title: Can you securely pass credentials from a Flash player to Wowza server?
body: <p>We would like to require authentication against an LDAP directory for accessing streaming video content from our Wowza Flash server. The credentials would preferably be entered via the Flash player itself.</p>
  
  <p>Wowza forum posts suggest using examples of MySQL database authentication backend code as a starting point for developing an LDAP auth backend. And examples exist for modifying an existing Flash player to challenge the user for credentials on play. But all examples I've found show the credentials being passed as query string parameters in the connect string, ex:</p>
  
  <p><code>netconnection.connect("rtmp://[wowza-address]/[app-name]?user1&amp;pass1");</code></p>
  
  <p><a href="http://www.wowza.com/forums/showthread.php?17122-RTMP-Authentication-client-support" rel="nofollow">This article</a> suggests a much more complicated solution to avoid passing credentials in the clear, involving authenticating before streaming, setting a cookie that is specially formulated for reauthentication, grabbing the cookie in the Flash player and passing it to Wowza.</p>
  
  <p>Has anyone seen a solution like this that would pass the credentials for LDAP authentication over a secure connection?</p>