Wowza Community

ISSUE with upgrade to 4.8.19+4: workaround is here

After updating from version 4.8.18+1 to 4.8.19+4, there is an issue with being able to login to Wowza. Our development team is working on a resolution for the issue.

In the meantime, here is the workaround:

The workaround at this point if you want to continue using cleartext is to change the AuthenticationMethod to Basic in Server.xml file.

This file is located under conf/ directly such as:

/WowzaStreamingEngine-4.8.19/conf/Server.xml

<AuthenticationMethod>basic</AuthenticationMethod><PasswordEncodingScheme>cleartext</PasswordEncodingScheme>

Note : After editing, a restart of the Wowza Streaming Engine software is required for the change to take effect and then you should be able to login via Wowza Streaming Engine Manager.

Hi, i just posted this: Cannot access anymore REST API interface through PHP with authentication.
It seems related to this thread, but oddly I could always login through Wowza Streaming Engine Manager even with digest authentication, cleartext or sha256 password encoding, just changing admin.password accordingly.
I can’t access REST API interface anyway.

You reset the streaming engine after making any changes?

This is all the info I have for now so please send a support ticket- we’ll test it for you and see what’s going on:

Cleartext is not compatible with Digest Authentication
In Wowza Streaming Engine 4.8.19, SHA-256 compatibility is added to update the security standards. This affects the ability to support Cleartext with Digest authentication out of the box.
Solution
If you use Digest with Cleartext and receive a failure to log in message, update your password encoding scheme to use SHA-256 in the [install-dir]/conf/Server.xml file and restart Wowza Streaming Engine to log in.

Options are:

1. (Best to be more secure): Configure SHA-256 as shown in this article:
https://www.wowza.com/docs/how-to-change-the-authentication-method-for-the-wowza-streaming-engine-rest-api#use-digest-authentication2


**2. (Less secure as it has the password in plain-text): Configure plaintext password option using the below properties options located in [install-dir/conf/Server.xml]:**
<AuthenticationMethod>basic</AuthenticationMethod>

<PasswordEncodingScheme>cleartext</PasswordEncodingScheme

Hello Rose, thank you for your reply.
If by reset you mean restart yes, I restarted WSE after every change.

I tried both options you suggested: in both scenarios I can regularly login through WSE Manager but I can’t access the API REST interface through PHP library (result is always [“message”]=> string(40) “The request requires user authentication” [“code”]=> string(3) “401” [“success”]=> bool(false) [“wowzaServer”]=> string(8) “4.8.19+4”)

Sorry to hear that. We’d need full access to you files and configuration to be able to troubleshoot, can you please send in a ticket?

Thanks.