Media Server administrator creates users. Users can be administrated using
either Media Server Configurator or Web page. A user may belong to one of
3 user groups: Basic, Medium and Advanced. Resource that is set to use Internal
authentication, can restrict access to a specific user group. When a user tries
to access such a resource, the ActiveX control (hosted by Streaming Media
Player, web page or some other container) will prompt the user to enter User
name and Password, and will allow Streaming Media Player to persist it on the
user's computer. User's credentials are bound to Media Server IP address, such
that if the user accesses some resource on a different Media Server, he/she
will be prompted to enter credentials again.
Security:
User's credentials are encrypted with strong one-way hashing algorithm, before
they are sent on the network. These encrypted credentials are encrypted once
again with industry-strength symmetric algorithm when they are stored on user's
computer (if the user chooses Streaming Media Player to remember them locally)
and on Media Server's computer, when administrator creates users. This
guarantees high degree of security without using certificates that require 3-rd
authentication parties.
Unreal Media Server exposes a COM object to programmatically add, remove and update users.
COM Object |
|
ProgID |
UMediaServer.UsersAccess |
Defined in | UMediaServer.tlb |
Exposed by | UMediaServer.exe |
Description |
Used to add, remove and update users for internal authentication. |
UMediaServer.UsersAccess object exposes a single interface
described below.
Interface
Description
|
|
Interface |
IUsersAccess
|
Interface Type |
Dual Interface |
Defined in | UMediaServer.tlb |
Description |
Exposed by UMediaServer.UsersAccess COM object. Provides access to Media Server user manager. |
IUserAccess interface provides the following methods.
IUsersAccess
|
|||
Type |
Method |
||
Function |
AddUser |
||
Parameters |
[in] BSTR |
sUserName |
User name. |
[in] LONG | nUserType | User group type:
1 - basic 2 - medium 3 - advanced |
|
|
[in] BSTR |
sPassword |
User password. |
[in] BSTR | sUserInfo | Custom user information. | |
[out] BSTR* | psResultComments | Operation result description. "Success" if method succeeded. | |
[out] VARIANT_BOOL* | pbSuccess | Operation result code. VARIANT_TRUE if method succeeded. | |
Return |
HRESULT |
S_OK or error if call failed. |
|
Description |
Adds a new user to the MediaServer user manager. |
IUsersAccess
|
|||
Type |
Method |
||
Function |
ChangeUserPassword |
||
Parameters |
[in] BSTR |
sUserName |
User name. |
|
[in] BSTR |
sPassword |
User password. |
[out] BSTR* | psResultComments | Operation result description. "Success" if method succeeded. | |
[out] VARIANT_BOOL* | pbSuccess | Operation result code. VARIANT_TRUE if method succeeded. | |
Return |
HRESULT |
S_OK or error if call failed. |
|
Description |
Changes password for a given user. |
IUsersAccess
|
|||
Type |
Method |
||
Function |
UpdateUser |
||
Parameters |
[in] BSTR |
sUserName |
User name. |
[in] LONG | nUserType | User group type:
1 - basic 2 - medium 3 - advanced |
|
[in] BSTR | sUserInfo | New custom user information. | |
[out] BSTR* | psResultComments | Operation result description. "Success" if method succeeded. | |
[out] VARIANT_BOOL* | pbSuccess | Operation result code. VARIANT_TRUE if method succeeded. | |
Return |
HRESULT |
S_OK or error if call failed. |
|
Description |
Updates user information. |
IUsersAccess
|
|||
Type |
Method |
||
Function |
GetUser |
||
Parameters |
[in] BSTR |
sUserName |
User name. |
[out] LONG* | pnUserType | User group type:
1 - basic 2 - medium 3 - advanced |
|
[out] BSTR* | psUserInfo | Custom user information. | |
[out] BSTR* | psResultComments | Operation result description. "Success" if method succeeded. | |
[out] VARIANT_BOOL* | pbSuccess | Operation result code. VARIANT_TRUE if method succeeded. | |
Return |
HRESULT |
S_OK or error if call failed. |
|
Description |
Retreives user information. |
IUsersAccess
Type Method Function DeleteUser Parameters [in] BSTR sUserName User name. Return HRESULT S_OK or error if call failed. Description Removes user from the MediaServer user manager.
[out] BSTR*
psResultComments
Operation result description. "Success" if method
succeeded.
[out] VARIANT_BOOL*
pbSuccess
Operation result code. VARIANT_TRUE if method
succeeded.
IUsersAccess
Type Method Function GetAllUsers Parameters [out] VARIANT* pVarBSTRArray Array of user names. Return HRESULT S_OK or error if call failed. Description Removes user from the MediaServer user manager.
Note: Make sure that DCOM security for UMediaServer.UsersAccess object set up such that the account under which the object's methods are called has full access to the object. For example if IUserAccess methods are called from ASP page, Internet Guest Account should have access to the UMediaServer. ASP.NET uses ASPNET account.Use DCOMCnfg utility to adjust security settings for Unreal Media Server.