Managing Flash Media Server Trademarks 1 Step RoboPDF, ActiveEdit, ActiveTest, Authorware, Blue Sky Software, Blue Sky, Breeze, Breezo, Captivate, Central, ColdFusion, Contribute, Database Explorer, Director, Dreamweaver, Fireworks, Flash, FlashCast, FlashHelp, Flash Lite, FlashPaper, Flash Video Encoder, Flex, Flex Builder, Fontographer, FreeHand, Generator, HomeSite, JRun, MacRecorder, Macromedia, MXML, RoboEngine, RoboHelp, RoboInfo, RoboPDF, Roundtrip, Roundtrip HTML, Shockwave, SoundEdit, Studio MX, UltraDev, and WebHelp are either registered trademarks or trademarks of Macromedia, Inc. and may be registered in the United States or in other jurisdictions including internationally. Other product names, logos, designs, titles, words, or phrases mentioned within this publication may be trademarks, service marks, or trade names of Macromedia, Inc. or other entities and may be registered in certain jurisdictions including internationally. Third-Party Information This guide contains links to third-party websites that are not under the control of Macromedia, and Macromedia is not responsible for the content on any linked site. If you access a third-party website mentioned in this guide, then you do so at your own risk. Macromedia provides these links only as a convenience, and the inclusion of the link does not imply that Macromedia endorses or accepts any responsibility for the content on those third-party sites. Jabber is a registered trademark of the Jabber Software Foundation. SorensonTM SparkTM video compression and decompression technology licensed from Sorenson Media, Inc. Copyright © 2002-2005 Macromedia, Inc. All rights reserved. This manual may not be copied, photocopied, reproduced, translated, or converted to any electronic or machine-readable form in whole or in part without written approval from Macromedia, Inc. Notwithstanding the foregoing, the owner or authorized user of a valid copy of the software with which this manual was provided may print out one copy of this manual from an electronic version of this manual for the sole purpose of such owner or authorized user learning to use such software, provided that no part of this manual may be printed out, reproduced, distributed, resold, or transmitted for any other purposes, including, without limitation, commercial purposes, such as selling copies of this documentation or providing paid-for support services. Acknowledgments Project Management: Suzanne Smith Writing: John Norton, Suzanne Smith Editing: Geta Carlson, Evelyn Eldridge, Mary Ferguson, Lisa Stanziano, Anne Szabla Production Management: Adam Barnett Media Design and Production: Aaron Begley, Paul Benkman, John Francis, Mario Reynoso First Edition: October 2005 Macromedia, Inc. 600 Townsend St. San Francisco, CA 94103 Contents About This Manual. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Intended audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 System requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 About the Flash Media Server documentation . . . . . . . . . . . . . . . . . . . . . 8 Typographical conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Additional resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Chapter 1: Managing the Server . . . . . . . . . . . . . . . . . . . . . . . . . . . .11 Basic server settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11 Registering client applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Configuring virtual hosts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Deploying server-side scripts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Starting and stopping the server in Windows . . . . . . . . . . . . . . . . . . . 14 Starting and stopping the server on Linux . . . . . . . . . . . . . . . . . . . . . . 15 Using the management console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 Connecting to the management console . . . . . . . . . . . . . . . . . . . . . . . 17 Managing applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 Creating a new application instance . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 Managing the administrative users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27 Managing the servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 Managing servers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 Viewing server details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 Viewing connection details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 Viewing application details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 Viewing license files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 Viewing the server log file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Logging client connections and other system events . . . . . . . . . . . . . 34 Access log file. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 Application log file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Diagnostic log file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 Configuring logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 Viewing server events in the Windows event viewer . . . . . . . . . . . . .57 Configuring the server at runtime . . . . . . . . . . . . . . . . . . . . . . . . . . . . .57 3 Managing Flash Media Server on Linux . . . . . . . . . . . . . . . . . . . . . . . . . . 58 Starting the Flash Media Admin Service in Windows. . . . . . . . . . . . 58 Starting the Flash Media Admin Service on Linux . . . . . . . . . . . . . . 58 Using the fmsmgr utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58 Chapter 2: Deploying Flash Media Server. . . . . . . . . . . . . . . . . . . 61 Typical configurations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 Configuration for development and testing. . . . . . . . . . . . . . . . . . . . . 62 Deploying on one computer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 Deploying on two computers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 Deploying on two computers with authentication through Flash Media Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Deploying on two computers with authentication through an application server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 SSL support in Flash Media Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Defining a secure port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Configuring SSL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 Creating multiple certificates for an adaptor . . . . . . . . . . . . . . . . . . . . 65 Configuring independent virtual hosts for SSL application . . . . . . . 66 About configuration levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66 About the configuration hierarchy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66 Adding adaptors and virtual hosts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69 Server administration over HTTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .71 Configuring Flash Media Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .71 Using the admin commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74 Symbolic text substitutions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79 Making a substitution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79 Predefined symbols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80 Mapping environment variables. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81 Defining symbols outside the substitution.xml file . . . . . . . . . . . . . . . 81 Building the symbol map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82 Configurable application object properties for server-side scripting . 82 Chapter 3: Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . .85 XML configuration files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85 Server.xml file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86 Summary of Server.xml tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89 Description of Server.xml tags. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95 Users.xml file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128 Summary of Users.xml tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128 Description of Users.xml tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129 Logger.xml file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134 Summary of Logger.xml tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136 Description of Logger.xml tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137 4 Contents Adaptor.xml file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147 Summary of Adaptor. xml tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .148 Description of Adaptor.xml tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .150 Vhost.xml file. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .162 Summary of Vhost.xml tags. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .164 Description of Vhost.xml tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167 Application.xml file. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .183 Summary of Application.xml tags. . . . . . . . . . . . . . . . . . . . . . . . . . . . .186 Description of Application.xml tags . . . . . . . . . . . . . . . . . . . . . . . . . . .190 Chapter 4: Flash Media Server Security . . . . . . . . . . . . . . . . . . . 215 Managing server security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .215 About authentication and authorization . . . . . . . . . . . . . . . . . . . . . . . . .218 JavaScript security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .219 Secure script loading . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220 Protecting objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .221 Permissions levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 222 Choosing passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 224 Access DLL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 224 Configuring Access DLL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 225 Sample Adaptor.cpp file. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 228 Developing secure applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229 Using SSL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229 Using other secure development practices . . . . . . . . . . . . . . . . . . . 230 About privacy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .231 Deploying secure applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .231 About firewalls . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .231 Log file precautions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 232 Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 233 Contents 5 6 Contents About This Manual Macromedia Flash Media Server 2 enables one-to-one, one-to-many, many-to-one, and many-to-many communication in real time between applications created in Macromedia Flash 8. Developers create these applicat ...