Recherche avancée

Sur d’autres sites (10533)

• Matomo SSO options and why is it useful ?

  8 novembre 2017, par Matomo Core Team — Plugins

  Bored with typing again and again different logins and passwords for each service you have access to ? Would you like to add hundreds or thousands of users with different roles to your Matomo (Piwik) at once ? Would you like to save time and effort of managing your users while increasing the security in your business ? Guess what, Matomo has come up with great features to do just that.

  But what is a SSO ?

  Before introducing you to new Matomo (Piwik) features, let me explain what a SSO is.
  SSO is the acronym for Single Sign On. As its name suggests this authentication process allows a user to access multiple applications with one set of login credentials.

  Advantages of using a SSO are numerous :

  • improving security, for example when an employee is leaving your company, how can you check that all his credentials have been removed ?
  • reducing employees time-wasters such as having to enter logins/passwords each time.
  • providing a centralized database for administrators. They can then easily manage permissions of all employees saving them heaps of time.
  • reduces support costs related to authentication / accounts management.

  In order to provide SSO options, two Matomo (Piwik) plugins have been developed and are available on the marketplace :

  • SAML
  • LDAP

  SAML

  

  SAML stands for “Security Assertion Markup Language”, it is a standard in order to exchange authentication and authorization between an identity provider (OneLogin, Okta, Ping Identity, ADFS, Google, Salesforce, SharePoint…) and a service provider.
  An identity provider is an online service that authenticates users on the Internet by using security tokens.

  Are you wondering if your business or organization is using any of these providers ? We recommend to ask your operations team or sysadmin.

  At InnoCraft, we developed a plugin in order to allow SSO with SAML for Matomo (Piwik). It can ensure consistent access control across the enterprise and external providers, potentially reducing support costs related to authentication and accounts management.

  The installation process is straightforward. All you need is to get the SAML premium feature from the marketplace. Once installed, you will access the SAML configuration interface through the admin where you can configure various settings :

  • SAML Status
  • Identity Provider (Entity ID, SSO endpoint info, Public x509 certificate)
  • Just-in-time provisioning and Mapping attributes
  • Access Synchronization
  • Advanced settings

  

  From there you will need to follow our detailed documentation to have it up and running :
  https://matomo.org/docs/login-saml/.
  Once finished, you will then be able to use SAML to authenticate to your Matomo (Piwik) account :

  

  As all premium features, SAML is eligible to a 30-day period money back guarantee, so do not hesitate to have it a try.

  LDAP

  

  LDAP stands for Lightweight Directory Access Protocol. As its names implies LDAP is a directory, hosted on a server, which organizes the data about people in your company.
  Thanks to the LDAP plugin, Matomo (Piwik) can be connected to your LDAP infrastructure and then use all its power in order to give each individual an access with different rights according to their needs.

  Let’s say that you have 1,000 employees within a company and they all need right now an access to the analytics reports in Matomo (Piwik) with different roles. This is what LDAP can do.

  Moreover if your business or organization is already using LDAP, we recommend using the LDAP connector for Matomo (Piwik) for better security, to stop wasting time of your users and sysadmins, and to reduce the costs related to account management.

  You understood it well. LDAP is a plugin which saves a LOT of time within an organization. Here is a preview of the settings part :

  

  LDAP has been developed by the Matomo (Piwik) core team and is available as a Free plugin on the marketplace.

  Try it now within the marketplace

  If you are surprised by the possibilities that Matomo (Piwik) is offering in terms of plugins, the good news is that many other plugins are waiting for you on the marketplace. Check out our premium marketplace which offers state-of-the-art plugins to get the most out of Matomo.

  And if you are a developer feel free to create your own plugin, a detailed documentation is available at : https://developer.matomo.org/guides/getting-started-part-1.

• ffmpeg dash Segment offset

  18 mars 2019, par inkubux

  I’m trying to integrate live-transcoding like "plex" or "emby" with my application.

  I am able to serve dash content over to shaka-player or dash.js but only in ’live-mode’. But I want to enable seeking through the player.

  I looked at plex and to enable this they create their own mpd file with duration so the player will have a full seekbar.

  However when seeking the player will ask for a segment number eg : 449. I need to stop ffmpeg and restart with an offset (-ss &lt;<segment>>)</segment>, but ffmpeg will just restart a transcode session from segment 0 with an initial segment.

  What I want is to tell ffmpeg to start at a seekpoint but only output from segment number and now-on.

  When playing with hls and mpegts, I can tell ffmpeg to output at a certain segment : with the option -segment_start_number but this is not available for dash. And plex use their own transcoder based of ffmpeg with the option -skip_to_segment

  I tried to ’hack’ around by keeping a manual offset on my web-server, even if I serve the "supposed" right segment after the seek point dash.js and shaka-player can’t recover the stream.. VLC on the other habd is able to (probably more tolerent) to errors in segments.

  Is the supposed right segment after a seek in dash (contains the initial segment) or only the segment.

  Is ffmpeg able to start segmenting dash as a supposed segment (for seek and resume)

  The same technique works in hls with forced key frames and a custom m3u8 (with all the "predicted" segments) but calculating the right segment length and the right bandwidth is much harder and hackish and dash is more tolerant to variation.

  I would really like to be able to seek through my live transcoding video.

  For reference here is a custom mpd file I serve to enable "seeking" :

  <mpd xmlns="urn:mpeg:dash:schema:mpd:2011" profiles="urn:mpeg:dash:profile:isoff-live:2011" type="static" suggestedpresentationdelay="PT1S" mediapresentationduration="PT49M2.920S" maxsegmentduration="PT2S" minbuffertime="PT10S">
  
      <period start="PT0S" duration="PT49M2.920S">
  
          <adaptationset segmentalignment="true">
  
              <segmenttemplate timescale="1" duration="1" initialization="$RepresentationID$/initial.mp4" media="$RepresentationID$/$Number$.m4s" startnumber="1">
  
              </segmenttemplate>
  
              <representation mimetype="video/mp4" codecs="avc1.640029" bandwidth="3766000" width="1920" height="1080">
  
              </representation>
  
          </adaptationset>
  
          <adaptationset segmentalignment="true">
  
              <segmenttemplate timescale="1" duration="1" initialization="$RepresentationID$/initial.mp4" media="$RepresentationID$/$Number$.m4s" startnumber="1">
  
              </segmenttemplate>
  
              <representation mimetype="audio/mp4" codecs="mp4a.40.2" bandwidth="188000" audiosamplingrate="48000">
  
                  <audiochannelconfiguration schemeiduri="urn:mpeg:dash:23003:3:audio_channel_configuration:2011" value="6"></audiochannelconfiguration>
  
              </representation>
  
          </adaptationset>
  
      </period>
  
  </mpd>

  And here is the ffmpeg command to pull it off :

  ffmpeg -ss 0 -i movie.mkv -y -acodec aac -vcodec libx264 -f dash -min_seg_duration 1000000 -individual_header_trailer 0 -pix_fmt yuv420p -vf scale=trunc(min(max(iw\,ih*dar)\,1920)/2)*2:trunc(ow/dar/2)*2 -bsf:v h264_mp4toannexb -profile:v high -level 4.1 -map_chapters -1 -map_metadata -1 -preset veryfast -movflags frag_keyframe+empty_moov -use_template 1 -use_timeline 0 -remove_at_exit 1 -crf 23 -bufsize 7532k -maxrate 3766k -start_at_zero -threads 0 -force_key_frames expr:if(isnan(prev_forced_t),eq(t,t),gte(t,prev_forced_t+1)) -init_seg_name $RepresentationID$/0_initial.mp4 -media_seg_name $RepresentationID$/0_$Number$.m4s /transcoding_temp/Z1GVWEc/index.mpd

  The media_seg_name is where I prepend the custom seek_point let’s say I want to seek to segment 1233 the template would be :

  -media_seg_name $RepresentationID$/1233_$Number$.m4s

  and the segments would be 1233_1 1233_2 1233_* So I can serve the right segment after seek. but the player does not recover and still downloading subsequent segments. I guess since a new initial segment is generated and I somehow miss headers for continuous playback after seek but I’m probably wrong.

  Thanks for your help

• fate/cbs : Add an SEI test

  8 mai 2018, par Mark Thompson

  fate/cbs : Add an SEI test
  The artificial sample file sei-1.h264 contains five frames (IDR P B I B)
  
  and the following SEI message types :
  
  * Buffering period
  
  * Picture timing
  
  * Pan-scan rectangle (display as 4:3)
  
  * User data registered, containing A/53 closed captions (captions match
  
    frame content, including reordering)
  
  * Recovery point (at the I frame)
  
  * Display orientation (identity transformation)
  
  * Mastering display (with arbitrary contents)
  
  * Undefined SEI type 1234 (containing ascending bytes)
  

  • [DH] tests/fate/cbs.mak
  • [DH] tests/ref/fate/cbs-h264-sei-1