Emby for Android TV not letting me sign in to the user.

[Raptor6L 28]

Hi all

We've been gifted a new MovieHub Ultra (HY300PRO) which we've set up in the kids room for a bit of school holiday excitement.

I've just downloaded the latest version of Emby (for Android TV) from the Play Store on to it. I've put in the details to get to my server which then brings up both the users that I've set up, but trying to log into either of those users is denied with a message "invalid username or password". The MovieHub is connected to my lan via wifi and it doesn't matter what I try, I cannot get this thing to log in on either user.

Anybody had this before\ know what's going on here? 

Thanks

Chris

[rbjtech 4926]

If you are 100% sure the passwords are good (they are case sensitive) - ensure 'Device Access' is set to 'All' in the users profile.  You may be restricting it to only existing devices ?

[Raptor6L 28]

Hi rbjtech

Definitely sure the passwords are correct.110%.

Where exactly is that "device access" option? I've searched high and low in Emby Server\ Users for it, but cannot locate it in either user profile.

 

[seanbuff 1105]

1 hour ago, Raptor6L said:

Where exactly is that "device access" option? I've searched high and low in Emby Server\ Users for it, but cannot locate it in either user profile.

Scroll to the very bottom of the 'Access' tab of each user profile.

[Raptor6L 28]

Thanks seanbuff

I thought I looked there but must have missed it. Will have another look in the morning.

[ebr 15580]

Hi.  If that doesn't work, there should be a "Send Logs" button on the login screen.  Please press that after getting the error and then come here and tell me exactly what time you did that and also provide the server log.

Thanks.

[Raptor6L 28]

9 hours ago, seanbuff said:

Scroll to the very bottom of the 'Access' tab of each user profile.

I've only got 1 option to tick in the access tab:

[Raptor6L 28]

6 hours ago, ebr said:

Hi.  If that doesn't work, there should be a "Send Logs" button on the login screen.  Please press that after getting the error and then come here and tell me exactly what time you did that and also provide the server log.

Thanks.

Thanks ebr, I'll have a play with it this afternoon and come back with what info I can gather.

[Raptor6L 28]

embyserver.txt

@ebr- 12:55pm I sent logs from the Movie Hub. I tried to sign in directly before that, so 12:54-12:55.

Attached are the server logs.

Thank you!

Chris

[ebr 15580]

Sorry, can you please try again with debug logging enabled on your server?

It looks like something on your network or the device is blocking the connection as I don't think the login attempt is ever getting to your server but I need debug logging to confirm.

[Raptor6L 28]

Hi @ebr

No problem. Set it all up and tried again @ 10:04am and sent through the log from the MovieHub then.

Server logs attachedembyserver.txt

Going off your suggestion that something on my network is blocking access, I've reviewed my router settings and cannot see any rules there that would block it. I have other phones and ipads that all connect through correctly. It's giving me access to my server to pick a user, just not letting me sign into a user, so didn't think it was a network issue.

Thanks ebr

Chris

[rbjtech 4926]

14 hours ago, Raptor6L said:

Hi @ebr

No problem. Set it all up and tried again @ 10:04am and sent through the log from the MovieHub then.

Server logs attached embyserver.txt 50.69 kB · 0 downloads

Going off your suggestion that something on my network is blocking access, I've reviewed my router settings and cannot see any rules there that would block it. I have other phones and ipads that all connect through correctly. It's giving me access to my server to pick a user, just not letting me sign into a user, so didn't think it was a network issue.

Thanks ebr

Chris

Agreed - if it could not even find the emby server then maybe - but the emby logon prompt and users are showing - and it returns a message when it fails to login - so I don't believe anything is blocking at a network layer - this is an application layer problem imo.

re Device Access not showing  - This must be an admin account ?   Fot admin accounts, this option does not show.

Edited January 13 by rbjtech

[ebr 15580]

Still looks to me like something on the network or device is interfering - but only with the login call.

On the device, we see the request to get the user list succeed but the attempt to login gets this:

System.out: VolleyError com.android.volley.NoConnectionError: java.net.SocketException: Connection reset

And the request to login never gets to your server. 

Are you sure you don't have any ad blockers or VPN or anything like that on this device?

[Raptor6L 28]

@rbjtech ahh, admin account, that I will need to check.Thinking about it, yes our "Home" account probably is, which means the "Away" account probably is too and shouldn't be. Thanks, that's raised something separate I need to address. 

@ebrNah, no blockers that I'm aware of. The projector device itself is fairly simple. I'll have another troll through the settings but, like I've said earlier, it's on my wifi network and it connects to the server, so my impression is it's done all that it should have to do.

My network set up is fairly new to me and more advanced than my previous set up, but I've got it completely open at the moment, so there should be nothing impeding any wifi/ lan traffic. I'll have another look at it as well, but all other mobile devices connected to my wifi have no problems hooking up with Emby, so I'm not sure why this one particular device would be singled out..... clearly it is though.

Thanks

Chris

 

[Raptor6L 28]

Righto, I remembered I've got a NIC to USB device on another computer, so I stolz that and plugged it into the projector and presto we have wired lan, and yep the login then worked. So @ebr it looks like you were right, there's something fishy with my WIFI, or at the very least there is something about my wifi set up that this thing doesn't like,  but what that could be I've got no idea as everything else is going strong. If I find out what that is, I'll post back and add to the knowledge base, but looks like Emby is in the clear with this one.

Thanks for the efforts @rbjtech @ebr

Chris

 

[rbjtech 4926]

6 hours ago, Raptor6L said:

Righto, I remembered I've got a NIC to USB device on another computer, so I stolz that and plugged it into the projector and presto we have wired lan, and yep the login then worked. So @ebr it looks like you were right, there's something fishy with my WIFI, or at the very least there is something about my wifi set up that this thing doesn't like,  but what that could be I've got no idea as everything else is going strong. If I find out what that is, I'll post back and add to the knowledge base, but looks like Emby is in the clear with this one.

Thanks for the efforts @rbjtech @ebr

Chris

 

Glad to hear it's fixed.   

Looking at the log above (sorry, didn't look at it before, now I'm intrigued..) - your emby server (wired) is on 192.168.10.x, your wifi appears to be on 192.168.20.x  - so, depending on your subnet size, this 'may' be the same network, but it's likely not.   If your subnet mask is 255.255.255.0 for each network, (a /24 or a single Class C Network - 255 Hosts) then they are actually seperate networks - and thus need routing between them.   If this is all part of the 'out the box' settings on the router - then this makes sense - and there may well be 'something' blocking the routing, there may be a firewall or some sort of ACL inbetween them for starters.    If the subnet mask is 255.255.0.0 - (a /16 or 65,534 Hosts..) then they are the 'same' network and do not need routing.

By using the USB dongle/wired - you are directly on the 192.168.10.x network - thus no routing issues. 

[Raptor6L 28]

@rbjtechyep, I have wifi and wired on different vlans but when I ran into this issue I activated an ACL (top of the list) to allow all traffic between these 2 vlans, so it shouldn't have an impact. I think if it did, it wouldn't be able to see the server at all.?.

I was wondering if it was Bitdefender, but I couldn't find any evidence that it was blocking anything.

Now that I've logged in, I've disconnected the wired LAN and switched back to wifi and Emby worked fine. I tested it by signing out and the issue raised its head when I tried to sign back in. Worth a try. Wired it back up and signed in again.

When I have the time, I'll continue to play with it to see if I can figure it out.

Cheers 

Chris 

[ebr 15580]

4 hours ago, Raptor6L said:

I'll continue to play with it to see if I can figure it out

As additional clues for you, the requests that were succeeding were GETs and the one that failed to connect was a POST.  This was why I was thinking something could be interfering.

[Raptor6L 28]

Thanks @ebrWould you mind briefly explaining the difference between the two? Is it like traffic direction?

[Raptor6L 28]

Actually I think I understand what the difference is now. Did a bit of Googling. So the GET part is the client requesting the list of users on the server, which we know is good, and the POST part is the client passing credentials on to the server for it to verify and that's what is failing. Probably over simplifying but sound right?

[ebr 15580]

Just now, Raptor6L said:

Actually I think I understand what the difference is now. Did a bit of Googling. So the GET part is the client requesting the list of users on the server, which we know is good, and the POST part is the client passing credentials on to the server for it to verify and that's what is failing. Probably over simplifying but sound right?

Correct. But it is not failing the the way I would normally expect - like with a bad response from the server because something stripped out the POST data.  Instead it is completely unable to reach the server - as if something on the device or network is preventing http POST entirely.

[Raptor6L 28]

Got it, thanks for that. I'll have a play with it in my spare time. It has to be something to do with the network. 

[rbjtech 4926]

So I run different VLAN's myself - I simply route it via the firewall - so I allow TCP 8096 from one VLAN to the other.   The source network is of course the client network, the destination is the emby server network.   Do not allow it the other way, as the emby server should never be pushing (initiating) a request to the client.   Note for 'discovery' over different VLAN's - then you also need to forward the UDP port as well, but I never bothered, leaving discovery only working on the emby server vlan - all other vlan's need to enter the IP address directly.

From a security point of view, allowing all traffic from one vlan to the other via an ACL is a big no-no, but from a network perspective, the traffic is still segmented so it serves a purpose.

[Luke 39666]

@Raptor6Lhas this helped?

[Raptor6L 28]

Hi @Lukemost definitely! I haven't found the root cause yet but both @ebr and @rbjtech have helped identify that it's not an Emby issue and pointed me in the right direction with my network. I can't put the time in to find the cause for a couple of weeks, but when I get to the bottom of it, I'll post it up.

Chris