Adding encrypted username and password for rtsp stream

[afenne4]

Hi I am new to mediamtx, and I am currently running mediamtx on my raspberry pi 4 using the picam v3 and am able to view the stream on another computer on vlc using the following code in the paths section

paths:
  cam1:
    runOnInit: bash -c 'rpicam-vid -t 0 --camera 0 --nopreview --codec yuv420 --width 1280 --height 720 --inline --listen -o - | ffmpeg -f rawvideo -pix_fmt yuv420p -s:v 1280x720 -i /dev/stdin -c:v libx264 -preset ultrafast -tune zerolatency -f rtsp rtsp://localhost:$RTSP_PORT/$MTX_PATH'
    runOnInitRestart: yes
  

I was wanting to add a username and password authentication by following this documentation. I add in a user name and password to the authInternalUsers section, but an unable to view the stream in vlc.

authInternalUsers:
  # Default unprivileged user.
  # Username. 'any' means any user, including anonymous ones.
- user: myusername
  # Password. Not used in case of 'any' user.
  pass: mypassword
  # IPs or networks allowed to use this user. An empty list means any IP.
  ips: []
  # List of permissions.
  permissions:
    # Available actions are: publish, read, playback, api, metrics, pprof.
  - action: publish
    # Paths can be set to further restrict access to a specific path.
    # An empty path means any path.
    # Regular expressions can be used by using a tilde as prefix.
    path:
  - action: read
    path:
  - action: playback
    path:

I use the following url to connect to the stream in vlc

rtsp://myusername:[email protected]:8554/cam1

192.168.1.111 is the ip address of the rpi hosting the stream.

I have tried leaving the path part of the configuration yaml the same in addition to adding adding the username and password in the path and both didn't work. I also tried adding $user and $pass in place of myusername and mypassword but that didn't work. Not sure how to incorporate the username and password into the path or if that is even necessary.

paths:
  cam1:
    runOnInit: bash -c 'rpicam-vid -t 0 --camera 0 --nopreview --codec yuv420 --width 1280 --height 720 --inline --listen -o - | ffmpeg -f rawvideo -pix_fmt yuv420p -s:v 1280x720 -i /dev/stdin -c:v libx264 -preset ultrafast -tune zerolatency -f rtsp rtsp://myusername:mypassword@localhost:$RTSP_PORT/$MTX_PATH'
    runOnInitRestart: yes

This is the output when I try to connect in vlc with the added username and password

2025/01/11 16:51:12 INF MediaMTX v1.11.0
2025/01/11 16:51:12 INF configuration loaded from /home/Tweet4381/mediamtx/mediamtx.yml
2025/01/11 16:51:12 INF [path cam1] runOnInit command started
2025/01/11 16:51:12 INF [RTSP] listener opened on :8554 (TCP), :8000 (UDP/RTP), :8001 (UDP/RTCP)
2025/01/11 16:51:12 INF [RTMP] listener opened on :1935
2025/01/11 16:51:12 INF [HLS] listener opened on :8888
2025/01/11 16:51:12 INF [WebRTC] listener opened on :8889 (HTTP), :8189 (ICE/UDP)
2025/01/11 16:51:12 INF [SRT] listener opened on :8890 (UDP)
ffmpeg version 5.1.6-0+deb12u1+rpt1 Copyright (c) 2000-2024 the FFmpeg developers
  built with gcc 12 (Debian 12.2.0-14)
  configuration: --prefix=/usr --extra-version=0+deb12u1+rpt1 --toolchain=hardened --incdir=/usr/include/aarch64-linux-gnu --enable-gpl --disable-stripping --disable-mmal --enable-gnutls --enable-ladspa --enable-libaom --enable-libass --enable-libbluray --enable-libbs2b --enable-libcaca --enable-libcdio --enable-libcodec2 --enable-libdav1d --enable-libflite --enable-libfontconfig --enable-libfreetype --enable-libfribidi --enable-libglslang --enable-libgme --enable-libgsm --enable-libjack --enable-libmp3lame --enable-libmysofa --enable-libopenjpeg --enable-libopenmpt --enable-libopus --enable-libpulse --enable-librabbitmq --enable-librist --enable-librubberband --enable-libshine --enable-libsnappy --enable-libsoxr --enable-libspeex --enable-libsrt --enable-libssh --enable-libsvtav1 --enable-libtheora --enable-libtwolame --enable-libvidstab --enable-libvorbis --enable-libvpx --enable-libwebp --enable-libx265 --enable-libxml2 --enable-libxvid --enable-libzimg --enable-libzmq --enable-libzvbi --enable-lv2 --enable-omx --enable-openal --enable-opencl --enable-opengl --enable-sand --enable-sdl2 --disable-sndio --enable-libjxl --enable-neon --enable-v4l2-request --enable-libudev --enable-epoxy --libdir=/usr/lib/aarch64-linux-gnu --arch=arm64 --enable-pocketsphinx --enable-librsvg --enable-libdc1394 --enable-libdrm --enable-vout-drm --enable-libiec61883 --enable-chromaprint --enable-frei0r --enable-libx264 --enable-libplacebo --enable-librav1e --enable-shared
  libavutil      57. 28.100 / 57. 28.100
  libavcodec     59. 37.100 / 59. 37.100
  libavformat    59. 27.100 / 59. 27.100
  libavdevice    59.  7.100 / 59.  7.100
  libavfilter     8. 44.100 /  8. 44.100
  libswscale      6.  7.100 /  6.  7.100
  libswresample   4.  7.100 /  4.  7.100
  libpostproc    56.  6.100 / 56.  6.100
2025/01/11 16:51:38 INF [RTSP] [conn 192.168.1.247:48960] opened
2025/01/11 16:51:38 INF [RTSP] [conn 192.168.1.247:48960] closed: no one is publishing to path 'cam1'
2025/01/11 16:51:38 INF [RTSP] [conn 192.168.1.247:48970] opened
2025/01/11 16:51:38 INF [RTSP] [session 369192fc] created by 192.168.1.247:48970
2025/01/11 16:51:38 INF [RTSP] [conn 192.168.1.247:48970] closed: invalid SETUP path. This typically happens when VLC fails a request, and then switches to an unsupported RTSP dialect
2025/01/11 16:51:38 INF [RTSP] [session 369192fc] destroyed: not in use

[afenne4]

Apparently I just needed to reboot the pi and things worked when I set up the path to have an rtsp stream with the username and password. I tried to do the sha encryption and use that in the path for the rtsp stream, but it did not work. Is there something I need to do in order to pass the sha encrypted username and pw to the rtsp stream?