Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-22 Thread Jeff07971

baxoza wrote: 
> I forgot to mentioned: 
> For me and others (I think) PiCorePlayer is VERY useful to fast
> configure whole player and etc. - on default Raspbian repo I need spend
> much more time to achieve players and LMS working.
> For me configuring Raspbian via terminal is not user friendly so maybe
> this is most important what is keeping me closer to PiCorePlayer
> 
> Regards
> /Baxoza

You will be doing any on site config of Pcp via SSH as it does not have
a HTTPS Web GUI ! I doubt if the devs have this high on their list
either

Also it is much more difficult because of the memory based filesystem,
believe me.



*Players:* SliMP3,Squeezebox3 x3,Receiver,SqueezeLiteX,PiCorePlayer
x3,Wandboard
*Server:* LMS Version:  Latest Nightly on Centos 7 VM on ESXi 6.5.0U1 on
Dell T320
*Plugins:*
AutoRescan/BBCiPlayer/PowerSave/PowerSwitchIII/Squeezecloud/Spotty/Player
Groups
*Remotes:* iPeng9/Orangesqueeze/PC/Jivelite/SqueezeLiteX
*Music:* 522GB,1660 albums with 23087 songs by 5204 artists mostly
FLACs

*Want a webapp ?* See
http://forums.slimdevices.com/showthread.php?104305-Webapp-for-LMS

Jeff07971's Profile: http://forums.slimdevices.com/member.php?userid=49290
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-22 Thread Jeff07971

baxoza wrote: 
>  1) Ok, since 2 years I havent tested this on Raspbian - before, I've
> had problem with this - maybe You are right to test it now...

> 2) You are right  - switching only amplifiers is a good suggestion.
Thanks, This ain't my first rodeo

> 3) if LMS saves it saves only on PiCorePlayer's second partition (only
> actual playlist and what zones are synchronized I think... what else it
> could be ?)
And where is the Music and the LMS cache ? For a decent capacity server
you'll be needing a USB HDD, the cache will be either on the SD or USB
HDD either would be corruptable 

> Ok, if Raspbian is so good - why PiCorePlayer is based on weak and
> having holes system ...  ?
> In all respect to Developers - why They don't swap to Raspbian or other
> more secured base-system ? 

Who said Raspbian isn't secure ?
You clearly don't understand what PiCorePlayer is and where it comes
from
All systems have flaws and I expect the servers that occupy the server
room have more than an instance of rasbpian.
Also its NOT the base OS that we are talking about.

> /Baxoza

Anyway I think I'm going to say good luck and I'm out now !

Jeff



*Players:* SliMP3,Squeezebox3 x3,Receiver,SqueezeLiteX,PiCorePlayer
x3,Wandboard
*Server:* LMS Version:  Latest Nightly on Centos 7 VM on ESXi 6.5.0U1 on
Dell T320
*Plugins:*
AutoRescan/BBCiPlayer/PowerSave/PowerSwitchIII/Squeezecloud/Spotty/Player
Groups
*Remotes:* iPeng9/Orangesqueeze/PC/Jivelite/SqueezeLiteX
*Music:* 522GB,1660 albums with 23087 songs by 5204 artists mostly
FLACs

*Want a webapp ?* See
http://forums.slimdevices.com/showthread.php?104305-Webapp-for-LMS

Jeff07971's Profile: http://forums.slimdevices.com/member.php?userid=49290
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-22 Thread baxoza

Jeff07971 wrote: 
> 
> You are not going to be able to do it with Pcp you can do it with
> Raspbian - Your choice
> 
> Jeff

I forgot to mentioned: 
For me and others (I think) PiCorePlayer is VERY useful to fast
configure whole player and etc. - on default Raspbian repo I need spend
much more time to achieve players and LMS working.
For me configuring Raspbian via terminal is not user friendly so maybe
this is most important what is keeping me closer to PiCorePlayer

Regards
/Baxoza



baxoza's Profile: http://forums.slimdevices.com/member.php?userid=66500
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-22 Thread baxoza

Jeff07971 wrote: 
> 1) I have two instances of raspbian neither are UPS'd and I've never had
> a problem.
> 2) If theres an antifire turn the AMPLIFIERS off not the RasPis have
> them UPS'd
> 3) If you run an LMS on Pcp there are disk writes so can be corrupted
> 
> You are not going to be able to do it with Pcp you can do it with
> Raspbian - Your choice
> 
> Jeff

1) Ok, since 2 years I havent tested this on Raspbian - before, I've had
problem with this - maybe You are right to test it now...
2) You are right  - switching only amplifiers is a good suggestion.
3) if LMS saves it saves only on PiCorePlayer's second partition (only
actual playlist and what zones are synchronized I think... what else it
could be ?)

Ok, if Raspbian is so good - why PiCorePlayer is based on weak and
having holes system ...  ? 
In all respect to Developers - why They don't swap to Raspbian or other
more secured base-system ? 

/Baxoza



baxoza's Profile: http://forums.slimdevices.com/member.php?userid=66500
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-22 Thread Jeff07971

baxoza wrote: 
> You are almost right but all audio will be placed on separated rack
> without UPS and there is fire protection system where during antifire
> messages all audio must be immediately switched off
> This is a new object (building) and at the beginning of functionality
> many fire or electricity tests are available... so I am 100% sure it
> will be broken first day (having Respian onboard).
> 
> Regards
> /Baxoza

1) I have two instances of raspbian neither are UPS'd and I've never had
a problem.
2) If theres an antifire turn the AMPLIFIERS off not the RasPis have
them UPS'd
3) If you run an LMS on Pcp there are disk writes so can be corrupted

You are not going to be able to do it with Pcp you can do it with
Raspbian - Your choice

Jeff



*Players:* SliMP3,Squeezebox3 x3,Receiver,SqueezeLiteX,PiCorePlayer
x3,Wandboard
*Server:* LMS Version:  Latest Nightly on Centos 7 VM on ESXi 6.5.0U1 on
Dell T320
*Plugins:*
AutoRescan/BBCiPlayer/PowerSave/PowerSwitchIII/Squeezecloud/Spotty/Player
Groups
*Remotes:* iPeng9/Orangesqueeze/PC/Jivelite/SqueezeLiteX
*Music:* 522GB,1660 albums with 23087 songs by 5204 artists mostly
FLACs

*Want a webapp ?* See
http://forums.slimdevices.com/showthread.php?104305-Webapp-for-LMS

Jeff07971's Profile: http://forums.slimdevices.com/member.php?userid=49290
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-22 Thread baxoza

Jeff07971 wrote: 
> Then you don't need to worry about power failure !

You are almost right but all audio will be placed on separated rack
without UPS and there is fire protection system where during antifire
messages all audio must be immediately switched off
This is a new object (building) and at the beginning of functionality
many fire or electricity tests are available... so I am 100% sure it
will be broken first day (having Respian onboard).

Regards
/Baxoza



baxoza's Profile: http://forums.slimdevices.com/member.php?userid=66500
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-22 Thread Jeff07971

> All players gonna be placed on server's room in restricted area so I'm
> not worried about removing/replace SD cards 

Then you don't need to worry about power failure !



*Players:* SliMP3,Squeezebox3 x3,Receiver,SqueezeLiteX,PiCorePlayer
x3,Wandboard
*Server:* LMS Version:  Latest Nightly on Centos 7 VM on ESXi 6.5.0U1 on
Dell T320
*Plugins:*
AutoRescan/BBCiPlayer/PowerSave/PowerSwitchIII/Squeezecloud/Spotty/Player
Groups
*Remotes:* iPeng9/Orangesqueeze/PC/Jivelite/SqueezeLiteX
*Music:* 522GB,1660 albums with 23087 songs by 5204 artists mostly
FLACs

*Want a webapp ?* See
http://forums.slimdevices.com/showthread.php?104305-Webapp-for-LMS

Jeff07971's Profile: http://forums.slimdevices.com/member.php?userid=49290
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-22 Thread baxoza

Greg Erskine wrote: 
> Remember piCorePlayer has a http web server used for configuration, so
> don't use piCorePlayer!
> 
> Just use Raspbian and load squeezelite and configure yourself. That will
> close a few holes.
> 
> Once you allow Raspberry Pi's into your environment anyone with physical
> access can remove the SD card and boot whatever they like in 2 minutes.
> So ensure you have physical security in place.
> 
> regards
> Greg

I think that is only configuration page - what user can do ? change
settings for itself ? Even if - blocking port 80 on managed switch or
remove config page from piCorePlayer is not difficult.

Lunching player + LMS on Respian where booting and system partition is
write enabled on start is very risky - every power failure during
booting sequence makes whole player unstable or even unbootable. So I
think PiCorePlayer has always read-only partition and this is what I am
believing for.

All players gonna be placed on server's room in restricted area so I'm
not worried about removing/replace SD cards :)

Regards
/Baxoza



baxoza's Profile: http://forums.slimdevices.com/member.php?userid=66500
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-20 Thread Michael Herger

If you look carefully at the OP's diagram there is no audio traffic over
the LAN only port 9000 control !!


But audio is streamed over port 9000, too. It's not only control. Maybe 
I'm overcomplicating things... just let us know how it worked out.


--

Michael
___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-20 Thread Jeff07971

mherger wrote: 
> > Use Raspbian for the LMS server and install apache with a HTTPS
> reverse
> > proxy, block non https traffic with firewalld or iptables Simple.
> 
> And how would the players stream? They don't support https.
> 
> 
> -- 
> 
> Michael

Hi Michael,

If you look carefully at the OP's diagram there is no audio traffic over
the LAN only port 9000 control !!

I am assuming that it was the webgui over https he needs

;)

Jeff



*Players:* SliMP3,Squeezebox3 x3,Receiver,SqueezeLiteX,PiCorePlayer
x3,Wandboard
*Server:* LMS Version:  Latest Nightly on Centos 7 VM on ESXi 6.5.0U1 on
Dell T320
*Plugins:*
AutoRescan/BBCiPlayer/PowerSave/PowerSwitchIII/Squeezecloud/Spotty/Player
Groups
*Remotes:* iPeng9/Orangesqueeze/PC/Jivelite/SqueezeLiteX
*Music:* 522GB,1660 albums with 23087 songs by 5204 artists mostly
FLACs

*Want a webapp ?* See
http://forums.slimdevices.com/showthread.php?104305-Webapp-for-LMS

Jeff07971's Profile: http://forums.slimdevices.com/member.php?userid=49290
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-19 Thread Michael Herger

Use Raspbian for the LMS server and install apache with a HTTPS reverse
proxy, block non https traffic with firewalld or iptables Simple.


And how would the players stream? They don't support https.


--

Michael
___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-19 Thread Greg Erskine

Remember piCorePlayer has a http web server used for configuration, so
don't use piCorePlayer!

Just use Raspbian and load squeezelite and configure yourself. That will
close a few holes.

Once you allow Raspberry Pi's into your environment anyone with physical
access can remove the SD card and boot whatever they like in 2 minutes.
So ensure you have physical security in place.

regards
Greg



Greg Erskine's Profile: http://forums.slimdevices.com/member.php?userid=7403
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-19 Thread pippin

baxoza wrote: 
> Yes !!! it would be nice and I think it should be standard in this
> times 
> LMS using plugins like Spotify, Tidal etc. where is secured protocol
> what is acceptable in plugins but LMS is ... I don't know... old skull ?
> 
> I agree with this there is no ability on hardware devices to change this
> - I am only wish for Rasspberry's LMS additional feature ("select LMS
> control method: open (http) or secured (https)" - same should be with
> CLI). Thats all... :)
> Regards
> /Baxoza

So how would this look in a „standard“ way? How do you create a TLS
certificate for a local machine in a „standard“ way and how do you
secure it?
What’s the added security value, especially in a corporate network where
spoofing should be quite easy?



---
learn more about iPeng, the iPhone and iPad remote for the Squeezebox
and
Logitech UE Smart Radio as well as iPeng Party, the free Party-App, 
at penguinlovesmusic.com
*New: iPeng 9, the Universal App for iPhone, iPad and Apple Watch*

pippin's Profile: http://forums.slimdevices.com/member.php?userid=13777
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-19 Thread baxoza

Jeff07971 wrote: 
> 
> 
> One friendly word of warning though, If you antagonist our best boy or
> any other our devs you will find help hard to find on this forum. 
> 
> Jeff

I am cool :) I don't have anything agains ANY Member of the forum - I am
far away to be antagonist - trust me :) 
/Baxoza



baxoza's Profile: http://forums.slimdevices.com/member.php?userid=66500
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-19 Thread baxoza

Jeff07971 wrote: 
> OK then this is really simple.
> 
> Keep piCorePlayer for the players
> 
> Use Raspbian for the LMS server and install apache with a HTTPS reverse
> proxy, block non https traffic with firewalld or iptables Simple.
> 
> See posts here
> http://forums.slimdevices.com/showthread.php?106471-LMS-apache-reverse-proxy&p=867874&viewfull=1#post867874
> 
> And extra user commands for piCorePlayer here
> http://forums.slimdevices.com/showthread.php?107352-Announce-piCorePlayer-3-20&p=909496&viewfull=1#post909496
> 
> So you're all sorted !
> Jeff

Jeff,  THANKS A LOT !!! - I will follow Your suggestions - I will let
You know how it ends :)
Regards
/Baxoza



baxoza's Profile: http://forums.slimdevices.com/member.php?userid=66500
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-19 Thread Jeff07971

OK then this is really simple.

Keep piCorePlayer for the players

Use Raspbian for the LMS server and install apache with a HTTPS reverse
proxy, block non https traffic with firewalld or iptables Simple.

See posts here
http://forums.slimdevices.com/showthread.php?106471-LMS-apache-reverse-proxy&p=867874&viewfull=1#post867874

And extra user commands for piCorePlayer here
http://forums.slimdevices.com/showthread.php?107352-Announce-piCorePlayer-3-20&p=909496&viewfull=1#post909496

So you're all sorted !


One friendly word of warning though, If you antagonist our best boy or
any other our devs you will find help hard to find on this forum. 

Jeff



*Players:* SliMP3,Squeezebox3 x3,Receiver,SqueezeLiteX,PiCorePlayer
x3,Wandboard
*Server:* LMS Version:  Latest Nightly on Centos 7 VM on ESXi 6.5.0U1 on
Dell T320
*Plugins:*
AutoRescan/BBCiPlayer/PowerSave/PowerSwitchIII/Squeezecloud/Spotty/Player
Groups
*Remotes:* iPeng9/Orangesqueeze/PC/Jivelite/SqueezeLiteX
*Music:* 522GB,1660 albums with 23087 songs by 5204 artists mostly
FLACs

*Want a webapp ?* See
http://forums.slimdevices.com/showthread.php?104305-Webapp-for-LMS

Jeff07971's Profile: http://forums.slimdevices.com/member.php?userid=49290
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-19 Thread baxoza

Jeff07971 wrote: 
> And you want the control Web GUI over https from the Pc's ?

Yes !!! it would be nice and I think it should be standard in this
times 
LMS using plugins like Spotify, Tidal etc. where is secured protocol
what is acceptable in plugins but LMS is ... I don't know... old skull ?

I agree with this there is no ability on hardware devices to change this
- I am only wish for Rasspberry's LMS additional feature ("select LMS
control method: open (http) or secured (https)" - same should be with
CLI). Thats all... :)
Regards
/Baxoza



baxoza's Profile: http://forums.slimdevices.com/member.php?userid=66500
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-19 Thread baxoza

Jeff07971 wrote: 
> From 1 PiCorePlayer LMS on a Pi ?
> 
> I don't know for sure because I run LMS on a x86-64 linux system but my
> initial thought is good luck with that !

In this case are 12x RPI (1 RPI per zone) so there is no problem with
LMS (1 LMS per 1 zone) but at home I have 1 RPI with 8 zones and it
works well (1 LMS can handle 8x squeezelite players with synchronize
what I really love) - there is only small problem witch startup script
and lunching finally 8 players at startup. Default PiCorePlayer setup
page allows to 3 additional lines (with user script) to run ... g..
:)
Regards
/Baxoza



baxoza's Profile: http://forums.slimdevices.com/member.php?userid=66500
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-19 Thread Jeff07971

So are you saying that you have 12 piCorePlayer PLAYERS running from one
piCoreplayer LMS ?

And you want the control Web GUI over https from the Pc's ?



*Players:* SliMP3,Squeezebox3 x3,Receiver,SqueezeLiteX,PiCorePlayer
x3,Wandboard
*Server:* LMS Version:  Latest Nightly on Centos 7 VM on ESXi 6.5.0U1 on
Dell T320
*Plugins:*
AutoRescan/BBCiPlayer/PowerSave/PowerSwitchIII/Squeezecloud/Spotty/Player
Groups
*Remotes:* iPeng9/Orangesqueeze/PC/Jivelite/SqueezeLiteX
*Music:* 522GB,1660 albums with 23087 songs by 5204 artists mostly
FLACs

*Want a webapp ?* See
http://forums.slimdevices.com/showthread.php?104305-Webapp-for-LMS

Jeff07971's Profile: http://forums.slimdevices.com/member.php?userid=49290
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-19 Thread Jeff07971

> 12 independent zones

>From 1 PiCorePlayer LMS on a Pi ?

I don't know for sure because I run LMS on a x86-64 linux system but my
initial thought is good luck with that !



*Players:* SliMP3,Squeezebox3 x3,Receiver,SqueezeLiteX,PiCorePlayer
x3,Wandboard
*Server:* LMS Version:  Latest Nightly on Centos 7 VM on ESXi 6.5.0U1 on
Dell T320
*Plugins:*
AutoRescan/BBCiPlayer/PowerSave/PowerSwitchIII/Squeezecloud/Spotty/Player
Groups
*Remotes:* iPeng9/Orangesqueeze/PC/Jivelite/SqueezeLiteX
*Music:* 522GB,1660 albums with 23087 songs by 5204 artists mostly
FLACs

*Want a webapp ?* See
http://forums.slimdevices.com/showthread.php?104305-Webapp-for-LMS

Jeff07971's Profile: http://forums.slimdevices.com/member.php?userid=49290
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-19 Thread baxoza

mherger wrote: 
> > in sum:
> > User on PC Windows should control piCoreplayer over secured protocol
> > like https - the rest of traffic RPI <--> internet is in old fashion.
> > 
> > Do you see it now in brighter colors ?
> 
> No brighter at all. Exactly the same as before. Forget it.
> 
> -- 
> 
> Michael

Ok, Michael - I will try in other way (with You or not) I will not
forget it :)- I will let You know... 

Regards
/Baxoza



baxoza's Profile: http://forums.slimdevices.com/member.php?userid=66500
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-19 Thread baxoza

jmsizun wrote: 
> Hi,
> 
> I am curious as to why you are asking about entreprise-level network
> security requirements regarding a mostly-DIY audio multiroom solution.
> What are you trying to achieve ?
> 
> are you trying to create a commercial product ?
> Are you trying to "sonorize" your company premises? (in this case, which
> size are we taking about?)
> 
> 
> And, on another level: I would also be curious how your IT specialist
> achieves his "only secure protocols in my internal network" policy, when
> managing HTTPS certificates can be such a pain.
> 
> regards,
> Jean-Michel

Ok, here are my answers:

-"What are you trying to achieve ?" -
I am trying:
(1) to save money having PiCorePlayer in office (in 12 independent zones
finally controlled from windows via web client or Win app like: Moose
etc. or Mobile App: iPeng ) against commercial products like: Sonos,
Yamaha Musicast 
(2) and additionally have controled all zones from Wago (BMS system) via
individual Light switches (vol+/-, play/stop, and global stop-playing
leaving office, etc.)- I have this in my own house and this WHOLE
solution works great so why not apply this in office... ?

-"are you trying to create a commercial product ?"- 
- Maybe in the near future - who knows... :)

-"Are you trying to "sonorize" your company premises? (in this case,
which size are we taking about?)"-
Are You mean "Sonos-like" alternative ? Yes but cheaper (see 1st
answer).

-"And, on another level: I would also be curious how your IT specialist
(...)"-
hmm... maybe You are right - I am only trying to achieve what they wish.


Regards
/Baxoza



baxoza's Profile: http://forums.slimdevices.com/member.php?userid=66500
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-17 Thread jmsizun

ideas (with the hypothesis that only port 9000 is used):
* to secure the comms between picoreplayer and LMS: why not opening a
SSH connection from picoreplayer to LMS server with 9000 port forwarding
(localhost on picoreplayer:9000 -> LMS-localhost:9000).
* to secure access to web UI: why not installing a HTTPS reverse-proxy
on the LMS server (server:443 -> localhost:9000)
* and block direct access to server:9000 from LAN/WAN with firewall



jmsizun's Profile: http://forums.slimdevices.com/member.php?userid=64093
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-17 Thread TonioRoffo

A very old package, but this used to be my go to to encrypt legacy
connections:

http://www.winton.org.uk/zebedee/



TonioRoffo's Profile: http://forums.slimdevices.com/member.php?userid=54314
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-17 Thread jmsizun

Hi,

I am curious as to why you are asking about entreprise-level network
security requirements regarding a mostly-DIY audio multiroom solution.
What are you trying to achieve ?

are you trying to create a commercial product ?
Are you trying to "sonorize" your company premises? (in this case, which
size are we taking about?)


And, on another level: I would also be curious how your IT specialist
achieves his "only secure protocols in my internal network" policy, when
managing HTTPS certificates can be such a pain.

regards,
Jean-Michel



jmsizun's Profile: http://forums.slimdevices.com/member.php?userid=64093
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-15 Thread Michael Herger

in sum:
User on PC Windows should control piCoreplayer over secured protocol
like https - the rest of traffic RPI <--> internet is in old fashion.

Do you see it now in brighter colors ?


No brighter at all. Exactly the same as before. Forget it.

--

Michael
___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-15 Thread Greg Erskine

Greg Erskine wrote: 
> piCorePlayer was not written with this environment in mind. Raspberry
> Pi's are not very secure for corporate environments by definition.

I can only repeat myself.



Greg Erskine's Profile: http://forums.slimdevices.com/member.php?userid=7403
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-15 Thread baxoza

mherger wrote: 
> Ok, here are some of the many issues you'll be facing:
> 
> piCorePlayer: no-go
> - web UI is not encrypted
> - admin console has no password protection
> - ssh is using some default credentials
> 
> LMS:
> - web UI is not encrypted
> - CLI is not encrypted
> 
> Your to-do list:
> - implement https on LMS
> - disable CLI
> - modify tray icon to use https instead of CLI
> - modify control panel to use https instead of CLI
> - implement direct streaming of https resources in squeezelite
> - implement https for piCorePlayer
> - implement user management in piCorePlayer
> 
> Once you're done with this you'll be closer to what you think you need.
> 
> At least three different projects need major enhancements.
> 
> I guess you'll have to stick with Windows Media player to listen to 
> music at work. Or your smartphone.
> 
> -- 
> 
> Michael

Michael, I am guilty of additional clarification to You and others, see
updated img. So I think that only:

"Your to-do list: 
- implement https on LMS" is necessary.  Rest stays untouched - ok maybe
CLI could be also secured...

24716

in sum:
User on PC Windows should control piCoreplayer over secured protocol
like https - the rest of traffic RPI <--> internet is in old fashion. 

Do you see it now in brighter colors ?


+---+
|Filename: company_block3.png   |
|Download: http://forums.slimdevices.com/attachment.php?attachmentid=24716|
+---+


baxoza's Profile: http://forums.slimdevices.com/member.php?userid=66500
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-14 Thread pippin

baxoza wrote: 
> Thank You for answer.
> Yes - You are right ! So I told to specialists that the security
> firewall should be enough but security policy is required so that there
> is no unencrypted traffic so they too are right.
> Please tell me - is really unnecessary/impossible to add this feature
> (at least https protocol) to LMS (slimserwer) for piCoreplayer in the
> near future ? 
> Even the policy of Apple Store from last year requires that all sent
> applications to their store should communicate over SSL -> "Developers
> will have to start supporting HTTPS by getting an SSL certificate for
> their server infrastructure. " from
> https://www.thesslstore.com/blog/apple-will-require-use-ats-2017/
> Maybe this is the reason that there is only one application iPeng
> (issued before the introduction of this rule) to control LMS on iOS
> devices. It will allow new applications to appear...

No, Apple has an exception for local networks.
Plus, they don’t enforce the policy, yet.
HTTPS over local networks also isn’t really feasible since you’d have to
somehow authenticate the identity of the machine for this to make any
sense and how do you do that? Create a public registry for all your
devices on your network?



---
learn more about iPeng, the iPhone and iPad remote for the Squeezebox
and
Logitech UE Smart Radio as well as iPeng Party, the free Party-App, 
at penguinlovesmusic.com
*New: iPeng 9, the Universal App for iPhone, iPad and Apple Watch*

pippin's Profile: http://forums.slimdevices.com/member.php?userid=13777
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-14 Thread epoch1970

Greg Erskine wrote: 
> Do companies actually allow users to setup audio systems in a corporate
> environment? :confused:
> 
> If I'd tried to do this in any of my jobs I would have been severely
> reprimanded or sacked. Half the time I was the IT decision maker and
> would have re-ghosted any such PC immediately.
> 
> piCorePlayer was not written with this environment in mind. Raspberry
> Pi's are not very secure for corporate environments by definition.
> 
> regards
> Greg
This requirement for host authentication and for encryption of music
streams within a LAN is laughable. 
Anyways,
The OP could shove the whole thing in a VLAN and more or less be done
with it.
And/or could use a VPN to tunnel the connexion. OpenVPN works fine on
pCP as far as I know.



3 SB 3 • Libratone Loop, Zipp Mini • iPeng (iPhone + iPad) • LMS 7.9
(linux) with plugins: CD Player, WaveInput, Triode's BBC iPlayer by bpa
• IRBlaster by Gwendesign (Felix) • Server Power Control by Gordon
Harris • Smart Mix, Music Walk With Me, What Was That Tune? by Michael
Herger • PowerSave by Jason Holtzapple • Song Info, Song Lyrics by
Erland Isaksson • AirPlay Bridge by philippe_44 • WeatherTime by Martin
Rehfeld • Auto Dim Display, SaverSwitcher, ContextMenu by Peter Watkins.

epoch1970's Profile: http://forums.slimdevices.com/member.php?userid=16711
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-14 Thread Jeff07971

Greg Erskine wrote: 
> Do companies actually allow users to setup audio systems in a corporate
> environment? :confused:
> 
> If I'd tried to do this in any of my jobs I would have been severely
> reprimanded or sacked. Half the time I was the IT decision maker and
> would have re-ghosted any such PC immediately.
> 
> piCorePlayer was not written with this environment in mind. Raspberry
> Pi's are not very secure for corporate environments by definition.
> 
> regards
> Greg

Well My company allowed me to set up an LMS server for the small staff,
however I was the IT guy !
I monitored the communications of the server (On Linux) quite closely
though, however the OP's "IT Guru" seems to think that using HTTPS make
things secure !



*Players:* SliMP3,Squeezebox3 x3,Receiver,SqueezeLiteX,PiCorePlayer
x3,Wandboard
*Server:* LMS Version:  Latest Nightly on Centos 7 VM on ESXi 6.5.0U1 on
Dell T320
*Plugins:*
AutoRescan/BBCiPlayer/PowerSave/PowerSwitchIII/Squeezecloud/Spotty/Player
Groups
*Remotes:* iPeng9/Orangesqueeze/PC/Jivelite/SqueezeLiteX
*Music:* 522GB,1660 albums with 23087 songs by 5204 artists mostly
FLACs

*Want a webapp ?* See
http://forums.slimdevices.com/showthread.php?104305-Webapp-for-LMS

Jeff07971's Profile: http://forums.slimdevices.com/member.php?userid=49290
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-14 Thread Greg Erskine

Do companies actually allow users to setup audio systems in a corporate
environment? :confused:

If I'd tried to do this in any of my jobs I would have been severely
reprimanded or sacked. Half the time I was the IT decision maker and
would have re-ghosted any such PC immediately.

piCorePlayer was not written with this environment in mind. Raspberry
Pi's are not very secure for corporate environments by definition.

regards
Greg



Greg Erskine's Profile: http://forums.slimdevices.com/member.php?userid=7403
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-14 Thread Michael Herger

Ok, here are some of the many issues you'll be facing:

piCorePlayer: no-go
- web UI is not encrypted
- admin console has no password protection
- ssh is using some default credentials

LMS:
- web UI is not encrypted
- CLI is not encrypted

Your to-do list:
- implement https on LMS
- disable CLI
- modify tray icon to use https instead of CLI
- modify control panel to use https instead of CLI
- implement direct streaming of https resources in squeezelite
- implement https for piCorePlayer
- implement user management in piCorePlayer

Once you're done with this you'll be closer to what you think you need. 
At least three different projects need major enhancements.


I guess you'll have to stick with Windows Media player to listen to 
music at work. Or your smartphone.


--

Michael
___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-14 Thread pinkdot

Is there a reason why installing LMS on piCorePlayer isn't an option?



-LMS on Raspian Stretch -> 2x Radio
-RPI 3 ('Mopidy' (https://www.mopidy.com/)),  Aune S6 - Exposure 3010S2
- PMC FB1i

pinkdot's Profile: http://forums.slimdevices.com/member.php?userid=34644
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-14 Thread Jeff07971

baxoza wrote: 
> Ok, Michael, here is some picture of company setup. Maybe now it will be
> clear for You:
> 
> 24708

If this is truly what you IT specialist is asking for (its not) then
goodbye internet as DNS and many other LAN traffic is not encrypted.

Jeff



*Players:* SliMP3,Squeezebox3 x3,Receiver,SqueezeLiteX,PiCorePlayer
x3,Wandboard
*Server:* LMS Version:  Latest Nightly on Centos 7 VM on ESXi 6.5.0U1 on
Dell T320
*Plugins:*
AutoRescan/BBCiPlayer/PowerSave/PowerSwitchIII/Squeezecloud/Spotty/Player
Groups
*Remotes:* iPeng9/Orangesqueeze/PC/Jivelite/SqueezeLiteX
*Music:* 522GB,1660 albums with 23087 songs by 5204 artists mostly
FLACs

*Want a webapp ?* See
http://forums.slimdevices.com/showthread.php?104305-Webapp-for-LMS

Jeff07971's Profile: http://forums.slimdevices.com/member.php?userid=49290
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-14 Thread baxoza

mherger wrote: 
> > "Using LMS to  terminate https already is implemented." Great!!! How
> to
> > switch LMS to https  (Settings>Advanced>Security>CSRF Protection
> > Level <-- is this https ?)
> 
> Oh my... we're running in circles. You don't understand what you're 
> asking for, I'm sorry to say.
> 
> Up this thread you said: "My IT Specialists has internal policy: Every 
> trefic should be secure."
> 
> To which I responded: "LMS traffic cannot be encrypted because the 
> hardware players don't support https."
> 
> Which basically means: you cannot have all traffic secured. You can't.
> 
> But most likely this isn't what your IT specialist wants anyway. I guess
> 
> he doesn't want any access from the outside in a non-encrypted way. And
> 
> that's where I said: don't open your LMS to the internet. Or tell us 
> more about your setup.
> 
> And here's where I'm stopping. We need more information about your 
> setup. Your use case. The problem your IT guy is seeing. Maybe he can 
> chime in here?
> 
> -- 
> 
> Michael

Ok, Michael, here is some picture of company setup. Maybe now it will be
clear for You:

24708


+---+
|Filename: company_block2.png   |
|Download: http://forums.slimdevices.com/attachment.php?attachmentid=24708|
+---+


baxoza's Profile: http://forums.slimdevices.com/member.php?userid=66500
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-14 Thread Michael Herger

"Using LMS to  terminate https already is implemented." Great!!! How to
switch LMS to https  (Settings>Advanced>Security>CSRF Protection
Level <-- is this https ?)


Oh my... we're running in circles. You don't understand what you're 
asking for, I'm sorry to say.


Up this thread you said: "My IT Specialists has internal policy: Every 
trefic should be secure."


To which I responded: "LMS traffic cannot be encrypted because the 
hardware players don't support https."


Which basically means: you cannot have all traffic secured. You can't.

But most likely this isn't what your IT specialist wants anyway. I guess 
he doesn't want any access from the outside in a non-encrypted way. And 
that's where I said: don't open your LMS to the internet. Or tell us 
more about your setup.


And here's where I'm stopping. We need more information about your 
setup. Your use case. The problem your IT guy is seeing. Maybe he can 
chime in here?


--

Michael
___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-14 Thread baxoza

mherger wrote: 
> > Http_client <> LMS(slimserver) <> player(squezelite)  (Am I right
> > with this topology ?)
> 
> If you're not allowed to have any non-https traffic in your network, 
> then the https endpoint must be the player, not LMS. Using LMS to 
> terminate https already is implemented.
> 
> I think you're not clear about what your IT guys want from you. And 
> they're not clear how an LMS environment works. Because otherwise you'd
> 
> just be happy with what you have already :-).
> 
> -- 
> 
> Michael
Thanks again for fast answer :)
"Using LMS to  terminate https already is implemented." Great!!! How to
switch LMS to https  (Settings>Advanced>Security>CSRF Protection
Level <-- is this https ?)



baxoza's Profile: http://forums.slimdevices.com/member.php?userid=66500
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-14 Thread Michael Herger

Http_client <> LMS(slimserver) <> player(squezelite)  (Am I right
with this topology ?)


If you're not allowed to have any non-https traffic in your network, 
then the https endpoint must be the player, not LMS. Using LMS to 
terminate https already is implemented.


I think you're not clear about what your IT guys want from you. And 
they're not clear how an LMS environment works. Because otherwise you'd 
just be happy with what you have already :-).


--

Michael
___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-14 Thread baxoza

mherger wrote: 
> It would need to be implemented in the -players-, not in LMS. Firmware
> updates for hardware players you can forget. squeezelite is not my
> domain.
> 
> And no, I'm not ignoring you. It's just that you're asking for something
> you've got responses for before. But you're not happy with the response,
> therefore you keep asking...

"It would need to be implemented in the -players-, not in LMS." - really
? 
I think that the LMS is between http-browser (on client machine) and the
player(s) - it looks like that: 

Http_client <> LMS(slimserver) <> player(squezelite)  (Am I right
with this topology ?)

in my case Http_client is on windows machine, the rest is on RPI3.
LMS says to player what to play/do/etc.  according to request from LMS
page (on windows) over http <--- and this I wish You to consider about.



baxoza's Profile: http://forums.slimdevices.com/member.php?userid=66500
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-14 Thread mherger

baxoza wrote: 
> I only asking for this additional feature for piCorePlayer lunched on
> Raspberry Pi 3 - is this impossible to add this in near future to
> slimserwer (LMS for piCoreplayer) ?

It would need to be implemented in the -players-, not in LMS. Firmware
updates for hardware players you can forget. squeezelite is not my
domain.

And no, I'm not ignoring you. It's just that you're asking for something
you've got responses for before. But you're not happy with the response,
therefore you keep asking...



Michael

http://www.herger.net/slim-plugins - Spotty, MusicArtistInfo

mherger's Profile: http://forums.slimdevices.com/member.php?userid=50
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-14 Thread baxoza

baxoza wrote: 
> I only asking for this additional feature for piCorePlayer lunched on
> Raspberry Pi 3 - is this impossible to add this in near future to
> slimserwer (LMS for piCoreplayer) ?

Michael why are You ignoring me and my question? I am sad ;)



baxoza's Profile: http://forums.slimdevices.com/member.php?userid=66500
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-08 Thread baxoza

mherger wrote: 
> LMS traffic cannot be encrypted because the hardware players don't
> support https.

I only asking for this additional feature for piCorePlayer lunched on
Raspberry Pi 3 - is this impossible to add this in near future to
slimserwer (LMS for piCoreplayer) ?



baxoza's Profile: http://forums.slimdevices.com/member.php?userid=66500
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-05 Thread mherger

LMS traffic cannot be encrypted because the hardware players don't
support https.



Michael

http://www.herger.net/slim-plugins - Spotty, MusicArtistInfo

mherger's Profile: http://forums.slimdevices.com/member.php?userid=50
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-03-01 Thread peterw

BTW I'm pretty sure Apple effectively dropped that requirement before it
was ever enforced.
https://cheapsslsecurity.com/blog/apple-to-extend-the-ios-app-transport-security-ats-time-duration/



owner of the stuff that used to reside at http://www.tux.org/~peterw/ 
Note: The best way to reach me is email or PM, as I don't spend time on
the forums.
*Free plugins:*  AllQuiet Auto Dim/AutoDisplay BlankSaver ContextMenu
DenonSerial
FuzzyTime KidsPlay KitchenTimer PlayLog PowerCenter/BottleRocket
SaverSwitcher
SettingsManager SleepFade StatusFirst SyncOptions VolumeLock

peterw's Profile: http://forums.slimdevices.com/member.php?userid=2107
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-02-28 Thread peterw

baxoza wrote: 
> What a pity :(
> My IT Specialists has internal policy: Every trefic should be secure.
> I intent to control LMS from PC. Becouse RPI is connected to the
> internet it makes ability to hack the Windows over not secured
> connection - port 9000 opened etc. 
> RPI and PC are behind firewall but RPI (CLI and http protocol) is
> potentially weak link in this net chain.
> 
> Can You suggest me how to solve it ?  What should I install on
> piCorePlayer ? 
> 

Look at stunnel. You might be able to run it on the LMS server to make
HTTP and CLI network services available via TLS-secured ports, and then
on the picoreplayer so that the LMS client thinks it's connecting to LMS
running locally without TLS security. 

If the LMS client only uses the tcp/9000 HTTP service (sorry, it's been
a long time since I've messed with LMS infrastructure details) then
Apache or nginx might work on the LMS server side, as mherger
suggested,. But since the Squeezebox client expects to make simple,
unencrypted TCP connections, you'll need something like an stunnel
"client = yes" daemon on the LMS client device to allow it to connect
over the LAN to the TLS-secured ports.

Client: [Squeezebox client emulator --(plain TCP)--> local stunnel in
client mode] --(TCP+TLS on LAN, encrypted+authenticated)-->
Server:[stunnel in server mode --(plain TCP)--> LMS]

The details might be very outdated, but I'm imagining something like the
MySQL setup described in section 5 of
https://linuxgazette.net/107/odonovan.html



owner of the stuff that used to reside at http://www.tux.org/~peterw/ 
Note: The best way to reach me is email or PM, as I don't spend time on
the forums.
*Free plugins:*  AllQuiet Auto Dim/AutoDisplay BlankSaver ContextMenu
DenonSerial
FuzzyTime KidsPlay KitchenTimer PlayLog PowerCenter/BottleRocket
SaverSwitcher
SettingsManager SleepFade StatusFirst SyncOptions VolumeLock

peterw's Profile: http://forums.slimdevices.com/member.php?userid=2107
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-02-26 Thread mherger

It's not clear to me how you're using your LMS. I would support the idea
of encrypting traffic on public networks. But is this a requirement for
your LAN? The Pi does access the internet, yes. But it's not accessible
from the internet if configured correctly. You're saying that it was
behind a firewall. Then nobody should be able to access it from the
internet. 

Maybe you want to describe what you're trying to do: where your LMS is
living, who should have access to it etc.



Michael

http://www.herger.net/slim-plugins - Spotty, MusicArtistInfo

mherger's Profile: http://forums.slimdevices.com/member.php?userid=50
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-02-25 Thread mherger

baxoza wrote: 
> Is possible to add to LMS a Secure protocol for http and CLI commands?

No, not without additional software (eg. revers proxying through
nginx/apache or the like).

And then I just have to add my standard warning: don't open up your LMS
to the internet. I wouldn't even do so using a password. It's just not
designed to be used in a hostile environment.



Michael

http://www.herger.net/slim-plugins - Spotty, MusicArtistInfo

mherger's Profile: http://forums.slimdevices.com/member.php?userid=50
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-02-24 Thread paul-

baxoza wrote: 
> Hello everyone.
> I am looking for email (or other contact) of slimserver (picoreplayer
> LMS) author. I have technical question for Him. 
> Thanks a lot.
> /Baxoza
> 
> Ps.
> I didn't find it in any licence/info files in picorePleyer distribution.

Licensing for packages is included in the info file.
http://picoreplayer.sourceforge.net/tcz_repo/8.x/armv7/tcz/slimserver.tcz.info

The license is also distributed in the tcz.  
/usr/local/slimserver/License.txt

I create the package directly from the git source at
https://github.com/Logitech/slimserver



paul-'s Profile: http://forums.slimdevices.com/member.php?userid=58858
View this thread: http://forums.slimdevices.com/showthread.php?t=108752

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter


Re: [SlimDevices: SqueezeCenter] Slimserver (LMS for picorePlayer) author - ask for contact

2018-02-24 Thread Michael Herger
What exact aspect do you need information for? You might want to just ask here.

> Am 24.02.2018 um 16:53 schrieb baxoza 
> :
> 
> 
> Hello everyone.
> I am looking for email (or other contact) of slimserver (picoreplayer
> LMS) author. I have technical question for Him. 
> Thanks a lot.
> /Baxoza
> 
> Ps.
> I didn't find it in any licence/info files in picorePleyer distribution.
> 
> 
> 
> baxoza's Profile: http://forums.slimdevices.com/member.php?userid=66500
> View this thread: http://forums.slimdevices.com/showthread.php?t=108752
> 
> ___
> Squeezecenter mailing list
> Squeezecenter@lists.slimdevices.com
> http://lists.slimdevices.com/mailman/listinfo/squeezecenter

___
Squeezecenter mailing list
Squeezecenter@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/squeezecenter