BBB security model
hassib
I have just installed BBB (ver 0.63) and trying to use its integration
API. When I send the following command (via the browser):
http://47.129.106.59/bigbluebutton/api/create?name=Test+Meeting&meetingID=fedcba
I get the following error:
"FAILEDchecksumErrorYou did not pass the checksum security check"
I understand that I need to send the "checksum" with my request.
My question is that: in which file in the server the "Salt" can be
set? also can the Security be turned OFF/ON?
regards,
hassib
Fred Dixon
The security salt for the server is located in
/var/lib/tomcat6/webapps/bigbluebutton/WEB-INF/classes/
bigbluebutton.properties
It's in this properties
beans.dynamicConferenceService.securitySalt=234lkjlakjafs8fsgfd7g98435kljfg
To connect using the API, the calling program needs to create a
checksum with the same salt. If you blank out the definition of the
salt in the server, this should disable the checksum check. If it
doesn't, please let us know.
For the API demos included with BigBlueButton, you can find the
declaration at
/var/lib/tomcat6/webapps/bigbluebutton/demo/bbb_api_conf.jsp
It's defined in
// This is the security salt that must match the value set in the
BigBlueButton server
String salt = "234lkjlakjafs8fsgfd7g98435kljfg";
Regards,.... Fred
On Jan 27, 8:09 am, hassib <wadesign...@gmail.com> wrote:
> Hi,
>
> I have just installed BBB (ver 0.63) and trying to use its integration
> API. When I send the following command (via the browser):
>
> http://47.129.106.59/bigbluebutton/api/create?name=Test+Meeting&meeti...
Jeremy Thomerson
/var/lib/tomcat6/webapps/bigbluebutton/WEB-INF/classes/bigbluebutton.properties
Setting it to blank will disable the security for the API.
Note that if you're using the API examples, you'll need to configure it there, also. I haven't had a chance to look where that is, but you can use "grep -r 639259d4" to find it and make it match.
Jeremy Thomerson
--
You received this message because you are subscribed to the Google Groups "BigBlueButton-dev" group.
To post to this group, send email to bigblueb...@googlegroups.com.
To unsubscribe from this group, send email to bigbluebutton-...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/bigbluebutton-dev?hl=en.
hassib
Thanks a lot for your replies. Found the file and tested with the
property set to blank.
Tried to create a conference, join and test if it is running and all
worked perfectly.
Thanks again
Hassib
On Jan 27, 8:31 am, Jeremy Thomerson <jeremythomer...@gmail.com>
wrote:
> Look for
> beans.dynamicConferenceService.securitySalt=639259d4-9dd8-4b25-bf01-95f9567 eaf4b
> in the file:
> /var/lib/tomcat6/webapps/bigbluebutton/WEB-INF/classes/bigbluebutton.proper ties
>
> Setting it to blank will disable the security for the API.
>
> Note that if you're using the API examples, you'll need to configure it
> there, also. I haven't had a chance to look where that is, but you can use
> "grep -r 639259d4" to find it and make it match.
>
> Jeremy Thomerson
>
>
>
> On Wed, Jan 27, 2010 at 7:09 AM, hassib <wadesign...@gmail.com> wrote:
> > Hi,
>
> > I have just installed BBB (ver 0.63) and trying to use its integration
> > API. When I send the following command (via the browser):
>
> >http://47.129.106.59/bigbluebutton/api/create?name=Test+Meeting&meeti...
>
> > I get the following error:
>
> > "FAILEDchecksumErrorYou did not pass the checksum security check"
>
> > I understand that I need to send the "checksum" with my request.
>
> > My question is that: in which file in the server the "Salt" can be
> > set? also can the Security be turned OFF/ON?
>
> > regards,
> > hassib
>
> > --
> > You received this message because you are subscribed to the Google Groups
> > "BigBlueButton-dev" group.
> > To post to this group, send email to bigblueb...@googlegroups.com.
> > To unsubscribe from this group, send email to
> > bigbluebutton-...@googlegroups.com<bigbluebutton-dev%2Bunsubscr i...@googlegroups.com>