Adobe 65029121 - Flash Media Streaming Server Configuration And Administration Manual Download Page 42

Page: 42 / 257

FLASH

MEDIA

SERVER

4.5

CONFIGURATION

AND

ADMINISTRATION

Configuring the server

Last updated 11/28/2012

Set limits on unsuccessful login attempts

You can use the

LogInLimits

settings in the

rootinstall

/conf/Server.xml file to set the number of unsuccessful

attempts a client is allowed when trying to log in to the admin server. With these settings, you define how many failed
attempts are allowed before the client must wait to attempt to log in again. You also define the amount of time they
must wait. In addition, you can lock the user out of the server entirely after a certain number of attempts.

To set the number of login attempts the client can have before waiting, use the

MaxFailures

sub-element. After that

number of failures, the client must wait the number of seconds defined by the

RecoveryTime

sub-element. If the client

tries unsuccessfully to log in a number of times equal to

LockOutLimit

, they are locked out of the server until the

server is restarted.

In the following example, a user can try to log in 10 times. If they fail to log in successfully on the 10th attempt, they
must wait 5 minutes (300 seconds) before attempting to log in again. If they fail 20 times total, they are barred from
logging in until the server is restarted:

<MaxFailures>10</MaxFailures>

<RecoveryTime>300</RecoveryTime>

<LockoutLimit>20</LockoutLimit>

</LoginLimits>

</Security>

For more information, see “

LogInLimits

” on page 206.

Configure SSL

Note:

Flash Media Server uses OpenSSL libraries internally. To upgrade OpenSSL libraries, see

TechNote 90293

Secure Sockets Layer (SSL) is a protocol for enabling secure communications over TCP/IP. Flash Media Server
provides native support for both incoming and outgoing SSL connections. An incoming connection is a connection
between Flash Player and the server. An outgoing connection is a connection between two servers.

RTMPS adheres to SSL standards for secure network connections and enables connections through a TCP socket on
a secure port. Data passed over the secure connection is encrypted to avoid eavesdropping by unauthorized third
parties. Because secure connections require extra processing power and may affect the server’s performance, use
RTMPS only for applications that require a higher level of security or that handle sensitive or critical data.

By default, when Flash Player connects to Flash Media Server, it scans the following ports in order: 1935, 443, 80, 80
(RTMP tunneling). To configure SSL, specify that a port is secure. To specify that a port is secure, place a minus (“-”)
sign in front of the port number. The default secure port for RTMPS is 443. To configure the default secure port, enter
-443 in the

ADAPTOR.HOSTPORT

parameter in the

rootinstall

/conf/fms.ini file, as follows:

ADAPTOR.HOSTPORT = :1935,-443

When Flash Player encounters an “rtmps://fmsdomain/application” string, it communicates with Flash Media Server
over port 443. Flash Media Server returns data to the client over port 443. Traffic with an “rtmp://” string uses port 1935.

To connect to Flash Media Server over an SSL connection, clients must do the following:

Set the

NetConnection.proxyType

property to

"best"

before connecting.

Specify the RTMPS protocol in the call to the

NetConnection.connect()

method.

If SSL is configured, the following client code connects securely: