php.ini and edit the value for date.timezone, for a list of allowed values have a look at http://www.php.net/manual/en/timezones.php (you have to choose your time zone) After this you can re enable hash based authentication in ZoneMinder, this should work now again without any issues.

Hope this helps