[Live-devel] RTCP auth bug

[Mike Frantzen]

I just upgraded an AXIS camera's firmware to 4.47 (2008-03-13).  The new
firmware has gotten more strict with authorization causing a VLC 0.8.6h
client to fail on an rtsp stream.

I see the OPTIONS request succeed and then the DESCRIBE request fail w/o the
authorization modifier.  Then OPTIONS and DESCRIBE get retried successfully
w/ auth and the SDP is transfered.  Next the SETUP request does not contain
the authorization modifier and it does not get retried with auth.  The
previous AXIS firmware did not require auth in that packet.

I assume that this is a live555 bug because the code appears to cache an
authenticator.  The CSeq numbers are monotonically increasing so this is all
one UDP pseudo connection and the successful auth creds should be reused by
every request in that pseudo connection.

Turning off auth works like a charm.


A sanitized VLC verbose (-vv) trace follows.  I apologize in advance if
gmail butchers this.

Sending request: OPTIONS rtsp://192.168.11.154/mpeg4/1/media.amp RTSP/1.0
CSeq: 1
User-Agent: VLC media player (LIVE555 Streaming Media v2008.04.02)

Received OPTIONS response: RTSP/1.0 200 OK
CSeq: 1

Public: DESCRIBE, GET_PARAMETER, PAUSE, PLAY, SETUP, SET_PARAMETER, TEARDOWN

Sending request: DESCRIBE rtsp://192.168.11.154/mpeg4/1/media.amp RTSP/1.0
CSeq: 2
Accept: application/sdp
User-Agent: VLC media player (LIVE555 Streaming Media v2008.04.02)

Received DESCRIBE response: RTSP/1.0 401 Unauthorized
CSeq: 2
WWW-Authenticate: Basic realm="AXIS_00..."

[00000329] live555 demuxer debug: DESCRIBE failed with 401: [cannot handle
DESCRIBE response: RTSP/1.0 401 Unauthorized]
[00000329] live555 demuxer debug: connection timeout, retrying
Sending request: OPTIONS rtsp://192.168.11.154/mpeg4/1/media.amp RTSP/1.0
CSeq: 3
Authorization: Basic <base64 creds>
User-Agent: VLC media player (LIVE555 Streaming Media v2008.04.02)

Received OPTIONS response: RTSP/1.0 200 OK
CSeq: 3
Public: DESCRIBE, GET_PARAMETER, PAUSE, PLAY, SETUP, SET_PARAMETER, TEARDOWN

Sending request: DESCRIBE rtsp://192.168.11.154/mpeg4/1/media.amp RTSP/1.0
CSeq: 4
Accept: application/sdp
Authorization: Basic <base64 creds>
User-Agent: VLC media player (LIVE555 Streaming Media v2008.04.02)

Received DESCRIBE response: RTSP/1.0 200 OK
CSeq: 4
Content-Base: rtsp://192.168.11.154:554/mpeg4/1/media.amp/
Content-Type: application/sdp
Content-Length: 727

Need to read 727 extra bytes
<snip SDP>

[00000329] live555 demuxer debug: RTP subsession 'video/MP4V-ES'
Sending request: SETUP
rtsp://192.168.11.154:554/mpeg4/1/media.amp/trackID=1RTSP/1.0
CSeq: 5
Transport: RTP/AVP;unicast;client_port=60172-60173
User-Agent: VLC media player (LIVE555 Streaming Media v2008.04.02)

Received SETUP response: RTSP/1.0 401 Unauthorized
CSeq: 5
WWW-Authenticate: Basic realm="AXIS_..."

[00000329] live555 demuxer error: SETUP of'video/MP4V-ES' failed SETUP:
cannot handle response: RTSP/1.0 401 Unauthorized
[00000329] live555 demuxer error: Nothing to play for rtsp://
192.168.11.154/mpeg4/1/media.amp
[00000329] main demuxer warning: no access_demux module matching "rtsp"
could be loaded
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.live555.com/pipermail/live-devel/attachments/20080618/a0163d32/attachment.html>