About: Ira Feldman

Hi Cristian,

They referred me to the error message (in my original post) about MultiViews (whatever they are) are not allowed in the .htaccess file. I’m using whatever was installed by s2member. What are MultiViews? How do we check that it is correct?

Thanks,

Ira

Hi Cristian,

Your reply doesn’t make sense on a few levels. Hopefully you will be able to help me figure out what is going on..

1. You shouldn’t be able to view the file since you haven’t logged in. (I didn’t see you having registered as a free account.)
2. When I try the non-rewritten URL above – and I’m not logged in, I receive the page that requests I register (as expected).
3. When I try the non-rewritten URL above and I’m logged in, it generates a Cloud Front request that results in this XML error file

This XML file does not appear to have any style information associated with it. The document tree is shown below.
<Error>
< Code>NoSuchKey</ Code>
<Message>The specified key does not exist.</Message>
<Key>video.mp4</Key>
<RequestId>EC6C6B99D12B2BEF</RequestId>
<HostId>
fXAmb8d31vk5WIf/So7H41gZtSzSgEOAwU7anPSLznMHmaz4cxk5bXLtYgX8/7jS
</HostId>
</Error>

4. The httaccess I am using is the one supplied by S2member and it appears to do all the other rewrites correctly.

Would you kindly reverify your answer above?

Thank you,

Ira

Hi Jason,

Thanks for the follow-up. I just updated to v130404 and it looks like the problem has gone away.

Thanks,

Ira

Hi Jason & Cristian –

I figured out how to turn on logging on S3. So, looking into the logs here is what I see:

"-" "Bucket Explorer" -
39f82f3961cdb3abd03419f709c2fb348a7fca8e292012d36112ab35becd31fa iratest [29/Mar/2013:06:28:36 +0000] 75.XX.XX.XX 39f82f3961cdb3abd03419f709c2fb348a7fca8e292012d36112ab35becd31fa 4730DE52C4E5B504 REST.GET.OBJECT doof.png "GET /doof.png?AWSAccessKeyId=AKIAJANGYGY62F2G6JWA&Expires=1364799569&Signature=oETy3teoXNthFs2uG%2BcrGmTqkhc%3D HTTP/1.1" 200 - 114318 114318 17 14 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_5) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.172 Safari/537.22" -

39f82f3961cdb3abd03419f709c2fb348a7fca8e292012d36112ab35becd31fa iratest [29/Mar/2013:06:28:38 +0000] 75.XX.XX.XX - D459C46B92C87F83 REST.GET.OBJECT favicon.ico "GET /favicon.ico HTTP/1.1" 403 AccessDenied 231 - 11 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_5) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.172 Safari/537.22" -

39f82f3961cdb3abd03419f709c2fb348a7fca8e292012d36112ab35becd31fa iratest [29/Mar/2013:06:29:23 +0000] 75.XX.XX.XX 39f82f3961cdb3abd03419f709c2fb348a7fca8e292012d36112ab35becd31fa D72F0729EF534CAC 
REST.GET.BUCKET - "GET /?response-cache-control=no-cache%2C+must-revalidate%2C+max-age%3D0%2C+post-check%3D0%2C+pre-check%3D0&response-content-disposition=attachment%3B+filename%3D%22copyright.png%22&response-content-type=image%2Fpng&response-expires=Fri%2C+22+Mar+2013+06%3A28%3A39+GMT&AWSAccessKeyId=AKIAJANGYGY62F2G6JWA&Expires=1364624919&Signature=5JgSLSIFdcuU6p7RuF%2BUmbl6KPI%3D HTTP/1.1" 200 - 3412 - 227 226 "http://www.bitsworkshop.org/wordpress/2013/02/28/session-6-and-at-the-wafer-level-2/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_5) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.172 Safari/537.22" -

(New lines added for readability, IP Address redacted & I *WILL* change my AccessKeys when we are done debugging.)

The first access for doof.png was using a URL generated by Bucket Explorer. (I added a second item with the name doof.png to make it easy to find.)
The middle item appear something random.
The third item is using http://www.MYDOMAIN.org/wordpress/?s2member_file_download=/copyright.png via WordPress / s2Member.

Three items that stand out right off the bat on the s2member access:
1. It is a REST.GET.BUCKET instead of REST.GET.OBJECT like the first one.
2. The file name is not at the beginning of “GET /” but is a parameter buried unlike “GET /doof.png”
3. Whatever response-requires is it expired a week ago (3/22) instead of today (3/29). (I did these tests last night.

How do we track this down on the s2member side?

Thanks,

Ira

PS: Jason, I have the patch you provided in http://www.s2member.com/forums/topic/s2stream-short-code-url-problem/ in place right now. I don’t know if you test this issue with the patch or the “regular” code.

Hi Jason,

I just double checked. My bucket is not readable and I have removed all policies. Only access granted is to me. And the link http://iratest.s3.amazonaws.com/copyright.png results in Access Denied. (As noted above.)

Is there a way to see the URL that s2member is generating either from s2member or in a log somewhere? I’m afraid if I can get support from AWS (without being a paid support user) they will simply say we are generating the authenticated URL wrong.

Thanks,

Ira

Hi Cristian,

The XML file is an error message say “access denied”. I will try the wipe right now but creating a new bucket should have the same effect.

Yes, kindly ask Jason ASAP. I’m really falling behind in getting this working so any help would be great.

Thanks!

Ira

Hi Cristian,

Thank you for the clarification on the download key, I was confused about the functionality there.

s2member does control access to the file depending on if the member is logged in at the right level. What I would like to prevent is to keep the MEMBER who can view the video via JW Player from downloading the file itself. I realize that this may not be 100% achievable. However, I would prefer it to not be so easy as to grab the URL from the page source which is currently the case.

Yes, Amazon may be an option which I am researching further. But is there a simple way of hiding the URL of the source file as a starter? Or is there a way to make the video (in the file) unplayable after a certain time?

Thanks,

Ira

Cristian,

Without the short code, what is the correct “long code” to call the JW Player? I didn’t see that anywhere in the documentation.

Thanks,

Ira

Cristian,

Thanks! Any feedback yet? I still need a work around (other than not protecting specific files by membership level).

Thanks,

Ira