Differences

This shows you the differences between two versions of the page.

--- tutorials:mairlistdb:mairlistdb-server [2014/09/26 12:42] – [Self-signed certificate with SSLBuddy] tw
+++ tutorials:mairlistdb:mairlistdb-server [2021/07/02 06:17] (current) – [Adding Users] VT DJ ulinobbe
@@ Line 1: / Line 1: @@
 ====== mAirListDB Server ======
-A networked mAirListDB set involves two types of servers:
+mAirListDB Server is an application that allows you to share a mAirListDB over the public Internet.
-  * An SQL server (PostgreSQL, MSSQL) to hold the metadata for the audio files and scheduling information (library, playlists)
+===== Background =====
+A networked mAirListDB setup involves two types of servers:
+  * An SQL server (PostgreSQL, MSSQL, MySQL) to hold the metadata for the audio files and scheduling information (library, playlists)
   * One or more network drives where the actual audio files are located
@@ Line 56: / Line 60: @@
   * A working mAirListDB connection. The database must be set up properly in the mAirList configuration. Ensure that everything is working fine when using the mAirListDB app on the server computer.
-  * A compatible license. Currently mAirListDB Server is included in mAirList Professional Studio and mAirList Professional Studio Plus. (Please contact us if you need the server as a standalone license.)
+  * A compatible license. Currently mAirListDB Server is included in mAirList Professional Studio. (Please contact us if you need the server as a standalone license.)
+  * Server and client must be (roughly) the same version; it is not possible to mix a mAirList 5.x server with a mAirList 6.x client, for instance.
 mAirListDB Server is built into the main executable (mAirList.exe) and is part of any mAirList installation.
@@ Line 73: / Line 78: @@
 Before a client can connect to the server, you must add user to the account database. Go to the //Users// tab to see the current user list (should be empty at this point):
+{{ dbserver-users.png }}
 Then click //Add// to add a new user:
-{{ dbserver-users.png }}
 {{ dbserver-edituser.png }}
+The user must have a name and a password. You can either type a password or have mAirList generate a random password for you.
+The available //User Levels// correspond to the security roles used by mAirListDB:
+  * Read-only
+  * Studio (Read-only + write access to playlist history table)
+  * DJ (Studio + create/edit playlists)
+  * VT DJ (DJ + uploading voicetracks to the database)
+  * Folder Manager (DJ + move items between folders in Library)
+  * Manager (Folder Manager + full Library editing)
+  * Administrator (Manager + full configuration rights)
 ===== Using HTTPS/SSL =====
+mAirListDB Server supports SSL encrypted connections over HTTPS. We recommend to enable the HTTPS server and only use encrypted connections when accessing the server from the Internet. The HTTPS server runs on a different port (default: 9840) than the unencrypted HTTP server.
+mAirListDB Server needs a set of SSL certificate files to work:
+  - A certificate file (the public part of the certificate)
+  - A key file (the secret part of the certificate)
+  - A root certificate (the certificate of the authority that issued our certificate)
+You can either obtain a "real", paid certificate from a commercial certification authority (CA), or you can create a free self-signed certificate. See below for instructions on how to create a self-signed certificate with SSL Buddy. **The client side of mAirList does not verify the certificate chain currently, so a self-signed certificate will work fine as long as you only use mAirList on the client side.**
+All certificates must be in PEM format. The file extension depends on the software that was used to create the certificate and key: ''*.pem'', ''*.cer'', ''*.key'', ...
 ==== Self-signed certificate with SSL Buddy ====
-SSL Buddy is a Windows tool that lets you easily create self-signed certificates. You can download it here: [http://www.atozed.com/intraweb/blog/20100413.EN.aspx]
+SSL Buddy is a Windows tool that lets you easily create self-signed certificates. You can download it here: <del>http://www.atozed.com/intraweb/blog/20100413.EN.aspx</del>
+Edit 2015-03-31: Original download link for SSL Buddy seems to be dead at the moment - here's an alternative link: http://download.mairlist.com/other/sslbuddysetup.exe
 After the installation, run SSL Buddy and follow these steps to create a certificate for your mAirListDB server. (See screenshots below for a visual walkthrough.)
@@ Line 91: / Line 123: @@
   - Select 1024 or 2048 bit key size, and enter your e-mail address, then click //Next//.
   - Enter you country, state and city, then click //Next//.
-  - Enter the domain name - //this should match the public IP or FQDN hostname under which the clients will access the server later//. Also enter your business name (or your personal name) and the directory in which the key and certificate should be saved. Then click //Next//.
+  - Enter the domain name - **this should match the public IP or FQDN hostname under which the clients will access the server later**. Also enter your business name (or your personal name) and the directory in which the key and certificate should be saved. Then click //Next//.
   - A message will appear saying that the certificate has been created. You will find the certificate (''domainname.cer'') and the key file (''domainname.key'') in the output directory you specified.
@@ Line 108: / Line 140: @@
 ====== Setting up the mAirListDB Client computer ======
+===== Connection setup =====
+On the client computer, follow these steps to add a connection to the mAirListDB Server:
+  - Open mAirList Configuration.
+  - Go to //Databases//.
+  - Click //Add//, then select //mAirListDB (Internet Client)//.
+  - In the dialog that appears, enter hostname, port, SSL or not, user and password. **Note:** In more recent versions of mAirList, a randomized one-time token is used for authentication to the server. In order to generate the token, click //Sign In//, enter user name and password, and a token will be requested from the server and entered into the input field.
+  - Click OK to save.
+{{ :tutorials:mairlistdb:pasted:20140926-150146.png }}
+Now you can run the mAirListDB app, or use the database connection from within the playout window.
+===== Audio file caching (optional) =====
+Sometimes it's a good idea to keep a synchronized copy of all of your audio files on the client computer, especially when broadcasting from a location with a slow internet connection.
+If you have such a synchronized copy of any audio storage folder, you can go to the //Storages// section of the database connection dialog, edit the particular storage and set the //Cache folder// to the folder where the synchronized copy is located:
+{{ :tutorials:mairlistdb:pasted:20160823-093832.png }}
+Now when mAirList needs an audio file for playback, it will first check if it's in the cache folder, and only if it's not, the file will be transferred via HTTP. This will save a lot of bandwith.