SETV Springfield Technical Wiki - User contributions [en]

Wowza Server/Setup & Install

2018-09-01T23:41:24Z

Setvadmin: /* Cross-Domain Access Denied */

This page is to describe how Wowza was installed.

== Quick Points: ==
* Linux Debian 8
* Basic LAMP Installation (Linux, Apache, MySQL, PHP)
* Wowza Streaming Engine .runpackage
* Media is stored on external drive <code>/media/vod1</code>
* <code>/media/vod1</code> is network discoverable via SAMBA sharing
* FTP access was enabled to two folders on the <code>/media/vod1</code> drive

== Wowza Install instructions ==
* Navigate to the folder that contains the downloaded Linux package and then execute the following commands, depending on your platform. Then, follow the wizard instructions.<ref>https://www.wowza.com/docs/how-to-install-and-configure-wowza-streaming-engine#installWowza</ref>
64-bit Linux systems
sudo chmod +x WowzaStreamingEngine-4.7.1-linux-x64-installer.run sudo ./WowzaStreamingEngine-4.7.1-linux-x64-installer.run

During the installation process, you'll be asked:
* To accept the terms of the license agreement.
* To enter a valid product license key. If you acquired a new license key, you'll find it in the email that you received from Wowza Sales. If you have a previous version of the Streaming Engine software installed, you may be able to use the license key found in the [install-dir]/conf/Server.license file.
* To create a user name and password for an Administrator account. You'll use this account to sign in to the browser-based Wowza Streaming Engine Manager. The user name and password values are case-sensitive.
* To confirm or change the install location. By default, Wowza Streaming Engine installs files in the following directories: '''Linux''': /usr/local/WowzaStreamingEngine-4.7.1/ (as the root user)

=== Start the software as a service (Linux) ===
To start Wowza software as a service on Linux, you must be the root user with sudo access. If these instructions don't apply to your Linux distribution, consult your Linux manual.
# In a terminal window, enter one of the following commands, depending on your Linux distribution: sudo service WowzaStreamingEngine start -OR- /etc/init.d/WowzaStreamingEngine start
# Confirm that the engine is running by opening a web browser and entering the following URL: http://[wowza-ip-address]:1935 For [wowza-ip-address], use the IP address or domain of the local or remote Wowza server. For example: <nowiki>http://localhost:1935</nowiki> The browser should display the Wowza Streaming Engine software version number. If not, check to see if the server software installed correctly and that TCP port 1935 is open on your router, firewall, and in your iptables.
# After the Wowza Streaming Engine server software is running, start Wowza Streaming Engine Manager. In a terminal window, enter one of the following commands, depending on your Linux distribution: sudo service WowzaStreamingEngineManager start -OR- /etc/init.d/WowzaStreamingEngineManager start

== Updating Wowza ==
# SSH Into Server<ref>https://www.wowza.com/docs/how-to-update-your-wowza-streaming-engine-installation</ref>
# <code>cd /usr/local/WowzaStreamingEngine/updates</code>
# Get download link from wowza.com -- sign in and go to Downloads, Right Click and Copy Link Address
# <code>wget https://store.wowza.com/downloads/user/5984a69bef0fd/WowzaStreamingEngine-Update-X.X.X.zip</code>
# <code>unzip WowzaStreamingEngine-Update-X.X.X.zip -d WowzaStreamingEngine-Update-X.X.X</code>
# <code>cd WowzaStreamingEngine-Update-X.X.X/linux</code>
# <code>chmod a+x *.sh</code>
# <code>service WowzaStreamingEngineManager stop</code>
# <code>service WowzaStreamingEngine stop</code>
# <code>./update.sh</code>
# <code>service WowzaStreamingEngine start</code>
# <code>service WowzaStreamingEngineManager start</code>

==== SSH on Wowza ====
Follow this [https://vanmarion.nl/blog/blog/ssl-letsencrypt-wowza-4-x-server-frontend/ LINK] and follow the instructions. <ref>https://markandruth.co.uk/2017/10/23/using-letsencrypt-with-wowza-media-server</ref>

You MUST have Open-JDK-8 installed and it is a pain in the ass. As of this writing, this has been done, so no need to worry.

== SSL on Wowza ==
For security JWPlayer now requires HTTPS on all streams and sites with HTTPS enabled. This changes the port number the service streams (from 1935 to 8443) and requires scripting and cron jobs to actively renew it.

A combination of the steps outlined [https://vanmarion.nl/blog/blog/ssl-letsencrypt-wowza-4-x-server-frontend/ HERE] and [https://markandruth.co.uk/2017/10/23/using-letsencrypt-with-wowza-media-server HERE] were used to set it up on the current server. The idea being you install Certbot, download a custom script, run certbot for the wowza.ssdcougars.tv domain, run the custom script to convert the certbot .pem keys into a JKS store (A Java file, Wowza runs entirely in Java). You then enable a cron job to do this automatically before the LetsEncrypt/Certbot keys expire every 3 months.

<code><s>0 5 * * * root /usr/bin/certbot renew --standalone --pre-hook 'systemctl stop WowzaStreamingEngine' --post-hook '/usr/local/WowzaStreamingEngine/java/bin/java -jar /usr/bin/wowza-letsencrypt-converter-0.1.jar /usr/local/WowzaStreamingEngine/conf/ssl/ /etc/letsencrypt/live/; systemctl start WowzaStreamingEngine'</s></code>

Basically, you use Certbot to create the normal SSL certificate.

Then you use <code>/usr/local/WowzaStreamingEngine/lib/wowza-letsencrypt-converter-0.1.jar</code> to convert the standard certificates into a Java readable format. The <code>jksmap.txt</code> is a mapping text telling Wowza where to look for the files. The info listed in this TXT file must match what is listed in <code>/usr/local/WowzaStreamingEngine/conf/VHost.xml</code>

You need to find the SSL attributes and make sure that <code><SSLConfig></code> matches the relevant file paths. (Check the guide liked above for further details and examples)

The Wowza JAVA SSL file is located under <code>/usr/local/WowzaStreamingEngine/conf/wowza.ssdcougars.tv.jks</code>

If the auto renew failed; SSH into the Wowza box and issue:

<code>cd /usr/local/WowzaStreamingEngine/lib</code>

<code>java -jar wowza-letsencrypt-converter-0.1.jar -v /usr/local/WowzaStreamingEngine/conf/ /etc/letsencrypt/live/</code>

== Common Issues ==

=== "Loading Player..." ===
Check the Wowza URL in the Wordpress post. Make sure there is not even a space or new line after <code>.m3u8</code>

=== No incoming streams seen, no videos play after a reboot/power outage ===
Try to sign into the Wowza Management Portal, and make sure the licences are active. Sign in, if it asks to enter license keys, just press SUBMIT or ACTIVATE

=== Cross-Domain Access Denied ===
Check the Wowza SSL Certificate, it probably expired and will need to be manually renewed.

If Cert is valid at "https://wowza.ssdcougars.tv" Go to a page with a VOD video; open Chrome Developer Tools and look for any errors that start with CERT_INVALID

If that happens, the cert renewed but was not imported into Wowza. Issue the below commands on Wowza

If the auto renew failed; SSH into the Wowza box and issue:

<code>cd /usr/local/WowzaStreamingEngine/lib</code>

<code>java -jar wowza-letsencrypt-converter-0.1.jar -v /usr/local/WowzaStreamingEngine/conf/ /etc/letsencrypt/live/</code>

<code>service WowzaStreamingEngine restart</code>
== Sources ==
<references />

Wowza Server/Setup & Install

2018-08-31T23:15:34Z

Setvadmin: /* Cross-Domain Access Denied */

2018-03-12T20:22:11Z

Setvadmin:

[[File:CPanel Login.png|thumb|225x225px|cPanel Login Screen]]This guide is for Staff Advisers and Student WebMaster, intended to demonstrate how to access cPanel Account Manager, create, update, or delete accounts.

'''DISCLAIMERS ON EMAIL:'''

1. The email system is generally secure, it uses basic encryption to verify logins and send mail. It does NOT send encrypted emails. '''DO NOT EMAIL VERY SENSITIVE INFORMATION SUCH AS CREDIT CARD NUMBERS.'''

2. The emails are stored on our server and are visible to top-level admins, '''DO NOT USE THIS EMAIL FOR ANYTHING OTHER THAN SSDM/THON RELATED WORK.'''

3. All emails are backed up to a remote server (as with the rest of the website data) on a regular basis. If emails are accidentally deleted they can be recovered. Contact the SETV office for more info

=== Accessing cPanel ===
cPanel is the Web-based user interface for the backend that controls the whole ssdmftk website. You can view files, accounts, DNS settings, etc. '''Generally, there will be no need to modify ANY of these advanced settings, so steer clear of them as it could have unintended consequences.'''[[File:UserManager.png|thumb|User Management icon is circled in red]]
# Access the cPanel from https://cpanel.ssdmftk.org
# The username is '''ssdmftk'''; ask the SETV office for the current password
# Once signed in, click the User Management icon in the upper left corner

=== User Manager ===
This is a simple manager to control the accounts for Email and Cloud Access.

Every account created in this list automatically has access to the Cougar Cloud; e-mail is only available when enabled.
==== Create NEW User ====
Once in the User Management Screen:
# Click '''Add User'''
# Under Basic Information fill out the relevant details; leave the '''''domain''''' at '''ssdmftk.org;''' set the '''''alternate''''' '''''email''''' to the committee member's '''ssdstudent.org email''',
# Security Info - Set the user's password - Set a password for the committee members, do not use the same password for all emails, and make sure they have 8 characters with upper/lower case.
# Under "Services" Enable Email and set quota to 250 MB.
# Click CREATE

==== Modify User (Update password and name) ====
Once in the User Management Screen:
[[File:Edit user.png|none|thumb]]
# Find the user
# Click '''EDIT''' or '''CHANGE PASSWORD'''
To '''DELETE''' the user, click DELETE, this will lock access, remove emails, and sever connection to the Cougar Cloud. This cannot be undone easily, so avoid this action unless absolutely sure it's what you want and have all the info you need backed up.
[[Category:SSDM Guides]]

2018-03-12T20:08:15Z

Setvadmin:

Using Cougar Cloud (SSDMFTK)

2018-03-12T19:03:26Z

Setvadmin:

File:NextCloudIntro.png

2018-03-12T18:05:33Z

Setvadmin:

Intro screen

File:CougarCloudLogin.png

2018-03-12T18:04:45Z

Setvadmin:

Category:SSDM Guides

2018-03-12T17:56:00Z

Setvadmin: Created page with "Guides for SSDM Committee members, students and staff"

Guides for SSDM Committee members, students and staff

Using Cougar Cloud (SSDMFTK)

2018-03-12T17:42:32Z

Setvadmin: Created page with "=== What is Cougar Cloud? === The Cougar Cloud is a dropbox-like system built in-house for hosting archives of data for SETV. Because of the partnership with the District Offi..."

=== What is Cougar Cloud? ===
The Cougar Cloud is a dropbox-like system built in-house for hosting archives of data for SETV. Because of the partnership with the District Office and the SSDM team, we have allocated a dedicated pool of two terabytes of storage for the life of SSDM at Springfield. We have also collected whatever media we had of THON since 2013 and have made available to the SSDM team accounts for use.

=== Accessing Cougar Cloud ===
To find the Cougar Cloud; go to https://cloud.ssdmftk.org

Sign in using your full '''@ssdmftk.org''' email address

SSDMFTK Email Management

2018-03-12T17:10:18Z

Setvadmin:

File:Edit user.png

2018-03-12T17:05:38Z

Setvadmin:

Edit user

File:CPanel Email.png

2018-03-12T17:03:36Z

Setvadmin:

email toggle

File:UserManager.png

2018-03-12T17:02:46Z

Setvadmin:

User manager