Screen says "Forbidden" after add ip adress LAN networks

[vince44 1]

Hi,

First, excuse for my english. I'm french.

I had an IP adress in the LAN network but it was a bad idea.

Now i have just a screen says Forbidden.

How can I reset this with a command line ?

I am on DSM 6

Thanks a lot

[vince44 1]

I have tried to follow this topic but I didn't find /var/packages/EmbyServer/target/var/config/system.xml

 

[Tandhruil 21]

Hello

I didn't understand your problem.

What have you done exactly ? You've changed your NAS IP address and you can't reach it anymore ?

[vince44 1]

Thanks you.

I added an IP adress in LAN networks in the network settings and now when I try to connect to my emby server I have a white page with the text Forbidden.

[seanbuff 840]

23 minutes ago, vince44 said:

I added an IP adress in LAN networks in the network settings and now when I try to connect to my emby server I have a white page with the text Forbidden.

And if you leave it blank, what happens? That text field is optional only.

[vince44 1]

Thanks

I couldn't have access to the emby ui now so I can't leave it blank. What I 'd like to do is to modify this field with a command line.

I have read that I have to modify system.xml but I don't know where is it.

I also read that the file is in /var/packages/EmbyServer/target/var/config/system.xml but I don't have the file.

 

[vince44 1]

I have sold my problem.

I need to edit the file system.xml.

The curious thing is that Embyserver is installed in /volume1 and the file system.xml is in /volume2.

Thanks for your help

[Luke 37099]

Thanks for the feedback.

[fkolbe 5]

I made the same mistake.  Wondering if in a future release there could be a warning message like "Caution -changing  Lan Settings could prevent you from accessing your EMBY Server-Proceed with Caution". Even better would be some way to regain access to the EMBY Server without having to SSH into your machine to edit the system.xml if you change the lan settings in EMBY.

I'm a causal user of EMBY and certainly do not have any coding or IT skills. As Vince44 mentioned you need to edit the system.xml.  To do this you need to know how to access your device using SSH and how to  edit out the problematic lan settings manually in system.xml. This requires knowledge of a few SSH linux command lines and how to use tools VI to edit and save the file. Wish there would have been an easy way to fix my mistake. 

 

 

 

[Luke 37099]

5 hours ago, fkolbe said:

I made the same mistake.  Wondering if in a future release there could be a warning message like "Caution -changing  Lan Settings could prevent you from accessing your EMBY Server-Proceed with Caution". Even better would be some way to regain access to the EMBY Server without having to SSH into your machine to edit the system.xml if you change the lan settings in EMBY.

I'm a causal user of EMBY and certainly do not have any coding or IT skills. As Vince44 mentioned you need to edit the system.xml.  To do this you need to know how to access your device using SSH and how to  edit out the problematic lan settings manually in system.xml. This requires knowledge of a few SSH linux command lines and how to use tools VI to edit and save the file. Wish there would have been an easy way to fix my mistake. 

 

 

 

Hi, yes that makes sense. Thanks or the feedback.

[Happy2Play 8296]

9 hours ago, fkolbe said:

I made the same mistake.  Wondering if in a future release there could be a warning message like "Caution -changing  Lan Settings could prevent you from accessing your EMBY Server-Proceed with Caution". Even better would be some way to regain access to the EMBY Server without having to SSH into your machine to edit the system.xml if you change the lan settings in EMBY.

I'm a causal user of EMBY and certainly do not have any coding or IT skills. As Vince44 mentioned you need to edit the system.xml.  To do this you need to know how to access your device using SSH and how to  edit out the problematic lan settings manually in system.xml. This requires knowledge of a few SSH linux command lines and how to use tools VI to edit and save the file. Wish there would have been an easy way to fix my mistake. 

 

 

 

Doesn't this cover it?

But don't see a UI way to fix this as you shall/could be completely locked out and require file manipulation.  But access methods shall be platform prevalent.  But it will come back to if you have "localhost" access or not.

Edited January 31, 2023 by Happy2Play

[fkolbe 5]

Thanks for the reply.   Is this the current warning message or a suggested one? The warning message above is misleading. It suggests if you encounter issues you can simply change the setting back to default in the EmbyServer and all will be good. This is not true at least on the Synology NAS.  If you enter in a bad IP address like I did and press Save then you are completely locked out of the EMBYServer.   The EmbyServer becomes completely inaccessible until you SSH into the device and remove the bad lan setting.  In my case, in error, I entered the local IP address of my HD Homerun in the Lan Settings.  Big mistake.

The other thing I found a bit odd was that even when completely uninstalling the EmbyServer it must keep a copy of system.xml somewhere because every time I re-installed Emby on my NAS  the bad  lan settings persisted and I couldn't access EMBY.     Maybe this isn't doable either but wonder if when uninstalling the EmbyServer package from the NAS their could be an option to 'remove all settings'? 

[Happy2Play 8296]

11 minutes ago, fkolbe said:

Maybe this isn't doable either but wonder if when uninstalling the EmbyServer package from the NAS their could be an option to 'remove all settings'? 

Devs will have to comment as to why Uninstall is not the same across all builds as you mentioned Emby programdata is not removed on this platform.

 

But will guess these platforms have their own restrictions.

So all systems that do not have "localhost" access will run into issues requiring SSH intervention.

[Gareth_iowc 1]

I had an issue this evening where users on the local network needed to enter a password each time they logged in on the emby android app. As my emby runs in a different subnet i had a whitelist set in the webui that I stupidly removed and can no longer login as admin.

Can anyone give me an example of how to add 10.10.10.0/24 into the system.xml file? I did attempt a few changes but the file gets over written when docker starts 

[adrianwi 238]

I've made this mistake too!  I'm getting asked for passwords everytime I switch users on the aTV client and started playing with the network settins.  Adding 192.168.0.0/24 into the LAN Settings added this into the system.xml file which then locked out my admin account.  Removing the entry from the system.xml file and restarting fixed this, but there needs to be some warnings here and the onscreen guidance should be much clearer.  After so many betas I'd kind of hoped all this password stuff had been ironed out. I just want any users connecting locally to work without passwords, and passwords just for anyone connecting remotely.  2FA for remote accounts would be a nice option too.  That can't be all that difficult, surely?

[Luke 37099]

5 hours ago, Gareth_iowc said:

I had an issue this evening where users on the local network needed to enter a password each time they logged in on the emby android app. As my emby runs in a different subnet i had a whitelist set in the webui that I stupidly removed and can no longer login as admin.

Can anyone give me an example of how to add 10.10.10.0/24 into the system.xml file? I did attempt a few changes but the file gets over written when docker starts 

Hi, if you're able to get to system.xml, then maybe it's easier to just remove the whitelist so that you can access from whatever device you need to. Then once you've done that, then you can reapply whatever options you need. Does that help?

[Gareth_iowc 1]

I've followed the reset method for my admin user but can still not log in. As i run VLans on my network the emby is on a different subnet 


 

<?xml version="1.0"?>
<ServerConfiguration xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
  <EnableDebugLevelLogging>false</EnableDebugLevelLogging>
  <EnableAutoUpdate>true</EnableAutoUpdate>
  <LogFileRetentionDays>3</LogFileRetentionDays>
  <RunAtStartup>true</RunAtStartup>
  <IsStartupWizardCompleted>true</IsStartupWizardCompleted>
  <EnableUPnP>true</EnableUPnP>
  <PublicPort>8096</PublicPort>
  <PublicHttpsPort>8920</PublicHttpsPort>
  <HttpServerPortNumber>8096</HttpServerPortNumber>
  <HttpsPortNumber>8920</HttpsPortNumber>
  <EnableHttps>false</EnableHttps>
  <IsPortAuthorized>true</IsPortAuthorized>
  <AutoRunWebApp>true</AutoRunWebApp>
  <EnableRemoteAccess>true</EnableRemoteAccess>
  <LogAllQueryTimes>false</LogAllQueryTimes>
  <EnableCaseSensitiveItemIds>true</EnableCaseSensitiveItemIds>
  <PreferredMetadataLanguage>en</PreferredMetadataLanguage>
  <MetadataCountryCode>GB</MetadataCountryCode>
  <SortRemoveWords>
    <string>the</string>
    <string>a</string>
    <string>an</string>
    <string>das</string>
    <string>der</string>
    <string>el</string>
    <string>la</string>
  </SortRemoveWords>
  <LibraryMonitorDelay>60</LibraryMonitorDelay>
  <EnableDashboardResponseCaching>true</EnableDashboardResponseCaching>
  <ImageSavingConvention>Compatible</ImageSavingConvention>
  <EnableAutomaticRestart>true</EnableAutomaticRestart>
  <PreferredDetectedRemoteAddressFamily>InterNetwork</PreferredDetectedRemoteAddressFamily>
  <UICulture>en-GB</UICulture>
  <RemoteClientBitrateLimit>0</RemoteClientBitrateLimit>
  <LocalNetworkSubnets />
  <LocalNetworkAddresses />
  <EnableExternalContentInSuggestions>true</EnableExternalContentInSuggestions>
  <RequireHttps>false</RequireHttps>
  <IsBehindProxy>false</IsBehindProxy>
  <RemoteIPFilter />
  <IsRemoteIPFilterBlacklist>false</IsRemoteIPFilterBlacklist>
  <ImageExtractionTimeoutMs>0</ImageExtractionTimeoutMs>
  <PathSubstitutions />
  <UninstalledPlugins />
  <CollapseVideoFolders>false</CollapseVideoFolders>
  <EnableOriginalTrackTitles>false</EnableOriginalTrackTitles>
  <VacuumDatabaseOnStartup>false</VacuumDatabaseOnStartup>
  <SimultaneousStreamLimit>0</SimultaneousStreamLimit>
  <DatabaseCacheSizeMB>128</DatabaseCacheSizeMB>
  <EnableSqLiteMmio>false</EnableSqLiteMmio>
  <PlaylistsUpgradedToM3U>true</PlaylistsUpgradedToM3U>
  <ImageExtractorUpgraded>true</ImageExtractorUpgraded>
  <EnablePeopleLetterSubFolders>true</EnablePeopleLetterSubFolders>
  <OptimizeDatabaseOnShutdown>true</OptimizeDatabaseOnShutdown>
  <DatabaseAnalysisLimit>400</DatabaseAnalysisLimit>
  <DisableAsyncIO>false</DisableAsyncIO>
  <MigratedToUserItemShares4>true</MigratedToUserItemShares4>
  <MigratedLibraryOptionsToDb>true</MigratedLibraryOptionsToDb>
  <AllowLegacyLocalNetworkPassword>false</AllowLegacyLocalNetworkPassword>
  <EnableSavedMetadataForPeople>false</EnableSavedMetadataForPeople>
  <ProxyHeaderMode>AllAddresses</ProxyHeaderMode>
</ServerConfiguration>

 

[Happy2Play 8296]

38 minutes ago, Gareth_iowc said:

I've followed the reset method for my admin user but can still not log in. As i run VLans on my network the emby is on a different subnet 


 

<?xml version="1.0"?>
<ServerConfiguration xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
  <EnableDebugLevelLogging>false</EnableDebugLevelLogging>
  <EnableAutoUpdate>true</EnableAutoUpdate>
  <LogFileRetentionDays>3</LogFileRetentionDays>
  <RunAtStartup>true</RunAtStartup>
  <IsStartupWizardCompleted>true</IsStartupWizardCompleted>
  <EnableUPnP>true</EnableUPnP>
  <PublicPort>8096</PublicPort>
  <PublicHttpsPort>8920</PublicHttpsPort>
  <HttpServerPortNumber>8096</HttpServerPortNumber>
  <HttpsPortNumber>8920</HttpsPortNumber>
  <EnableHttps>false</EnableHttps>
  <IsPortAuthorized>true</IsPortAuthorized>
  <AutoRunWebApp>true</AutoRunWebApp>
  <EnableRemoteAccess>true</EnableRemoteAccess>
  <LogAllQueryTimes>false</LogAllQueryTimes>
  <EnableCaseSensitiveItemIds>true</EnableCaseSensitiveItemIds>
  <PreferredMetadataLanguage>en</PreferredMetadataLanguage>
  <MetadataCountryCode>GB</MetadataCountryCode>
  <SortRemoveWords>
    <string>the</string>
    <string>a</string>
    <string>an</string>
    <string>das</string>
    <string>der</string>
    <string>el</string>
    <string>la</string>
  </SortRemoveWords>
  <LibraryMonitorDelay>60</LibraryMonitorDelay>
  <EnableDashboardResponseCaching>true</EnableDashboardResponseCaching>
  <ImageSavingConvention>Compatible</ImageSavingConvention>
  <EnableAutomaticRestart>true</EnableAutomaticRestart>
  <PreferredDetectedRemoteAddressFamily>InterNetwork</PreferredDetectedRemoteAddressFamily>
  <UICulture>en-GB</UICulture>
  <RemoteClientBitrateLimit>0</RemoteClientBitrateLimit>
  <LocalNetworkSubnets />
  <LocalNetworkAddresses />
  <EnableExternalContentInSuggestions>true</EnableExternalContentInSuggestions>
  <RequireHttps>false</RequireHttps>
  <IsBehindProxy>false</IsBehindProxy>
  <RemoteIPFilter />
  <IsRemoteIPFilterBlacklist>false</IsRemoteIPFilterBlacklist>
  <ImageExtractionTimeoutMs>0</ImageExtractionTimeoutMs>
  <PathSubstitutions />
  <UninstalledPlugins />
  <CollapseVideoFolders>false</CollapseVideoFolders>
  <EnableOriginalTrackTitles>false</EnableOriginalTrackTitles>
  <VacuumDatabaseOnStartup>false</VacuumDatabaseOnStartup>
  <SimultaneousStreamLimit>0</SimultaneousStreamLimit>
  <DatabaseCacheSizeMB>128</DatabaseCacheSizeMB>
  <EnableSqLiteMmio>false</EnableSqLiteMmio>
  <PlaylistsUpgradedToM3U>true</PlaylistsUpgradedToM3U>
  <ImageExtractorUpgraded>true</ImageExtractorUpgraded>
  <EnablePeopleLetterSubFolders>true</EnablePeopleLetterSubFolders>
  <OptimizeDatabaseOnShutdown>true</OptimizeDatabaseOnShutdown>
  <DatabaseAnalysisLimit>400</DatabaseAnalysisLimit>
  <DisableAsyncIO>false</DisableAsyncIO>
  <MigratedToUserItemShares4>true</MigratedToUserItemShares4>
  <MigratedLibraryOptionsToDb>true</MigratedLibraryOptionsToDb>
  <AllowLegacyLocalNetworkPassword>false</AllowLegacyLocalNetworkPassword>
  <EnableSavedMetadataForPeople>false</EnableSavedMetadataForPeople>
  <ProxyHeaderMode>AllAddresses</ProxyHeaderMode>
</ServerConfiguration>

 

Guessing here as but a server log from startup should show you detected local network addresses.

Do you have Remote access disabled on the user account as the login error is too generic.

 

[Gareth_iowc 1]

Does anyone know how i could add a ip address into the whitelist without using the GUI?

[Luke 37099]

48 minutes ago, Gareth_iowc said:

Does anyone know how i could add a ip address into the whitelist without using the GUI?

If the whitelist is already empty then this is not your solution to restoring access. Adding to the whitelist won't restore your access, it will only block others that don't match the list.

So we'll need to look at your issue from the beginning. What exactly happens when you try to login?

How to Report a Problem

 

[Luke 37099]

@Gareth_iowc?